Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
File: dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft (raw, json)
Hash identifier: QEv+xqFTKDFtYUuHO6A5DADB9eksUWGRtWTJBJ/bPdM=
Subject key identifier: 0F:54:8E:3D:02:91:90:20:C1:EB:8F:51:DD:E0:05:03:59:4A:1B:4C
Authority key identifier: 75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
Certificate issuer: /CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Certificate serial: 019D39AF1391B5E419F99B53EBD9591B226F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
Manifest number: 05AA
Signing time: Sun 29 Mar 2026 13:01:08 +0000
Manifest this update: Sun 29 Mar 2026 13:01:08 +0000
Manifest next update: Mon 30 Mar 2026 13:01:08 +0000
Files and hashes: 1: Ey3NVFNZGCHqRvki0g7r8C0_gMY.roa (hash: l3PwDzdUu8sAqi7VNj0H3fSsXYCfHAzMO+z2/d+bwfM=)
2: dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl (hash: 2ioFL5nLRWiYSQW1BWNBtoNiiXt5HP8QcBMLBi8v6hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:13:91:b5:e4:19:f9:9b:53:eb:d9:59:1b:22:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Validity
Not Before: Mar 29 13:01:08 2026 GMT
Not After : Mar 30 13:01:08 2026 GMT
Subject: CN=0f548e3d02919020c1eb8f51dde00503594a1b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:b8:3c:35:c8:35:29:84:e4:88:c5:bc:89:
8f:14:ab:5b:2c:52:4a:d5:d9:bc:cb:61:d9:80:b9:
2f:b5:5b:16:e1:3f:15:12:a2:ce:f2:8e:0b:10:b4:
d6:ea:c9:a1:b1:44:fb:9c:26:4b:96:33:f9:05:8f:
12:2f:48:8f:9e:0f:b3:5d:e5:e7:7a:10:17:d3:1d:
ad:7b:48:1d:03:88:be:75:0a:69:4a:50:17:5c:a4:
02:f2:46:52:ee:ee:92:41:35:b6:3c:76:28:be:25:
aa:19:9f:8a:c3:7c:70:50:b5:5b:59:8a:d8:94:6f:
85:46:43:ec:c4:2a:70:58:a4:58:c7:79:d5:28:25:
32:de:75:51:bb:d5:34:cf:20:b5:c7:f5:3f:fd:82:
4b:9f:f1:22:ce:60:b6:2e:14:68:f8:7e:b8:e4:2d:
42:d2:be:9d:b6:a5:a7:bc:5f:50:fa:21:5c:2c:c0:
9d:8c:ca:4b:4e:ad:3b:75:c7:68:fe:aa:5b:91:96:
de:26:f6:2d:a8:83:61:97:72:8d:c8:49:64:dd:18:
be:77:4a:4d:d0:ed:72:66:19:a0:43:d2:19:fa:82:
84:29:63:a2:c5:8d:e3:db:4b:c1:0a:38:f9:59:b7:
3f:89:36:6f:6a:62:7a:5a:6b:88:f6:ee:73:4d:d2:
f1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:54:8E:3D:02:91:90:20:C1:EB:8F:51:DD:E0:05:03:59:4A:1B:4C
X509v3 Authority Key Identifier:
keyid:75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:6a:4c:49:22:7c:22:ca:c8:bf:c3:cd:a0:a5:c0:4d:10:92:
bd:8d:fa:bd:ea:20:a8:15:ff:dc:f6:1b:44:b2:a0:54:36:1d:
0a:7c:0c:d4:7d:a5:34:57:03:0a:f5:eb:51:8f:a2:80:2e:f1:
ae:00:ed:09:98:cf:2e:6d:09:85:72:d3:1d:b7:7a:55:c6:74:
ba:0d:45:3d:56:6b:40:c1:7d:d4:f1:64:31:fb:1c:7f:75:ff:
de:65:79:45:04:c1:79:b4:d3:1e:0c:b3:e2:fc:75:ca:17:8f:
10:2b:66:6d:8a:03:2a:cd:03:df:db:a0:cb:82:04:e4:e6:5c:
f8:9d:5e:cd:bf:55:0f:a3:50:74:ed:b2:3b:45:2c:94:81:2a:
0f:16:8d:c1:6f:43:34:30:24:38:22:ec:b5:e6:45:29:79:a0:
4e:5b:25:5b:9e:23:8c:9b:01:50:36:de:bf:7e:b9:00:56:89:
30:8c:97:7b:a0:a5:de:6c:e9:23:01:ef:f5:44:d1:f0:ea:c2:
c1:64:cb:fe:65:87:3c:88:cd:01:ef:fe:42:bf:cb:fe:6a:42:
c0:01:58:80:d2:e4:1f:53:90:75:bc:7e:6a:b2:39:65:43:f9:
58:23:ed:b4:1b:12:76:ee:81:20:59:5c:72:dd:e1:01:aa:87:
5c:21:02:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:43 2026 by rpki-client