
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
File: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft (raw, json)
Hash identifier: LEuF4ezbAeOP3laxDsH8vrNuRV2gEDySOKSBDABxlro=
Subject key identifier: 06:93:86:F7:B4:9B:D9:0E:A8:CB:51:88:16:A5:BE:93:41:CC:DC:4C
Authority key identifier: 76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA
Certificate issuer: /CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
Certificate serial: 019CAB346EA0EBF883E89A1676EDBF4BEC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
Manifest number: 078E
Signing time: Sun 01 Mar 2026 21:01:05 +0000
Manifest this update: Sun 01 Mar 2026 21:01:05 +0000
Manifest next update: Mon 02 Mar 2026 21:01:05 +0000
Files and hashes: 1: cljflfngv7VZa65xQ-duBbtPRE0.roa (hash: 9lokgvNxPt+p28kHYXp3QH4rvvO9XazJeqstX10GvAU=)
2: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl (hash: SCMaMzm75y6oV3MUALXdkrLQZXf9L4kEq+jtlXcaAeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:6e:a0:eb:f8:83:e8:9a:16:76:ed:bf:4b:ec:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
Validity
Not Before: Mar 1 21:01:05 2026 GMT
Not After : Mar 2 21:01:05 2026 GMT
Subject: CN=069386f7b49bd90ea8cb518816a5be9341ccdc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:bf:ac:b6:ea:dc:1c:10:7d:6c:6e:58:4e:
8f:f1:fa:38:b5:ed:c6:7f:64:1c:2d:03:30:4b:e1:
f8:5c:4b:0d:9a:7f:9b:0d:b3:1a:26:1c:5f:a4:6f:
e1:e8:aa:44:e8:83:dc:69:4f:24:fa:50:b8:5f:03:
b0:87:43:cf:09:84:d5:f7:f6:0d:43:37:95:ab:4f:
c9:26:c2:31:6f:a8:14:39:25:9b:95:0a:ed:76:fa:
9c:c6:fe:c3:01:3e:20:1a:92:b5:58:6a:2c:e3:dc:
5b:23:05:3b:07:93:7a:43:f6:9c:14:1e:00:4d:a4:
d6:78:01:ee:14:b7:ea:e3:1d:8c:b6:15:5c:b7:41:
cc:02:99:1c:71:8e:d9:31:0f:b5:bf:08:0e:27:fa:
17:39:32:ef:69:74:a8:97:b7:32:f3:7d:c3:b6:32:
10:52:04:98:d2:52:cc:21:d7:d0:71:ed:3d:13:69:
2d:df:50:01:c0:96:f4:83:a2:90:17:32:9c:29:fe:
7a:6a:b2:4a:79:68:1f:15:fe:32:c2:0b:23:f8:4b:
89:4d:6e:f7:2a:b3:2a:35:70:9a:a0:a8:06:4f:8a:
18:e4:df:cb:09:a9:bd:be:1c:9c:99:8b:37:b2:96:
2f:64:cf:32:a8:52:e6:6a:4f:cd:5a:3c:3b:38:5d:
76:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:93:86:F7:B4:9B:D9:0E:A8:CB:51:88:16:A5:BE:93:41:CC:DC:4C
X509v3 Authority Key Identifier:
keyid:76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c6:01:b2:29:1c:94:c0:86:4d:9e:44:3a:f1:e9:0d:07:c0:
3e:ce:c1:24:94:e0:4e:2f:96:5f:a9:e8:48:77:58:76:af:87:
05:9b:99:c4:b3:6e:5f:01:2e:06:64:7f:e3:df:5f:19:19:32:
20:d8:d8:70:78:69:f1:c8:7a:b9:7e:c1:2b:1d:5f:89:53:6a:
b0:50:f5:23:bb:66:83:44:48:83:3b:54:e8:fd:ed:2a:9d:c9:
c5:ee:a1:9f:05:3a:9e:af:2c:5d:ce:ad:b7:0a:f6:05:a3:13:
94:c2:fb:29:1d:24:cb:6a:0d:b8:46:21:e5:70:ff:36:00:2e:
27:73:02:0a:4f:be:3f:1c:a5:5d:af:a9:42:ef:39:1f:66:a3:
cd:66:a5:6a:f5:d6:4a:39:4e:77:7e:df:78:2c:05:83:04:6a:
c7:33:a2:f8:a8:0f:67:ab:63:24:c1:44:09:b3:c8:1c:30:a9:
24:36:2b:5d:a8:ca:c9:48:2a:6d:32:15:9b:fa:37:46:95:3a:
47:3a:d5:e7:1b:02:05:0f:df:d6:3a:fb:42:d4:25:77:0c:08:
0f:a1:21:96:db:a0:6e:70:67:2a:19:7f:37:fc:1e:43:9a:d2:
bf:98:2a:fb:f6:3c:99:47:7a:c5:94:47:36:57:df:ea:f5:05:
b0:34:72:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:15 2026 by rpki-client