Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier: YC+Ca7cD7rt3DBpXOz2dzF9vAtvuCbK/ARlnbpBB0Cc=
Subject key identifier: E4:FD:80:75:FB:BE:93:49:2C:C6:0A:AE:5A:D1:AE:25:AB:35:BF:D3
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial: 019D97E253209CBC21C2829FC6C921BA698D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number: 18BF
Signing time: Thu 16 Apr 2026 20:01:24 +0000
Manifest this update: Thu 16 Apr 2026 20:01:24 +0000
Manifest next update: Fri 17 Apr 2026 20:01:24 +0000
Files and hashes: 1: BCkDmJhYgCR9TE4jRqDw3_AqqdI.roa (hash: mNQmWHALaV0PGX2z6HR7E/b09jPkjPuON0y07SlXofA=)
2: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: 8xehV96cqlmHZeay2FUwGh+DZPamJAQd9drkGcngkcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:53:20:9c:bc:21:c2:82:9f:c6:c9:21:ba:69:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Validity
Not Before: Apr 16 20:01:24 2026 GMT
Not After : Apr 17 20:01:24 2026 GMT
Subject: CN=e4fd8075fbbe93492cc60aae5ad1ae25ab35bfd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:01:af:de:0e:30:26:1c:25:c7:5d:a4:57:30:
d8:c5:17:64:88:de:29:a6:b2:cc:bd:9c:97:ae:ac:
0e:89:3d:b1:5e:b0:aa:83:2b:6d:66:8f:5f:7a:58:
85:bf:0a:30:25:de:7e:55:1b:b0:38:9e:2d:f2:e3:
4d:ac:68:cc:a4:cf:6c:21:ee:68:82:20:a9:72:f6:
d2:fd:5f:53:cf:0e:f8:97:b2:e8:ec:2f:84:bb:09:
19:4d:91:e9:78:0a:01:64:3d:a2:25:e0:c3:e6:14:
c0:05:a7:46:21:f2:48:87:aa:a2:40:4d:5a:cd:ea:
a3:73:29:ac:23:76:0f:39:13:a3:2c:41:99:de:09:
9a:d9:fc:a6:f9:9a:cb:ad:f0:4e:8b:93:02:e8:78:
35:8e:0f:f4:33:f3:0d:77:88:80:70:09:e4:58:b4:
08:70:a4:88:ef:9d:97:bb:4f:84:0c:5f:64:29:b4:
9d:16:66:7b:c5:48:9b:ce:2f:85:f0:d0:70:e9:bd:
52:15:7e:f6:a7:0c:c3:a7:09:04:3f:0a:e1:db:d3:
18:57:72:a6:28:4e:cd:37:e4:9d:53:2b:dd:df:e8:
71:20:e2:f4:81:a1:5b:65:0b:75:b9:e8:0d:88:bb:
b4:ac:de:cf:44:02:63:1a:87:9e:59:3d:f4:9c:78:
ca:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FD:80:75:FB:BE:93:49:2C:C6:0A:AE:5A:D1:AE:25:AB:35:BF:D3
X509v3 Authority Key Identifier:
keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0e:68:1f:95:8c:08:f0:ae:dd:40:19:d7:85:08:e7:e9:bf:
32:14:3e:a4:c5:fc:c8:75:8e:1f:e1:7c:07:cd:96:da:9c:41:
a5:2d:bb:fe:6f:34:ff:21:e2:d7:f5:83:7a:44:bd:88:43:99:
75:63:b2:37:29:0e:c1:1d:87:56:26:2f:ac:17:f3:fa:9a:36:
39:dc:1b:fe:6f:0a:ce:4c:51:ea:c0:9c:74:e1:df:34:a1:03:
c6:e0:6a:a1:b2:2d:ad:eb:8e:b1:9c:8a:1b:29:8b:51:e3:59:
3d:73:ae:82:70:52:42:00:19:5b:ae:cc:6f:8a:51:fe:3d:1b:
54:44:a8:47:1d:76:45:d7:96:0d:db:4b:7c:08:d5:8a:5c:47:
90:89:95:1d:ba:f2:94:31:cc:19:d8:f0:01:40:ab:98:2a:71:
e0:06:99:88:75:30:89:8b:95:86:1b:70:29:51:c6:51:87:3b:
2c:03:95:df:6f:cb:40:9c:c3:26:7a:24:f9:4d:46:c6:12:b2:
bb:0b:b7:88:6a:e6:9c:1f:0e:7c:ad:69:72:af:d0:d0:18:7e:
71:3f:3e:b7:04:07:f1:7a:04:1a:ce:29:b3:98:dd:d8:f2:00:
a4:7f:ee:6e:94:4f:97:cb:f4:68:40:31:b2:dd:85:11:65:99:
86:01:54:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:33:22 2026 by rpki-client