Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
File: dbeVBmFQocNn2rzPaclwqwxyMhU.mft (raw, json)
Hash identifier: lTAJAaoC3WVhngyjOvVWKaSYol/lJIGhmDl7t/mVSW0=
Subject key identifier: 78:BF:AA:40:8C:3C:33:7F:14:07:0C:93:83:64:85:C7:E8:78:07:D0
Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
Certificate issuer: /CN=75b795066150a1c367dabccf69c970ab0c723215
Certificate serial: 01A0E3630ACDEC0B2C00EAB121D7A01F23EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
Manifest number: 0E5C
Signing time: Sun 27 Sep 2026 15:01:53 +0000
Manifest this update: Sun 27 Sep 2026 15:01:53 +0000
Manifest next update: Mon 28 Sep 2026 15:01:53 +0000
Files and hashes: 1: 0T8fcmm1hsNnOmqM2PEgoAyliqU.roa (hash: 9ZfWKoxYg5iUkW9bq0QBmY+p7hBHHw7kGA3tl6yyKw0=)
2: FLA5zAJXuRYhVvLbMvHegLVx03k.roa (hash: ALcLJ5P9PXv6U4nYIysJQ7DHdsSCbcTf30882RyAGwc=)
3: QLKMe_jElWZCYxaDhAzkorlz3LQ.roa (hash: vuhA+iGQjke4jhUjZeVHGZ6IY30SRz7Sp3mzEHAQJQs=)
4: TSfqyIUxAgfu2d6E5vUEde-a71w.roa (hash: m9pFo8gt/WhMRWsNe6yus9/BFb/kzFEfeC7Fbw2hXyw=)
5: dbeVBmFQocNn2rzPaclwqwxyMhU.crl (hash: Y0BX1MME62TG1HEyPvZH6VIZKEikLrazAumdVDA3CPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:63:0a:cd:ec:0b:2c:00:ea:b1:21:d7:a0:1f:23:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215
Validity
Not Before: Sep 27 15:01:53 2026 GMT
Not After : Sep 28 15:01:53 2026 GMT
Subject: CN=78bfaa408c3c337f14070c93836485c7e87807d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:67:1a:0c:1c:b6:a6:0f:39:56:db:af:83:20:
a6:de:b5:bc:a8:0a:8f:80:10:bb:a1:1b:2a:5d:72:
cf:e0:43:d1:88:61:59:4c:5b:6d:09:de:61:a4:6f:
76:45:86:25:a9:ab:a1:bd:0b:25:e1:e2:3c:c9:06:
0c:21:8e:19:3f:35:db:a1:59:22:d0:d0:96:58:89:
fd:8a:69:e7:81:e6:45:11:19:40:a7:78:ac:ac:f4:
d7:70:9a:79:db:64:02:38:46:b7:c6:5a:b7:b3:6c:
f2:0f:67:19:06:f5:68:80:0c:16:59:e4:92:98:ed:
e4:93:75:c6:21:c5:7f:17:9b:25:56:98:98:f6:7c:
a2:77:e2:f3:0f:9f:1f:3d:db:86:0e:32:c8:0f:89:
88:e2:2a:cb:9b:4c:87:d3:6a:87:23:b3:2d:a6:a7:
34:68:e2:4d:ce:f6:ee:5c:14:39:00:96:d2:b2:38:
71:fe:1b:cb:66:aa:f3:60:20:65:5f:ca:54:fc:7c:
f5:af:11:a9:7e:c9:13:b1:e7:da:77:a9:81:c9:3d:
d1:48:ac:81:2f:fc:2e:5c:a7:78:24:40:10:d5:21:
b1:04:0d:44:fd:51:8d:1b:36:48:06:57:c9:c1:3c:
29:15:44:fe:04:05:7f:66:c5:e3:49:d2:03:80:3e:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BF:AA:40:8C:3C:33:7F:14:07:0C:93:83:64:85:C7:E8:78:07:D0
X509v3 Authority Key Identifier:
keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7b:77:2f:17:3f:02:53:2f:cc:1f:b3:29:8f:a5:0c:e6:a5:
de:aa:ba:8f:ba:6c:5b:de:b1:5b:14:14:c4:44:cd:94:b0:7b:
12:16:47:5b:37:91:8b:f8:a0:a0:f7:72:df:c2:0c:c7:ce:41:
28:ea:2a:3f:ff:3f:66:a3:b1:27:49:d7:09:eb:ea:b3:a0:aa:
d6:3d:b3:c1:7d:4f:c7:a1:42:1b:cf:49:ef:51:b4:75:dd:8f:
34:df:2f:ab:26:92:c7:28:1d:4e:a8:2e:a9:aa:97:05:41:a9:
0b:9f:bf:85:bd:6e:84:12:52:19:db:d6:7d:93:af:9a:c9:f7:
36:d8:a5:d0:7a:7f:98:bc:3f:32:e3:76:ab:72:6e:10:08:2b:
ce:27:2a:df:ec:d2:8c:29:a7:f7:73:3e:f5:47:44:93:a1:87:
4b:9f:95:7d:fc:7f:96:13:fb:52:d7:ef:45:b5:69:55:7d:b8:
d1:6d:32:3a:56:e9:da:9e:ec:99:80:6f:08:59:88:68:02:c7:
09:0b:c9:fb:0d:3e:64:07:70:72:16:0f:0c:11:0a:f8:48:32:
d6:f1:e9:96:2a:68:5a:1b:5b:db:03:fe:d2:c4:ab:05:53:a7:
c8:14:47:87:db:15:e4:21:f5:63:bd:83:bf:b3:e5:a4:31:24:
cb:d5:fd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:05:52 2026 by rpki-client