Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
File: cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json)
Hash identifier: ewZLMOrZD6W5LmGjqgS1Jdw+JNJ3k1N3zz/nMN5UsLQ=
Subject key identifier: 0D:D7:36:15:46:79:66:D6:17:34:5A:24:A9:A6:38:8E:51:79:84:5B
Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Certificate serial: 019CAE35E1C17270DEC896162AF22C33F889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
Manifest number: 03EB
Signing time: Mon 02 Mar 2026 11:01:32 +0000
Manifest this update: Mon 02 Mar 2026 11:01:32 +0000
Manifest next update: Tue 03 Mar 2026 11:01:32 +0000
Files and hashes: 1: S00d78TItkDHq888CPL8snBiq8U.roa (hash: xbbWOfkY4EBmGgNTfua9nJ1QvCvgAkZPsqc/WKzPEio=)
2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: vYqYy1SXyXOAjmU7B3GzHhJBi3puOw5FXGgA49Cd3W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:e1:c1:72:70:de:c8:96:16:2a:f2:2c:33:f8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Validity
Not Before: Mar 2 11:01:32 2026 GMT
Not After : Mar 3 11:01:32 2026 GMT
Subject: CN=0dd73615467966d617345a24a9a6388e5179845b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:57:42:f4:76:74:6c:b1:32:11:20:3c:4b:
f2:db:f2:db:b8:a0:4b:0d:98:c0:ce:a9:99:da:4a:
16:d3:88:ea:8b:39:f2:aa:6b:2e:b8:23:dd:c7:b2:
c4:d1:52:de:f3:f8:09:8a:6c:d6:f0:93:03:92:35:
8c:d7:ef:4f:b9:d5:22:6d:b6:c6:81:d9:a8:c6:d1:
b3:01:0c:99:3f:41:a4:fa:d0:b2:bc:ee:bd:e0:35:
ec:2d:ea:8c:38:b1:ad:c5:ae:15:b0:fb:02:ca:9a:
9e:40:a4:e5:d1:9c:76:a0:e1:d6:d4:fb:98:fe:90:
88:c6:3f:db:77:61:94:90:e6:62:4d:db:a6:d6:9a:
b1:fa:2f:a0:93:5e:97:45:9a:72:60:d3:11:67:58:
cf:10:91:f4:1d:47:87:cd:3d:2e:be:ec:7d:bd:11:
5b:91:24:8e:6f:d0:ab:f8:6b:42:7f:8f:4e:a8:4f:
e4:f0:7d:fc:d1:91:bc:85:1d:af:49:17:69:02:3f:
a8:cb:24:73:fb:12:bc:d2:8d:48:c6:ef:69:a9:54:
89:fe:cf:a7:46:49:3e:70:0c:1c:67:41:9e:bb:b2:
18:05:0f:5d:4f:fb:00:47:c5:89:d1:55:60:84:45:
4d:31:86:37:df:85:10:d5:6f:05:1f:06:69:51:06:
31:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D7:36:15:46:79:66:D6:17:34:5A:24:A9:A6:38:8E:51:79:84:5B
X509v3 Authority Key Identifier:
keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:cf:37:d1:84:38:80:1e:79:fe:49:72:55:27:8e:10:82:5d:
b3:5d:25:20:64:7c:af:0e:d5:2b:28:71:c1:1b:a3:fe:b6:ba:
bc:b0:c0:56:8e:eb:4d:26:d6:d6:bf:00:e4:8e:b0:a2:78:0c:
23:0a:7d:40:14:e7:ce:a0:30:ad:37:1e:a4:f8:eb:cf:13:7f:
26:41:30:40:55:d5:7d:0d:86:cd:16:30:7b:f6:cd:83:6a:0d:
d8:74:8c:85:40:47:bc:1f:d3:81:d8:9e:70:4e:76:3f:18:6f:
9b:4d:5c:ff:87:50:07:77:2b:1f:f8:10:3c:ba:52:72:42:87:
e9:6d:c1:63:40:f9:73:2e:ba:01:92:7c:04:54:cf:64:ee:71:
cd:b3:e7:46:3a:25:9e:7d:f0:d1:da:e8:75:78:77:e2:94:eb:
78:b7:fb:db:50:62:0d:20:a7:e7:4e:82:9d:e3:58:cf:ab:08:
a6:c0:9b:82:4a:c6:86:18:33:10:aa:ee:a8:ae:71:58:d0:7e:
aa:06:ae:26:87:33:92:27:be:f4:52:35:d5:73:c2:a8:8c:cb:
e2:52:9e:33:ec:75:d0:a2:97:3e:6a:10:ec:2c:79:07:be:2b:
10:6c:23:3f:4d:27:52:2a:d7:7f:65:6e:29:61:84:3d:9d:66:
0d:f0:d7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:34:32 2026 by rpki-client