Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
File: dbeVBmFQocNn2rzPaclwqwxyMhU.mft (raw, json)
Hash identifier: xHvb4xhnfwVUSFlyjqQFWTqbbOv9sp7lRvnStmf9GR4=
Subject key identifier: 70:48:96:0D:A2:F6:50:A7:35:99:7C:7A:1F:7C:1F:29:B8:1C:F2:EE
Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
Certificate issuer: /CN=75b795066150a1c367dabccf69c970ab0c723215
Certificate serial: 019D9B50A8E9495C63120C2308B81F6EFE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
Manifest number: 0CA9
Signing time: Fri 17 Apr 2026 12:00:47 +0000
Manifest this update: Fri 17 Apr 2026 12:00:47 +0000
Manifest next update: Sat 18 Apr 2026 12:00:47 +0000
Files and hashes: 1: 0T8fcmm1hsNnOmqM2PEgoAyliqU.roa (hash: 9ZfWKoxYg5iUkW9bq0QBmY+p7hBHHw7kGA3tl6yyKw0=)
2: FLA5zAJXuRYhVvLbMvHegLVx03k.roa (hash: ALcLJ5P9PXv6U4nYIysJQ7DHdsSCbcTf30882RyAGwc=)
3: QLKMe_jElWZCYxaDhAzkorlz3LQ.roa (hash: vuhA+iGQjke4jhUjZeVHGZ6IY30SRz7Sp3mzEHAQJQs=)
4: TSfqyIUxAgfu2d6E5vUEde-a71w.roa (hash: m9pFo8gt/WhMRWsNe6yus9/BFb/kzFEfeC7Fbw2hXyw=)
5: dbeVBmFQocNn2rzPaclwqwxyMhU.crl (hash: 85Dw1N1CYXvcHNU7IfhZX8YuA3G/uE5yn7aUnhl1CKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:a8:e9:49:5c:63:12:0c:23:08:b8:1f:6e:fe:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215
Validity
Not Before: Apr 17 12:00:47 2026 GMT
Not After : Apr 18 12:00:47 2026 GMT
Subject: CN=7048960da2f650a735997c7a1f7c1f29b81cf2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6d:19:4c:a6:b7:4a:48:7e:41:25:15:d7:16:
f1:c2:28:5d:6e:9d:6a:f9:14:50:9e:08:b4:81:e8:
a5:fe:85:3b:52:c8:fa:ac:e4:d0:a5:92:01:3b:c7:
2a:c7:03:4c:b7:d0:51:ea:db:f2:24:37:50:ee:b6:
05:1f:d8:7f:f6:a2:ac:5d:2e:2f:5e:b3:7b:07:0e:
cc:c7:02:dd:59:b7:a2:e5:8c:d6:fb:67:bf:bb:e2:
0d:ab:70:ff:dc:1e:76:0f:2e:22:56:f0:f1:07:d5:
34:1a:fd:9c:af:71:1a:d4:76:e4:f7:90:f7:e1:43:
4a:d1:72:9a:b0:5a:6d:3e:c5:13:96:a2:27:41:1d:
4d:8e:b1:c6:ea:42:32:cd:32:12:cf:b0:1e:5d:8d:
13:f8:08:63:b3:0c:c0:b7:2b:de:25:92:6c:c8:d6:
19:54:2a:ae:3f:4b:b5:9d:9a:19:59:db:39:93:58:
94:0c:a4:a5:e9:57:42:dc:e7:c2:6c:01:55:2a:f3:
99:2f:31:9b:a8:e5:b2:7e:94:40:93:e1:e7:1f:b8:
e0:af:d3:a1:63:81:46:a4:5a:11:3f:0a:72:94:c8:
ff:75:9a:d7:5a:7b:cb:4d:a3:f1:12:ac:ab:e4:b6:
07:7d:58:48:ab:2f:c2:e4:7c:ed:31:0a:62:70:cc:
d8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:48:96:0D:A2:F6:50:A7:35:99:7C:7A:1F:7C:1F:29:B8:1C:F2:EE
X509v3 Authority Key Identifier:
keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:7e:a9:80:ad:41:07:fc:c6:cd:5d:25:2c:a0:2f:c2:a1:1d:
38:fd:3e:e3:a7:cc:20:91:bf:a9:e7:e3:00:84:b8:bd:87:e6:
69:22:93:dd:6f:16:8b:f3:16:ad:67:19:52:97:52:83:c2:1b:
d1:e7:67:37:f4:64:37:67:c7:d3:88:ee:3c:67:8f:29:2a:fa:
11:f8:5d:e5:00:36:87:b2:62:08:04:bf:6a:34:82:ca:67:03:
17:3f:9c:67:cb:dc:a0:0b:83:a4:e3:9b:40:8d:e8:b8:be:e5:
92:e6:cc:fa:0e:1f:0a:e4:3e:85:02:e5:cc:41:d9:bd:f9:12:
27:92:8b:60:22:7e:85:64:b5:68:57:69:69:8e:da:c4:82:5c:
49:89:76:2f:42:e9:a2:62:f8:6d:f9:7e:60:f7:64:aa:63:c1:
56:bd:e3:36:86:13:d3:a4:44:7a:59:a6:86:07:33:1b:be:36:
3d:aa:db:64:15:36:42:b5:f1:b2:98:6e:69:db:b4:39:ab:09:
b1:81:d3:47:62:7a:59:34:63:b4:cc:1f:a7:8f:80:0b:34:2d:
90:2f:f8:ee:b3:8b:1e:d4:92:d2:8f:e1:0b:34:59:78:b9:d0:
33:9b:c2:bd:fb:0d:16:86:8d:01:ae:94:d9:13:52:c2:5d:9d:
2c:f0:4b:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUKjpSVxjEgwjCLgfbv41MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1Yjc5NTA2NjE1MGExYzM2N2RhYmNjZjY5Yzk3MGFiMGM3
MjMyMTUwHhcNMjYwNDE3MTIwMDQ3WhcNMjYwNDE4MTIwMDQ3WjAzMTEwLwYDVQQD
Eyg3MDQ4OTYwZGEyZjY1MGE3MzU5OTdjN2ExZjdjMWYyOWI4MWNmMmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3G0ZTKa3Skh+QSUV1xbxwihdbp1q
+RRQngi0geil/oU7Usj6rOTQpZIBO8cqxwNMt9BR6tvyJDdQ7rYFH9h/9qKsXS4v
XrN7Bw7MxwLdWbei5YzW+2e/u+INq3D/3B52Dy4iVvDxB9U0Gv2cr3Ea1Hbk95D3
4UNK0XKasFptPsUTlqInQR1NjrHG6kIyzTISz7AeXY0T+AhjswzAtyveJZJsyNYZ
VCquP0u1nZoZWds5k1iUDKSl6VdC3OfCbAFVKvOZLzGbqOWyfpRAk+HnH7jgr9Oh
Y4FGpFoRPwpylMj/dZrXWnvLTaPxEqyr5LYHfVhIqy/C5HztMQpicMzYKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBIlg2i9lCnNZl8eh98Hym4HPLuMB8GA1UdIwQY
MBaAFHW3lQZhUKHDZ9q8z2nJcKsMcjIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80NjZhYWItYTQ3MC00MzQ0LWEzNjct
NTQ3YmU0Y2ZhNDU3LzEvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80NjZhYWItYTQ3MC00MzQ0LWEzNjctNTQ3YmU0Y2ZhNDU3
LzEvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy36pgK1B
B/zGzV0lLKAvwqEdOP0+46fMIJG/qefjAIS4vYfmaSKT3W8Wi/MWrWcZUpdSg8Ib
0ednN/RkN2fH04juPGePKSr6Efhd5QA2h7JiCAS/ajSCymcDFz+cZ8vcoAuDpOOb
QI3ouL7lkubM+g4fCuQ+hQLlzEHZvfkSJ5KLYCJ+hWS1aFdpaY7axIJcSYl2L0Lp
omL4bfl+YPdkqmPBVr3jNoYT06REelmmhgczG742ParbZBU2QrXxsphuadu0OasJ
sYHTR2J6WTRjtMwfp4+ACzQtkC/47rOLHtSS0o/hCzRZeLnQM5vCvfsNFoaNAa6U
2RNSwl2dLPBL9g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:29:01 2026 by rpki-client