Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
File: deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json)
Hash identifier: CbbeYXc4zzh6w2SQLraTyz2SlWlCjHDQ0/r5PaHGo6Y=
Subject key identifier: 93:D7:AE:F9:2F:DB:51:1C:45:EA:04:56:2C:DE:C3:76:7B:F9:56:2B
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial: 019CEECB86A9D8649EAC255E5784839BC355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
Manifest number: 1874
Signing time: Sun 15 Mar 2026 00:00:41 +0000
Manifest this update: Sun 15 Mar 2026 00:00:41 +0000
Manifest next update: Mon 16 Mar 2026 00:00:41 +0000
Files and hashes: 1: IKecYpJsyQoCMXhzFQm8qwezc6Q.roa (hash: AyBWoAIIW8QVXSZmJhv+7IehUMdxfXtLu4x8wnOD+Zo=)
2: Niz0xaF_UJO5sK6yvy3cMVF07nA.roa (hash: l65DOQXiJc/vw8R7nLx1kl+6tdgkTZuIaNzOHJm95Zo=)
3: WFTfI5tspGo4Ss0OCZAL-JGWw3k.roa (hash: ygHs+fWVxGVJnQRLr2/Xp2LQTIWtPolhwTvnQdcJhwg=)
4: Wrrx-J8255kGZZQo2Z_lshL_g94.roa (hash: RJwUNDcFiRkR23EOeiZYpldoRJTn3DHSqOqjyT0fbkQ=)
5: cKp2OZnMQ6gfuVdFBIpAAe-tLzE.roa (hash: mbO9zdERKtIWiDiD8x4e0EjpaANpcC71gfDZ39R7GH8=)
6: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: y90T6H/oDZrsjagvb+yhMlJsolLTDSCtysqalYz21eY=)
7: p6DmQaVdSnpO0418vCwa-3h5IyU.roa (hash: oLcwvSqddOQ2Ul0V7nGknSGHPS/F0P9Nc73tzvsSSQ4=)
8: r2Y6Npuwz2fSFJGlB1IqT0Y2GL8.roa (hash: lnldbd2L1Ux8PYgmjwCpHbxAbqqtYXmXImm+n59vkVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ee:cb:86:a9:d8:64:9e:ac:25:5e:57:84:83:9b:c3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Validity
Not Before: Mar 15 00:00:41 2026 GMT
Not After : Mar 16 00:00:41 2026 GMT
Subject: CN=93d7aef92fdb511c45ea04562cdec3767bf9562b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a9:97:8e:e1:90:f1:92:2c:ae:ea:92:61:f6:
01:26:dc:7d:82:54:05:62:45:f3:18:0b:b5:b2:59:
6e:30:d5:69:b3:06:94:e6:85:f0:3e:bc:a2:fa:c2:
50:58:2e:93:d8:ff:c6:91:60:0b:dc:01:f7:67:7a:
c2:ca:7a:3c:7d:5a:cf:7b:01:a9:30:95:c0:8f:e2:
92:63:45:b8:b3:5b:e9:92:79:54:30:85:61:84:df:
ed:ff:1d:e7:ec:64:5f:0c:47:36:bb:0b:28:70:cb:
26:1e:ff:ce:b4:b1:53:da:3b:90:78:2c:ef:46:8d:
c0:bd:0d:39:42:35:b0:1c:c7:b1:b1:0c:ae:fa:a6:
fa:8a:d3:d3:2b:4c:4a:de:a3:46:ed:04:b2:83:b8:
99:07:d4:d6:9d:7f:2f:d6:3f:d3:3b:bf:4f:fa:e8:
d8:90:c2:4b:e1:72:ef:14:6d:22:87:b8:98:c7:2e:
0e:93:0a:83:18:36:c1:88:cc:29:c1:3f:5b:ca:7d:
f7:28:c2:57:46:29:ba:0f:ec:e7:52:f2:c9:fe:ac:
1b:15:1e:33:cd:5c:7a:c3:28:31:23:9d:e5:94:cf:
34:14:d7:41:21:9b:cb:60:45:a7:41:16:75:f1:7b:
42:6e:da:9b:64:98:49:c3:50:d6:98:25:e8:42:51:
eb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D7:AE:F9:2F:DB:51:1C:45:EA:04:56:2C:DE:C3:76:7B:F9:56:2B
X509v3 Authority Key Identifier:
keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f4:af:e1:5d:3a:10:e9:fd:2a:78:2c:a4:16:24:dc:b0:c4:
7b:98:85:ee:56:78:68:f0:3e:b2:e2:51:3e:78:1e:31:0d:f0:
61:03:24:d7:7d:d4:b9:63:c5:40:48:11:3a:dd:18:c8:2b:f6:
f5:fb:46:cb:4f:73:a9:8f:31:08:21:0d:25:9a:17:70:b8:9e:
a8:8e:14:ff:17:cb:72:33:37:d6:80:ce:90:e8:a3:5c:1a:72:
ef:86:7f:bd:52:3c:28:83:31:b9:aa:44:92:e5:f4:52:6e:c7:
02:85:14:76:d0:23:d1:11:2a:cc:c9:96:d4:14:e5:ea:e7:e8:
19:6c:af:19:ce:cd:9c:49:54:22:f9:b2:0a:61:13:b3:e8:d1:
f3:ab:d4:50:9d:ec:91:ac:23:5e:19:29:3b:a5:0c:7b:0d:ed:
a5:27:f6:29:b3:60:3f:20:a2:34:2a:14:a3:fd:f0:96:be:c8:
c3:91:26:9e:07:36:76:55:61:ab:69:c0:54:60:13:39:e8:5d:
d3:c7:7d:6e:30:bc:59:9f:ee:fe:95:8e:c4:8f:f2:6a:58:f3:
6f:bc:4a:97:f4:da:3d:5e:06:5e:63:32:ea:a3:2e:b5:f8:95:
e3:20:be:a8:82:ab:e1:bc:16:e6:a2:c3:94:71:55:6f:0c:dd:
39:1f:c3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 09:11:10 2026 by rpki-client