Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier: cM2clwWB7GC36Wk6WlTey2sbsgPSCMIhQjw1PJ/LmZA=
Subject key identifier: 84:B4:A3:A3:46:E9:D9:AF:11:D8:DB:D9:B4:65:C3:24:98:95:C9:C3
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial: 019EBD6C8B938F4354634137A2CCBD4822A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number: 1957
Signing time: Fri 12 Jun 2026 20:01:07 +0000
Manifest this update: Fri 12 Jun 2026 20:01:07 +0000
Manifest next update: Sat 13 Jun 2026 20:01:07 +0000
Files and hashes: 1: BCkDmJhYgCR9TE4jRqDw3_AqqdI.roa (hash: mNQmWHALaV0PGX2z6HR7E/b09jPkjPuON0y07SlXofA=)
2: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: VXJF3VsUElg13XZijbSycePzL+NNAsgEYKha7w5UJ24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:6c:8b:93:8f:43:54:63:41:37:a2:cc:bd:48:22:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Validity
Not Before: Jun 12 20:01:07 2026 GMT
Not After : Jun 13 20:01:07 2026 GMT
Subject: CN=84b4a3a346e9d9af11d8dbd9b465c3249895c9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3e:51:23:57:02:89:c8:6a:73:1b:fe:b5:52:
34:47:d7:32:2e:d6:5a:0a:05:70:b7:76:ef:15:f5:
f3:c5:57:e7:70:ed:38:c8:fe:72:01:93:61:3c:83:
3a:59:a6:a3:67:ed:9b:35:6c:6d:7d:7f:40:a0:29:
44:28:f0:1d:d3:65:d8:78:6b:db:96:24:66:49:ea:
a0:c1:04:5d:ca:64:00:9b:52:0f:a8:2e:42:41:15:
5e:18:8d:b3:7c:db:b3:83:76:91:7e:20:88:d9:49:
5f:cf:68:1e:fb:96:10:d8:5e:56:87:21:81:b9:f6:
68:12:ef:24:53:c5:7b:dd:2c:1e:be:74:de:8d:11:
77:2b:93:ee:88:9e:24:24:9c:23:b5:55:84:77:a3:
fd:72:d6:6b:2e:66:7d:9e:23:16:b6:5d:3a:64:67:
9d:1d:57:c4:93:cc:8a:dd:2e:48:d7:e1:84:e6:4b:
79:ae:98:91:41:da:16:5a:8b:17:a4:c4:4b:d3:1e:
bd:b4:ad:01:42:36:d2:22:e3:dc:84:e9:69:23:be:
ed:26:e6:43:c6:99:bf:6c:e3:bf:24:2d:6b:c4:ce:
76:62:41:db:43:5d:c3:86:5c:8d:fc:ff:87:1f:7b:
7c:82:2d:27:b5:14:e1:8e:25:a5:21:52:49:e3:eb:
c2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B4:A3:A3:46:E9:D9:AF:11:D8:DB:D9:B4:65:C3:24:98:95:C9:C3
X509v3 Authority Key Identifier:
keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:93:2a:d3:f0:1b:2a:34:a9:f2:b7:79:72:e5:06:0c:91:3d:
28:64:b8:b2:02:18:b2:4c:0c:11:1b:56:90:e3:51:06:a2:53:
34:b5:0e:38:ce:94:c3:85:49:82:a1:20:2d:13:9c:b8:1c:2f:
b1:ce:70:fe:91:5f:1e:1f:18:f2:6b:7e:59:ad:4d:9c:e6:dd:
a1:1f:f7:08:1c:18:46:0c:f4:cf:b1:ac:51:be:e4:82:a8:4b:
bb:0e:07:d0:44:63:dd:cc:b8:17:0e:a7:db:26:5b:aa:88:2b:
36:61:17:fb:37:1b:79:fa:ba:45:4e:6d:30:85:e4:e9:88:b2:
1d:45:86:61:1e:84:c8:b7:fb:4e:71:5a:15:38:32:23:b7:8c:
cf:f6:bc:dc:dc:f5:1c:0c:9a:e0:e8:20:cd:fc:b8:8e:20:69:
52:35:f1:d2:0b:09:70:89:6d:6c:ca:fc:e8:d9:e3:85:f4:f9:
f3:6b:f4:2a:46:51:3b:57:21:07:a2:d3:67:38:bc:cd:2e:42:
d3:4b:5c:94:2a:a5:b0:a9:ed:b4:78:ed:0d:32:5e:17:37:00:
67:3a:ce:65:22:57:ea:43:3a:11:c3:7a:76:3e:95:1f:ea:ed:
5d:59:dc:de:70:0a:e8:31:2f:80:b3:42:d2:df:e0:fe:1a:bc:
09:ab:61:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:54:25 2026 by rpki-client