Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
File: DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json)
Hash identifier: IdJdNuRcM8fxmqOzpJTpffBWTdHDvlTCWZ6tc2kBhqg=
Subject key identifier: 1A:89:12:30:07:84:03:F3:DD:D3:5F:BF:12:6A:29:F7:B5:83:E4:69
Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
Certificate issuer: /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Certificate serial: 019D3977A26F188FB9A16E302910FE347F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
Manifest number: 11B9
Signing time: Sun 29 Mar 2026 12:00:34 +0000
Manifest this update: Sun 29 Mar 2026 12:00:34 +0000
Manifest next update: Mon 30 Mar 2026 12:00:34 +0000
Files and hashes: 1: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: Yzswj1bCnXLZyqkjrGomHX1q+DCIgX8uJ6LpMYOP+aE=)
2: gYAU9kG86HbZ3YtQGu5MLj44xqI.roa (hash: vR6PgJKynGl8VT8dHy4Fb3OUdFphSgnDlBXNAPZOxik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:a2:6f:18:8f:b9:a1:6e:30:29:10:fe:34:7f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Validity
Not Before: Mar 29 12:00:34 2026 GMT
Not After : Mar 30 12:00:34 2026 GMT
Subject: CN=1a891230078403f3ddd35fbf126a29f7b583e469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:f3:b0:8b:1e:29:1f:c4:f9:a9:1d:d9:54:
d1:a2:d9:a8:c3:34:df:db:a2:fd:4c:64:e3:fb:18:
83:09:16:8e:ce:e4:0c:50:57:16:23:aa:45:82:54:
78:66:25:35:1a:e2:de:67:87:b3:ea:66:2a:65:16:
c7:c3:c3:b6:a0:42:dc:52:d3:42:b8:c4:89:b8:d4:
cd:1e:c4:02:b9:09:ca:ea:39:e2:6a:e6:eb:72:c2:
af:2e:2f:1c:f8:f6:91:f5:04:39:42:ae:2c:c7:ce:
f4:81:9d:a3:de:32:56:60:b2:42:2e:00:8d:dd:cf:
87:7d:72:0d:c2:a2:4a:d4:99:f2:da:9c:d7:e5:80:
8a:c7:af:53:95:c7:ce:9f:15:84:93:05:8a:e7:3a:
cc:bc:a2:88:02:2c:87:ba:d4:e4:e1:a1:65:da:21:
db:38:c2:40:46:4c:86:0e:2e:b4:a9:32:13:bf:6f:
d7:f0:d7:78:ef:74:2c:e9:08:f9:39:01:99:9c:24:
1f:4c:81:2f:95:b0:0b:ef:36:0f:b2:18:60:65:7b:
5d:66:56:d4:23:6b:e7:b2:0e:ca:38:56:fc:ce:94:
79:9c:18:8c:ed:30:68:bd:b1:16:b2:56:cd:76:1c:
d7:03:a7:83:83:5e:7c:e3:46:58:3c:7b:65:7a:ce:
1c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:89:12:30:07:84:03:F3:DD:D3:5F:BF:12:6A:29:F7:B5:83:E4:69
X509v3 Authority Key Identifier:
keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3d:49:45:e8:de:d2:d2:db:46:3d:96:1b:0e:5b:c8:dc:06:
68:ad:06:00:bb:fd:9b:52:4e:68:be:81:4f:54:88:6f:48:1a:
48:67:37:20:c7:da:79:d4:6b:bc:8a:48:c9:04:88:ea:86:ae:
98:63:cf:b2:36:ae:74:5a:c2:8e:07:ba:25:72:80:76:15:fe:
ad:eb:47:ac:a8:e7:81:d5:52:e5:fc:c1:3b:62:19:d8:64:f2:
0d:06:67:9a:98:4a:2b:f9:3e:9e:a5:13:ea:55:fe:bd:f5:2b:
bd:cb:0f:92:d4:81:fd:ba:a5:34:c6:f7:63:32:28:d8:ef:70:
af:14:2f:32:9c:12:a2:8b:25:86:96:27:58:20:d8:0d:30:65:
47:ba:04:3a:d0:ac:86:a8:95:36:62:59:1d:db:88:8a:64:af:
34:b0:62:89:5b:fb:19:73:06:ca:49:fd:1e:4e:5e:22:58:54:
4f:3f:c9:cf:f7:68:c3:a1:bc:1c:a3:8e:fe:cd:34:10:1c:08:
39:7b:67:36:26:94:ab:b2:2f:82:71:e6:e9:05:73:2f:a7:d7:
fd:ff:42:f4:a2:76:7d:f2:d3:dd:d5:50:cd:63:ac:93:0d:bd:
21:54:e8:88:81:77:86:eb:07:cd:4a:91:15:b0:7b:8c:61:83:
1d:77:49:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:27:59 2026 by rpki-client