Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
File: DbD591Ww4wPMFtGmM_lYwDYDSUU.mft (raw, json)
Hash identifier: 3DLNpiIjFCQDzz9++XlL3uBC9PcK7DjpHa3frm4a1bE=
Subject key identifier: CC:B9:59:A0:78:43:3B:E9:A5:FE:49:A2:C0:96:35:29:A9:42:25:7F
Authority key identifier: 0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
Certificate issuer: /CN=0db0f9f755b0e303cc16d1a633f958c036034945
Certificate serial: 019D99D0A523110554B5855AB26ADFC18CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
Manifest number: 0DA6
Signing time: Fri 17 Apr 2026 05:01:20 +0000
Manifest this update: Fri 17 Apr 2026 05:01:20 +0000
Manifest next update: Sat 18 Apr 2026 05:01:20 +0000
Files and hashes: 1: DbD591Ww4wPMFtGmM_lYwDYDSUU.crl (hash: AK9z7ZYn11SPew8YX2JiCxM4ml9SU+qb5P987ZYZLyg=)
2: YD6TzpC5R6Hp_v6ASOjqQ9toRco.roa (hash: c6e+XVaqZUDcD49245+mL48dQ3Qd5iEdgRHJAw8cJfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:a5:23:11:05:54:b5:85:5a:b2:6a:df:c1:8c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db0f9f755b0e303cc16d1a633f958c036034945
Validity
Not Before: Apr 17 05:01:20 2026 GMT
Not After : Apr 18 05:01:20 2026 GMT
Subject: CN=ccb959a078433be9a5fe49a2c0963529a942257f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:99:df:e8:e4:d8:82:32:c0:29:5f:26:21:
7c:86:61:22:67:f3:14:9a:cd:1e:2c:7a:f5:f9:01:
59:00:4a:07:61:c3:ac:10:9c:29:7c:c3:3d:53:6b:
3c:5f:c7:03:b7:e1:5d:19:db:11:6e:9e:5c:33:32:
63:09:9b:50:61:2e:40:42:87:f3:16:8b:42:22:0e:
5a:9a:f0:22:bc:54:b7:fa:2d:33:b7:59:22:c6:27:
76:e3:97:42:87:30:45:60:ad:8b:45:c2:c2:5e:28:
a7:62:09:b5:d2:61:9f:08:be:ce:54:a4:de:ab:87:
83:8e:5c:62:65:5d:ab:71:80:a1:61:2b:b7:c2:31:
27:b5:52:5e:6e:54:5a:5c:34:b3:40:a1:81:56:1f:
66:80:06:21:f7:0c:e5:d7:92:03:65:e7:d2:54:8f:
9e:89:83:3d:6e:d7:dd:1d:04:e1:b2:a1:29:6d:9a:
c9:ac:e1:1e:1c:58:1a:e7:15:2a:e7:23:74:fd:55:
0f:9a:a2:f6:0c:5d:65:c5:5f:55:28:7d:4a:bf:43:
a0:5a:2f:e4:dd:68:d2:15:e6:7a:3f:60:30:3c:e1:
74:20:f1:d5:d9:6e:a6:d5:a1:27:a5:a4:46:83:f4:
68:2e:1c:cd:55:06:a2:45:97:c3:32:8b:94:4f:20:
d8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B9:59:A0:78:43:3B:E9:A5:FE:49:A2:C0:96:35:29:A9:42:25:7F
X509v3 Authority Key Identifier:
keyid:0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:08:16:f4:3b:68:90:b6:70:95:39:1b:dd:30:a7:48:1d:c1:
46:4a:da:07:db:f5:5c:56:a0:40:2e:29:22:f8:c7:ff:d5:41:
ab:ed:a7:2c:5c:10:a8:2a:ad:0d:0c:72:ff:c3:2d:c6:79:ed:
a5:27:a2:56:11:5e:1f:52:8f:68:cd:19:64:1e:64:0e:56:df:
45:11:ae:b8:8d:98:d2:34:2d:41:a0:22:8b:a7:48:c9:14:20:
16:67:74:e4:6d:a6:d8:3c:7a:04:b3:c4:62:95:13:0e:04:25:
d4:bc:f0:22:94:93:e3:df:1d:c9:ae:9a:41:99:c3:46:bb:3c:
d5:7b:e8:27:6e:e6:59:0c:ea:b6:98:c5:fe:35:4c:07:eb:b4:
1f:cd:6c:54:d6:43:54:b5:1c:64:38:3b:e5:1b:25:bb:10:76:
c0:98:92:1d:52:a6:65:d5:43:53:e8:81:cf:8c:c7:1d:99:db:
1d:17:6e:75:c8:42:32:91:86:5c:0f:50:25:8e:3c:45:4f:69:
aa:5b:34:32:fa:ac:33:e8:38:47:6d:d2:e3:9b:ae:96:4d:89:
79:49:ba:33:3f:87:c2:89:f2:b6:39:5a:fa:d8:0f:4e:e7:6a:
7d:14:49:c0:6e:bc:1d:10:b1:52:69:54:e5:a4:ce:90:8c:f1:
d2:00:21:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:21:34 2026 by rpki-client