Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
File: byDBquA8J08ClCjuoKRCQgjU8-0.mft (raw, json)
Hash identifier: l60hZk1MXs9xTT4CW/8cwfsHoTm3lojZ72PfjHg77aM=
Subject key identifier: C7:32:CA:DC:1F:D1:49:B0:3E:6B:C4:11:74:68:92:91:E2:9A:4C:8F
Authority key identifier: 6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
Certificate issuer: /CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Certificate serial: 019CAC46D2B2978EC63356BF32B1DDFA62A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:00:48 +0000
Manifest this update: Mon 02 Mar 2026 02:00:48 +0000
Manifest next update: Tue 03 Mar 2026 02:00:48 +0000
Files and hashes: 1: byDBquA8J08ClCjuoKRCQgjU8-0.crl (hash: OysiKxpOK0OrXwMoIOSJI/6Dusg/nOq2+nIwDmMkdLU=)
2: grB1qqfTRQP7MTNrrn-WzmUk8gw.roa (hash: +6I+Ww911XZBE+FZXYbMuXqk8USqXVoE6JeVtzI2oaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:d2:b2:97:8e:c6:33:56:bf:32:b1:dd:fa:62:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Validity
Not Before: Mar 2 02:00:48 2026 GMT
Not After : Mar 3 02:00:48 2026 GMT
Subject: CN=c732cadc1fd149b03e6bc41174689291e29a4c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:d5:ea:c5:fe:5a:2c:ef:fc:2a:6d:1c:bb:
71:5d:e8:b4:41:42:b4:5f:1d:d6:19:98:62:fb:b5:
82:22:ae:2e:fe:05:8f:81:03:d0:83:d0:ca:5e:a9:
37:32:97:e1:e7:2b:d0:64:24:7e:3e:4a:32:f4:13:
87:a6:26:e8:ab:96:ed:a7:05:a0:08:cc:c5:78:bc:
c3:ce:46:b4:6a:3c:c4:a1:bb:38:8e:d4:6e:43:2a:
a7:c9:66:70:f2:db:78:76:d6:77:e4:9b:28:48:fb:
6e:9a:c3:9a:71:11:eb:40:7c:e8:b2:63:97:f9:83:
a1:9f:89:d8:53:c3:f0:10:38:39:45:d5:b0:85:a2:
86:98:1d:35:99:90:e4:ac:a5:c1:ee:43:0c:c4:c4:
da:46:87:7b:40:7f:9a:df:fc:f9:d0:df:59:15:3a:
0e:6d:f1:ea:65:50:76:f1:f5:42:23:6d:15:8d:04:
46:93:25:ad:de:1a:e8:d2:59:f9:aa:c6:95:b3:f1:
c0:26:12:90:3f:cf:50:0b:8e:ce:b9:df:11:cb:2e:
b5:23:1f:23:2a:f8:0a:f7:e7:5d:de:ff:36:16:48:
e8:8a:f3:b3:a2:c9:6c:06:06:f8:5f:fd:89:2b:4e:
7c:7e:2f:0b:e6:f2:27:23:bc:00:30:cd:42:56:5c:
19:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:32:CA:DC:1F:D1:49:B0:3E:6B:C4:11:74:68:92:91:E2:9A:4C:8F
X509v3 Authority Key Identifier:
keyid:6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:20:4b:00:c0:08:ef:4d:cb:87:49:c8:e1:ab:8b:1b:44:d0:
64:13:d9:77:6e:bc:27:73:e0:dc:95:39:4b:3f:0f:21:78:be:
12:37:e5:7e:21:58:5f:b6:bd:6f:c9:41:51:e0:cf:0b:c7:57:
b5:e1:51:0f:bd:d7:88:39:9d:39:58:92:19:39:55:81:51:02:
91:9e:f9:fb:f8:27:4d:1d:e5:aa:26:8e:2a:9f:b3:1c:04:16:
d3:31:c4:30:23:70:35:ed:70:16:0b:d1:72:49:26:c7:be:17:
90:ce:cb:46:a5:05:a4:5f:23:30:f8:25:29:e0:93:24:db:d9:
54:d1:bf:a1:a5:33:86:f1:89:50:6d:5a:c7:bb:f1:32:bb:a3:
8c:e4:f1:35:05:78:24:ac:f1:98:8b:fc:a2:de:df:cc:ea:8a:
30:bb:84:57:e5:7c:b0:88:28:c6:52:53:24:ec:93:e1:12:29:
d3:66:f6:ac:77:2c:a8:25:bf:f2:a4:40:67:ab:49:a9:50:dd:
bc:37:1c:0e:93:65:5d:61:d3:88:55:c5:49:fb:8b:1f:77:c1:
38:3e:e5:7b:82:f5:6a:f7:55:39:9f:95:76:d6:02:ed:93:04:
fe:82:5e:36:5e:26:6b:29:23:15:5f:5c:01:ae:10:e5:1c:ac:
a3:4b:9b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:55 2026 by rpki-client