Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
File: dB4rNVUHc-BTeX92TS4h1l5kKMc.mft (raw, json)
Hash identifier: 1btMEcB9dTQL1qRymS5t8yS4aIt6c0dRCD8nII3DIDg=
Subject key identifier: 20:65:A3:74:7B:D0:2E:5C:19:7E:41:6D:5B:59:7D:6C:F3:A2:6F:F3
Authority key identifier: 74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7
Certificate issuer: /CN=741e2b35550773e053797f764d2e21d65e6428c7
Certificate serial: 019D371B37AD1FC0DDDCA7687EFEE1FC559C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
Manifest number: 03EF
Signing time: Sun 29 Mar 2026 01:00:23 +0000
Manifest this update: Sun 29 Mar 2026 01:00:23 +0000
Manifest next update: Mon 30 Mar 2026 01:00:23 +0000
Files and hashes: 1: dB4rNVUHc-BTeX92TS4h1l5kKMc.crl (hash: +GME+iHO4/YDzj4P6KLKEgZD+c0HfokOhdjbARCnt+I=)
2: sSTPNFsIM_pP58lAmJ2VifEkHkE.roa (hash: U/3F8egAN1yDpn1UU3R15xmn8D/CQ/5823ShE3x+1Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:37:ad:1f:c0:dd:dc:a7:68:7e:fe:e1:fc:55:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741e2b35550773e053797f764d2e21d65e6428c7
Validity
Not Before: Mar 29 01:00:23 2026 GMT
Not After : Mar 30 01:00:23 2026 GMT
Subject: CN=2065a3747bd02e5c197e416d5b597d6cf3a26ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:f5:d0:85:34:04:36:fd:35:65:f0:45:43:
97:81:2d:64:8a:96:c7:28:b2:92:40:e2:33:32:4b:
57:94:1b:a9:90:fd:1f:27:1b:1f:cb:02:83:32:06:
1b:a3:23:1c:c1:74:32:07:95:83:41:f0:62:58:67:
24:84:9e:cb:79:11:01:97:e5:1f:f1:69:28:e3:c6:
b1:9a:a1:4c:17:24:fa:1c:f5:61:72:31:2d:45:d3:
cd:2c:5d:64:d7:b5:40:0a:14:cc:db:39:5f:55:c4:
bb:67:d4:98:e9:cb:20:70:76:ab:52:51:f1:66:d5:
f2:3c:79:f0:ca:fc:80:71:21:8d:44:60:3a:69:8b:
85:2b:95:f7:56:45:de:80:fa:5b:31:b9:21:cc:91:
1e:66:d8:5e:f0:c9:d7:f9:d5:5e:78:44:e7:cc:1c:
27:07:85:39:98:12:46:9b:67:16:df:9f:f8:60:25:
f4:98:df:95:f4:e9:5e:c9:6c:9e:26:0a:56:f2:ef:
a8:56:4c:50:6f:78:ff:11:96:59:c2:28:f2:7c:d4:
2b:1d:47:a0:82:0d:5e:e8:29:f9:1d:7e:2e:1f:c0:
61:97:ec:8b:5b:bd:02:b5:46:48:95:dc:73:33:f0:
88:ee:dd:50:34:3f:d4:86:f9:b6:94:be:b1:0d:0c:
8a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:65:A3:74:7B:D0:2E:5C:19:7E:41:6D:5B:59:7D:6C:F3:A2:6F:F3
X509v3 Authority Key Identifier:
keyid:74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3d:47:e5:e4:af:f1:57:8a:27:10:11:a6:9b:77:3a:6b:f4:
46:9b:ea:32:86:2e:d5:a0:96:fe:e3:a9:ac:4a:2e:e5:c1:88:
b4:83:46:b9:c2:67:8a:8e:91:26:c6:d5:6f:85:d9:a9:a5:bd:
5c:b2:00:5b:82:e0:06:21:01:8f:03:04:75:45:3b:15:85:6f:
bb:9a:5d:b8:4a:80:9a:f7:3c:c3:7f:40:03:c8:59:98:00:09:
73:b7:8f:33:8a:35:5c:2a:b6:8b:01:8f:bd:8f:c6:3c:36:eb:
4f:47:47:0f:7c:03:4a:28:34:e6:6f:8d:29:b5:aa:2e:ad:f2:
f3:a3:45:30:d4:fb:8c:e5:51:41:0d:11:fd:c5:d3:b2:80:e2:
5e:29:7c:ba:26:b2:1f:3c:ee:0b:18:4e:dc:89:a2:a4:6a:1e:
e6:e4:b1:48:a9:7a:7f:b2:1b:34:80:6f:9b:f1:c6:8d:47:d7:
f4:7b:d2:68:cf:cf:b5:ca:d9:8a:3e:b5:93:43:58:b1:a5:a5:
85:5c:c4:f9:c7:88:d6:a6:16:4a:31:7d:99:72:82:aa:ee:46:
4c:27:d0:37:85:a0:4b:f0:f9:0c:bd:e9:28:4c:1c:9c:eb:38:
9e:cb:2f:57:a7:db:04:b3:4e:66:b0:83:ec:11:0c:c3:c4:58:
dc:c0:4c:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03GzetH8Dd3Kdofv7h/FWcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MWUyYjM1NTUwNzczZTA1Mzc5N2Y3NjRkMmUyMWQ2NWU2
NDI4YzcwHhcNMjYwMzI5MDEwMDIzWhcNMjYwMzMwMDEwMDIzWjAzMTEwLwYDVQQD
EygyMDY1YTM3NDdiZDAyZTVjMTk3ZTQxNmQ1YjU5N2Q2Y2YzYTI2ZmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8T10IU0BDb9NWXwRUOXgS1kipbH
KLKSQOIzMktXlBupkP0fJxsfywKDMgYboyMcwXQyB5WDQfBiWGckhJ7LeREBl+Uf
8Wko48axmqFMFyT6HPVhcjEtRdPNLF1k17VAChTM2zlfVcS7Z9SY6csgcHarUlHx
ZtXyPHnwyvyAcSGNRGA6aYuFK5X3VkXegPpbMbkhzJEeZthe8MnX+dVeeETnzBwn
B4U5mBJGm2cW35/4YCX0mN+V9OleyWyeJgpW8u+oVkxQb3j/EZZZwijyfNQrHUeg
gg1e6Cn5HX4uH8Bhl+yLW70CtUZIldxzM/CI7t1QND/Uhvm2lL6xDQyK8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBlo3R70C5cGX5BbVtZfWzzom/zMB8GA1UdIwQY
MBaAFHQeKzVVB3PgU3l/dk0uIdZeZCjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEI0ck5WVUhjLUJUZVg5MlRTNGgxbDVrS01jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82YjQxZjUtYjdjNS00MzM0LTlmYmYt
YjM4YTZmMjIwZTYzLzEvZEI0ck5WVUhjLUJUZVg5MlRTNGgxbDVrS01jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82YjQxZjUtYjdjNS00MzM0LTlmYmYtYjM4YTZmMjIwZTYz
LzEvZEI0ck5WVUhjLUJUZVg5MlRTNGgxbDVrS01jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYT1H5eSv
8VeKJxARppt3Omv0RpvqMoYu1aCW/uOprEou5cGItINGucJnio6RJsbVb4XZqaW9
XLIAW4LgBiEBjwMEdUU7FYVvu5pduEqAmvc8w39AA8hZmAAJc7ePM4o1XCq2iwGP
vY/GPDbrT0dHD3wDSig05m+NKbWqLq3y86NFMNT7jOVRQQ0R/cXTsoDiXil8uiay
HzzuCxhO3ImipGoe5uSxSKl6f7IbNIBvm/HGjUfX9HvSaM/PtcrZij61k0NYsaWl
hVzE+ceI1qYWSjF9mXKCqu5GTCfQN4WgS/D5DL3pKEwcnOs4nssvV6fbBLNOZrCD
7BEMw8RY3MBM/A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:25 2026 by rpki-client