Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
File: dBjDbQQYIfhrONMiPUP-XNsgEaA.mft (raw, json)
Hash identifier: UqNrKw/8GP/HcdbFSwQohmPiktIK48lTJ1UCP+Ii7ek=
Subject key identifier: 20:49:D9:5E:CD:30:8C:54:F5:AB:69:D5:B4:5E:01:4B:49:29:17:1E
Authority key identifier: 74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
Certificate issuer: /CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Certificate serial: 019CAA8FA3ED3395582111EF3644B41FEE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
Manifest number: 0B42
Signing time: Sun 01 Mar 2026 18:01:06 +0000
Manifest this update: Sun 01 Mar 2026 18:01:06 +0000
Manifest next update: Mon 02 Mar 2026 18:01:06 +0000
Files and hashes: 1: OI678exd-nLeHUEfOxB3Wwb9ZJI.roa (hash: WlEEPa3tPqSDyIk1vz7Wm/A/Yv8DcUi3nrYAumkqlDc=)
2: dBjDbQQYIfhrONMiPUP-XNsgEaA.crl (hash: bgqIX0NXa7lRmoOvoTWDK9Hw2uycwmVXKgo+sbWSwZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:a3:ed:33:95:58:21:11:ef:36:44:b4:1f:ee:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Validity
Not Before: Mar 1 18:01:06 2026 GMT
Not After : Mar 2 18:01:06 2026 GMT
Subject: CN=2049d95ecd308c54f5ab69d5b45e014b4929171e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:df:84:51:00:9d:8c:c9:8d:c7:5b:c5:47:
98:1e:cd:cc:91:5a:3d:4a:85:b8:c9:02:77:26:36:
f8:67:1c:a5:21:1a:8b:26:7d:07:6e:f8:56:a2:7e:
e4:55:21:bd:12:6d:32:79:f3:dd:b0:6d:85:54:ea:
0a:e0:07:b0:ab:99:f8:72:a0:47:1e:17:99:f9:8c:
49:06:a7:57:0a:4d:24:6d:84:65:18:16:8b:e4:14:
7a:a8:3a:b8:95:ec:a9:1d:de:49:df:46:78:dd:43:
bb:ce:52:8b:e0:1a:e9:87:a5:92:23:08:9f:79:17:
fa:2e:dd:d5:8d:3e:61:14:bc:36:08:fb:a1:90:55:
70:c5:3b:09:b4:88:d6:a6:23:66:01:95:73:92:a1:
65:c0:8c:8c:9f:34:15:fb:06:5f:5c:f0:41:f0:1f:
8a:7d:7e:9a:58:1f:2f:35:ac:db:f1:3e:5c:3e:48:
3b:2d:b9:d6:de:12:21:ed:8b:df:c7:c9:6c:c3:1f:
73:ba:97:5c:46:a0:4c:23:3a:ea:8a:90:1a:a6:2c:
8e:70:00:0a:03:7e:17:28:62:6d:3a:aa:69:fb:62:
b0:ae:1b:2f:1e:3e:ca:a3:cf:1b:65:83:64:32:19:
28:d6:df:10:fd:6a:9f:35:73:3e:c6:21:02:9e:88:
cf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:49:D9:5E:CD:30:8C:54:F5:AB:69:D5:B4:5E:01:4B:49:29:17:1E
X509v3 Authority Key Identifier:
keyid:74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:31:94:71:f0:42:21:52:50:67:98:8a:2d:dc:b8:13:72:ab:
2d:ff:07:90:2b:b5:89:99:e2:c0:b0:01:e3:4a:cc:95:be:47:
43:03:9a:20:f0:4b:ea:9c:5e:38:df:1a:64:50:9f:1c:f9:bf:
15:7d:59:ab:f2:54:f1:6e:bb:9a:92:b7:7e:c9:b9:65:da:ce:
fa:11:0d:b2:3b:0e:d8:ba:36:0c:9e:bb:0e:df:82:ec:32:2b:
d2:13:3d:0b:56:46:f4:7a:be:63:db:6b:ef:de:c5:fc:9c:d0:
56:39:7e:8a:1a:52:ce:ea:a8:0e:a9:f0:39:60:1e:ea:55:65:
3b:55:a7:91:b1:42:a8:69:11:a0:bb:12:1f:a1:68:b7:bd:fb:
52:5f:85:bc:0d:53:0b:c2:18:1e:23:8c:8c:18:c3:38:a4:9c:
c7:d9:63:08:2e:eb:f3:e4:83:2f:0a:54:91:ab:4b:2f:aa:df:
45:ce:04:86:c7:28:64:01:5d:b1:d2:0b:a6:14:57:28:aa:42:
bd:28:7b:97:da:f3:70:db:9e:76:7e:52:2a:0d:12:72:97:4f:
af:8a:df:4d:21:6d:e7:e3:3d:4b:b0:b0:fe:2b:71:f9:cc:4e:
4e:71:66:2c:9e:33:7d:28:28:d9:88:ba:82:14:7e:49:7a:d7:
a7:b3:fa:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:54 2026 by rpki-client