Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
File: DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json)
Hash identifier: BMhd+0YV4PEwg9mhmuExmYR2dYnF0PHlRbRiLNzS9h8=
Subject key identifier: B3:0D:91:98:2C:FA:86:2D:1E:E8:A3:68:F8:75:A0:2D:8B:29:DB:09
Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
Certificate issuer: /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Certificate serial: 019F18680EAF06B8F59EE076764479A0AAD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
Manifest number: 12B1
Signing time: Tue 30 Jun 2026 12:01:40 +0000
Manifest this update: Tue 30 Jun 2026 12:01:40 +0000
Manifest next update: Wed 01 Jul 2026 12:01:40 +0000
Files and hashes: 1: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: bHgzR/5F3W/VHt3gRJcrbV1GLoirzMDKSG94x3tHyZY=)
2: gYAU9kG86HbZ3YtQGu5MLj44xqI.roa (hash: vR6PgJKynGl8VT8dHy4Fb3OUdFphSgnDlBXNAPZOxik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:68:0e:af:06:b8:f5:9e:e0:76:76:44:79:a0:aa:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Validity
Not Before: Jun 30 12:01:40 2026 GMT
Not After : Jul 1 12:01:40 2026 GMT
Subject: CN=b30d91982cfa862d1ee8a368f875a02d8b29db09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e2:a9:fa:51:28:0e:ca:90:74:60:15:2e:81:
5a:ae:49:82:13:20:1f:83:11:2c:4d:9a:6a:46:76:
03:2d:68:ca:ec:8f:df:48:27:9f:0f:9d:96:31:8c:
6f:3d:98:05:d8:d4:65:95:df:ac:28:57:47:8b:9a:
eb:2d:5a:89:ee:fa:6b:50:b0:99:cb:6b:d2:6c:97:
96:19:79:98:27:00:c2:c7:ab:c0:5a:e1:55:3b:c5:
c0:b6:43:4a:c3:4f:cc:db:1b:90:06:92:7d:ce:95:
e3:5e:c4:a6:da:b9:6b:a6:5f:98:f6:64:d8:73:0a:
ce:94:d9:cb:b7:52:e1:b2:07:51:34:f9:e3:83:2a:
24:fd:68:7f:ac:c2:95:a5:d4:2f:c3:40:c9:63:3d:
84:29:89:87:da:d9:60:5f:60:39:ad:f6:e4:2c:4d:
23:f9:a6:a3:17:be:07:91:31:d2:1e:4e:3e:cf:fc:
6b:67:59:3b:b2:fe:32:e5:fc:bc:34:e9:af:93:76:
fd:99:3c:06:6a:ed:4c:91:74:45:ff:74:3c:bb:5b:
81:17:8c:ea:01:06:4d:ff:0e:e0:31:75:43:53:b4:
f4:20:a2:68:69:a2:24:3c:3d:ce:4f:0f:71:08:0f:
69:d5:22:2f:19:1e:ec:7d:86:2c:af:0a:02:c2:2a:
2c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0D:91:98:2C:FA:86:2D:1E:E8:A3:68:F8:75:A0:2D:8B:29:DB:09
X509v3 Authority Key Identifier:
keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:b6:0c:14:ba:82:b4:a8:6a:9d:55:d3:12:43:7d:0d:ef:d0:
5c:13:c4:ea:39:36:46:4a:a5:3a:70:c0:da:64:c9:b5:b0:3f:
d6:76:ce:89:8d:43:66:f5:1b:7a:0b:db:a4:41:25:72:0c:87:
f7:63:ad:15:e9:ef:4d:57:c6:fa:26:01:39:12:58:32:8c:43:
e0:ce:ef:46:bb:9c:1c:4a:b2:8f:e7:1c:00:91:52:ab:49:b2:
81:e7:3f:e5:55:26:1c:f5:8a:41:0b:bf:d1:e5:d0:8a:05:e2:
d0:4f:7c:ec:e7:9c:5e:8a:4e:23:69:3b:68:24:55:d0:42:01:
15:2c:fe:cf:8f:1f:36:a2:df:8d:b8:95:21:38:b9:e6:87:f4:
8c:99:91:39:69:a1:1a:11:73:65:41:e3:2a:f7:79:2f:f7:a8:
f8:41:31:a6:09:41:38:48:de:36:88:6c:b2:19:3c:29:7f:05:
52:59:e0:3f:2c:26:b8:e0:56:72:53:6f:bf:d5:90:fa:51:d9:
e5:b3:40:05:df:47:fa:4c:9b:f1:fb:75:41:3a:78:3f:a6:9e:
66:5f:7f:c3:07:21:a9:82:4e:b4:80:a6:16:d9:16:fd:b4:4d:
a2:a7:c5:3b:ba:28:0b:70:0d:d8:01:98:20:d6:ae:3a:6f:fd:
ec:9b:e9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:31:35 2026 by rpki-client