Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
File: dBkW6TW7TmhYsdIjYVrONp7SaB4.mft (raw, json)
Hash identifier: 3CNVPQCp2nmsYdBHL727NeREr9Npo3lQoK7emSdROq0=
Subject key identifier: B6:E0:01:13:ED:B8:55:6E:8A:EB:C0:12:9A:7A:DC:5A:BF:CB:B2:09
Authority key identifier: 74:19:16:E9:35:BB:4E:68:58:B1:D2:23:61:5A:CE:36:9E:D2:68:1E
Certificate issuer: /CN=741916e935bb4e6858b1d223615ace369ed2681e
Certificate serial: 019CAC469945AB4451A6D10E49A4D18D8BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 02:00:33 +0000
Manifest this update: Mon 02 Mar 2026 02:00:33 +0000
Manifest next update: Tue 03 Mar 2026 02:00:33 +0000
Files and hashes: 1: dBkW6TW7TmhYsdIjYVrONp7SaB4.crl (hash: zj/sxFwED/qnhlpE09DXTrq5UcuFVu/QnQb6LX/E1eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:99:45:ab:44:51:a6:d1:0e:49:a4:d1:8d:8b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741916e935bb4e6858b1d223615ace369ed2681e
Validity
Not Before: Mar 2 02:00:33 2026 GMT
Not After : Mar 3 02:00:33 2026 GMT
Subject: CN=b6e00113edb8556e8aebc0129a7adc5abfcbb209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:5b:85:98:7a:45:b4:63:aa:fc:b4:a0:b5:f3:
94:af:e2:c9:b4:60:1e:23:7d:45:f6:a0:3d:e0:51:
ee:7c:52:e3:fb:3e:66:93:21:8c:2d:6c:ec:d9:59:
2c:1b:48:6a:e9:03:19:99:a0:73:84:b9:f9:f5:2f:
e1:f5:8d:4a:82:d5:37:62:e6:19:29:c3:27:9d:92:
44:86:05:06:8d:de:6b:80:ec:9e:11:60:8b:79:d9:
ef:01:2b:99:b2:d9:09:45:2b:9a:88:e4:ad:ed:62:
5c:2d:a2:78:ee:dd:78:8c:1a:26:dc:85:bc:8b:47:
e3:ea:8a:97:5b:80:f4:6c:5d:63:3f:8e:3d:58:f9:
84:a5:c6:e1:25:a6:98:1c:6c:9b:57:16:9c:3e:30:
1c:ba:f7:c4:4e:88:37:b8:b0:3b:d8:25:6c:cb:9c:
98:2e:9b:c0:3b:02:48:22:b6:cb:77:c3:31:3d:7f:
c9:cf:64:d7:87:c8:c5:21:d9:b3:97:d2:cf:78:30:
b4:77:ff:0c:5f:cf:1b:e8:7e:1b:2f:a4:74:48:e1:
d9:55:23:ee:c2:7f:f1:8e:6b:5d:70:27:56:aa:e6:
3d:80:09:0f:15:d6:9b:55:28:5f:27:c4:b2:b4:76:
3e:e0:32:24:f5:d5:1e:4a:88:c0:85:13:7a:10:88:
82:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E0:01:13:ED:B8:55:6E:8A:EB:C0:12:9A:7A:DC:5A:BF:CB:B2:09
X509v3 Authority Key Identifier:
keyid:74:19:16:E9:35:BB:4E:68:58:B1:D2:23:61:5A:CE:36:9E:D2:68:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f8:0a:6d:fb:b0:86:60:eb:d4:9e:ff:a9:92:c4:c8:c6:cc:
f7:51:ca:5b:47:6b:99:b9:b0:f1:65:3c:f9:f4:5c:15:16:0c:
c4:a0:41:ef:60:e2:20:9a:7d:5d:04:c0:30:e6:f9:3c:0f:45:
1b:e7:8e:4a:cc:14:4b:e8:b7:9f:7a:74:99:2b:a8:35:36:d6:
93:04:87:3d:a1:86:e5:07:be:d6:ff:24:8c:bf:9c:c1:ab:a1:
89:88:13:93:d0:96:d2:9c:4b:ee:9d:66:5d:aa:0e:8f:ae:25:
e9:2c:af:82:8b:c0:02:26:a6:3b:fb:b3:9a:a0:8e:77:e6:de:
b3:d3:c3:f9:fe:88:28:77:dd:e1:56:10:99:f1:a2:38:13:41:
55:7f:54:f8:ae:86:4b:4d:7c:83:29:1f:05:25:c6:79:b0:fc:
c6:21:2c:8b:4b:6f:8e:40:4c:40:0a:49:80:aa:ab:c1:86:47:
00:9e:18:3e:6a:4b:2e:cb:29:3f:44:cb:2c:ad:a9:47:f1:90:
8f:e6:11:8e:06:67:1a:fd:25:db:37:35:6f:04:80:51:e8:8e:
c5:97:8f:3f:f2:0f:5e:7f:87:35:84:f5:b3:7e:42:1c:76:88:
e2:0c:e5:2f:3f:00:38:a8:bc:47:e4:0c:6f:5b:a8:49:2b:2e:
0c:78:66:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRplFq0RRptEOSaTRjYvJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTkxNmU5MzViYjRlNjg1OGIxZDIyMzYxNWFjZTM2OWVk
MjY4MWUwHhcNMjYwMzAyMDIwMDMzWhcNMjYwMzAzMDIwMDMzWjAzMTEwLwYDVQQD
EyhiNmUwMDExM2VkYjg1NTZlOGFlYmMwMTI5YTdhZGM1YWJmY2JiMjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+VuFmHpFtGOq/LSgtfOUr+LJtGAe
I31F9qA94FHufFLj+z5mkyGMLWzs2VksG0hq6QMZmaBzhLn59S/h9Y1KgtU3YuYZ
KcMnnZJEhgUGjd5rgOyeEWCLednvASuZstkJRSuaiOSt7WJcLaJ47t14jBom3IW8
i0fj6oqXW4D0bF1jP449WPmEpcbhJaaYHGybVxacPjAcuvfETog3uLA72CVsy5yY
LpvAOwJIIrbLd8MxPX/Jz2TXh8jFIdmzl9LPeDC0d/8MX88b6H4bL6R0SOHZVSPu
wn/xjmtdcCdWquY9gAkPFdabVShfJ8SytHY+4DIk9dUeSojAhRN6EIiCGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbgARPtuFVuiuvAEpp63Fq/y7IJMB8GA1UdIwQY
MBaAFHQZFuk1u05oWLHSI2Fazjae0mgeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJrVzZUVzdUbWhZc2RJallWck9OcDdTYUI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yODkxZjYtNzg2MS00MDM3LTgwMDgt
NTJjZjAxOTU4MzhiLzEvZEJrVzZUVzdUbWhZc2RJallWck9OcDdTYUI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8yODkxZjYtNzg2MS00MDM3LTgwMDgtNTJjZjAxOTU4Mzhi
LzEvZEJrVzZUVzdUbWhZc2RJallWck9OcDdTYUI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffgKbfuw
hmDr1J7/qZLEyMbM91HKW0drmbmw8WU8+fRcFRYMxKBB72DiIJp9XQTAMOb5PA9F
G+eOSswUS+i3n3p0mSuoNTbWkwSHPaGG5Qe+1v8kjL+cwauhiYgTk9CW0pxL7p1m
XaoOj64l6SyvgovAAiamO/uzmqCOd+bes9PD+f6IKHfd4VYQmfGiOBNBVX9U+K6G
S018gykfBSXGebD8xiEsi0tvjkBMQApJgKqrwYZHAJ4YPmpLLsspP0TLLK2pR/GQ
j+YRjgZnGv0l2zc1bwSAUeiOxZePP/IPXn+HNYT1s35CHHaI4gzlLz8AOKi8R+QM
b1uoSSsuDHhmEQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:44:44 2026 by rpki-client