Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
File: dbzo8Ite_ESvr41wY-GulRglFCs.mft (raw, json)
Hash identifier: fNykX2nVDony5KuSSnglN8vnSTSmXGuch5DazcEOG7Y=
Subject key identifier: 6D:E6:44:42:AF:6A:B6:0B:C3:C9:B8:C1:8A:8A:DD:6B:13:A4:92:99
Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Certificate issuer: /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Certificate serial: 019CAAFD528B3E8077895D2261B80237A21D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 20:00:54 +0000
Manifest this update: Sun 01 Mar 2026 20:00:54 +0000
Manifest next update: Mon 02 Mar 2026 20:00:54 +0000
Files and hashes: 1: dbzo8Ite_ESvr41wY-GulRglFCs.crl (hash: 0OVk39hqAUEgYnDVVzOXhtFB385turhEgkWFU23Ukw0=)
2: lyF2q1wLFWmF4Bje0J65OKCZKw4.roa (hash: nUHyFMygTv/krY1cfqzTeSySMum5LGIyQeqthF8Cr4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:52:8b:3e:80:77:89:5d:22:61:b8:02:37:a2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Validity
Not Before: Mar 1 20:00:54 2026 GMT
Not After : Mar 2 20:00:54 2026 GMT
Subject: CN=6de64442af6ab60bc3c9b8c18a8add6b13a49299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:97:29:07:11:7c:c4:44:3c:ab:2c:75:23:
fc:1a:ff:31:65:5e:88:74:13:78:17:14:96:94:08:
ed:b7:fc:41:78:e6:19:5d:50:b7:d0:f7:5e:19:04:
ed:b5:73:14:1c:2e:0e:aa:66:a9:db:64:52:7d:45:
85:37:1d:cf:ef:fd:70:77:e8:10:c0:f9:c8:24:5d:
85:2e:ce:f5:49:de:92:71:3e:93:42:42:2d:43:f6:
b8:22:d9:be:30:9a:ae:a6:35:ed:8b:be:47:56:05:
5f:24:f6:97:aa:c1:eb:70:c9:7a:f5:38:7a:5b:4a:
60:d1:59:cb:bf:57:3b:9c:85:23:8f:2e:0a:df:a0:
05:9d:a9:7b:13:c3:9b:b3:46:54:35:ee:08:eb:db:
86:ec:e8:44:86:8e:b5:92:40:d9:79:f4:60:93:fc:
4b:ea:fb:1a:1c:ad:17:5a:1c:16:07:2f:60:af:59:
77:38:58:00:f5:17:fe:d5:0e:87:ec:14:e2:07:bc:
12:6e:fe:a4:08:6b:3e:cd:8c:1d:51:32:47:56:4b:
aa:54:a7:2e:7d:36:dc:e9:29:cf:b7:81:fd:a3:0d:
15:e9:0a:31:16:63:02:a4:25:51:fb:14:6e:a8:e7:
80:ae:66:cb:23:f9:8e:76:06:dd:d0:c7:78:8a:cb:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E6:44:42:AF:6A:B6:0B:C3:C9:B8:C1:8A:8A:DD:6B:13:A4:92:99
X509v3 Authority Key Identifier:
keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:76:ac:aa:74:cc:93:ce:36:07:84:7b:b6:32:06:de:56:fa:
a2:77:5a:a9:8b:99:70:75:fd:d8:77:4f:01:60:35:5b:c9:ef:
7f:b8:8f:18:07:4f:91:8b:9c:02:db:10:9a:c0:9c:88:f3:60:
16:b9:3c:7f:c2:aa:fe:10:da:76:20:54:83:f4:45:e9:15:ff:
c6:66:78:4d:81:7c:52:17:13:c2:d1:57:6e:c6:f2:eb:d6:fd:
13:57:23:c6:5e:f3:2f:91:96:9b:e2:90:7e:33:fd:68:54:54:
42:14:ed:0a:4a:cd:55:a9:b9:f3:18:b2:31:09:7f:d9:32:0f:
e5:f8:54:54:93:3c:fa:f2:b0:81:78:e4:e0:18:cb:59:1a:e3:
9f:08:d3:5d:2e:0c:c1:69:5d:b5:21:52:a3:53:90:b1:56:04:
35:4c:21:76:05:6f:2e:2b:34:03:01:82:78:92:9b:46:56:f0:
ed:94:7e:ee:e9:e9:ef:ee:da:fa:f5:73:0c:21:e4:08:f1:50:
cb:ab:81:2c:60:24:2f:a9:80:28:4b:1d:63:ec:c8:7d:27:65:
9d:01:3e:b9:87:b6:b3:ad:6a:e3:cc:f7:80:e6:b6:97:79:d5:
84:5f:34:08:6c:ae:41:a7:c9:87:10:df:5f:1e:fb:7c:a4:e0:
d8:aa:fa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:05 2026 by rpki-client