Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier: /Mpxs5I+aN6FdmlUKxDxP6ja2opfxPN/tOJzFo6GBHI=
Subject key identifier: C9:F1:13:FC:F1:FC:1B:5C:BC:14:31:67:4A:99:00:34:B1:AF:F1:14
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial: 01A0C2FB9BAE5379E053CB59E023FAB8E5AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number: 1A63
Signing time: Mon 21 Sep 2026 08:01:04 +0000
Manifest this update: Mon 21 Sep 2026 08:01:04 +0000
Manifest next update: Tue 22 Sep 2026 08:01:04 +0000
Files and hashes: 1: BCkDmJhYgCR9TE4jRqDw3_AqqdI.roa (hash: mNQmWHALaV0PGX2z6HR7E/b09jPkjPuON0y07SlXofA=)
2: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: 9lGwM+ArrQxbYOWveuQaC4C51mGA3RPNL9my+PZ2E/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:9b:ae:53:79:e0:53:cb:59:e0:23:fa:b8:e5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Validity
Not Before: Sep 21 08:01:04 2026 GMT
Not After : Sep 22 08:01:04 2026 GMT
Subject: CN=c9f113fcf1fc1b5cbc1431674a990034b1aff114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:fd:84:9b:e7:86:4e:a1:78:b8:c5:32:1c:
f3:d7:1d:2b:1f:24:5f:03:e0:75:e8:1f:5b:03:63:
5c:0a:63:f7:79:cf:9f:b1:f6:37:a8:af:a9:7c:76:
89:8f:9a:13:e7:fa:80:59:4f:fa:ab:33:aa:9c:28:
1e:15:e9:e5:45:71:13:8b:35:95:72:62:68:5f:2c:
5e:af:7b:1f:64:fa:de:44:0e:93:30:ba:e3:90:b7:
70:a9:fd:39:05:fa:1b:34:12:49:f1:42:d0:d5:4c:
44:33:a6:04:56:68:5c:33:26:ff:69:88:a6:87:d4:
b1:30:20:ed:9a:47:79:d7:cd:43:ed:33:f9:cb:78:
45:2e:c9:3b:c7:ac:7a:42:94:71:8f:2f:a6:fc:ac:
38:ce:9f:60:01:33:c5:b4:6d:f0:01:ba:70:94:8a:
5b:b4:6d:83:31:a4:43:ba:59:61:8a:b8:cb:4f:b4:
a4:4e:e1:ad:d2:d3:dd:e6:b8:6a:bd:42:7e:b8:1a:
5a:00:3c:59:8f:6d:f5:b1:0d:cd:18:73:87:1a:11:
4c:a1:f2:7f:22:58:a3:b3:a3:ff:d7:b5:fc:98:62:
54:34:3d:69:e5:20:57:8a:83:67:07:5e:fc:4b:b4:
c4:61:b8:94:a9:35:ce:17:a3:53:5c:df:01:a4:cb:
ec:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F1:13:FC:F1:FC:1B:5C:BC:14:31:67:4A:99:00:34:B1:AF:F1:14
X509v3 Authority Key Identifier:
keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:55:b4:49:b6:7b:e8:a3:4d:7e:cd:bc:36:e8:6c:2d:6d:fa:
e7:91:60:9d:1f:8f:c6:25:09:a8:81:1b:b8:66:0a:58:4a:30:
77:57:42:a0:c4:8a:58:a1:af:c3:36:26:5a:ce:40:0b:16:58:
06:a3:07:82:83:39:a6:4a:a9:0e:54:56:2a:60:55:d1:d8:a6:
e3:0c:52:2d:77:02:8c:e4:a4:63:30:53:f8:9b:eb:c4:bb:e0:
59:55:ca:3d:0f:c6:ad:96:65:b9:d5:15:65:fd:68:1a:15:5c:
c0:fd:99:8e:fd:b8:83:36:a5:4d:ea:e0:24:73:7e:f3:4a:0a:
15:3e:14:f6:1a:7e:a0:78:3a:a0:c3:41:83:09:01:cd:77:34:
1a:8d:9e:d9:0c:c8:50:70:5c:0f:3e:3e:80:36:d9:e8:e6:6e:
5f:01:a2:bc:37:f4:fd:7a:8a:ef:6b:33:18:8e:87:91:4e:fa:
b0:7c:36:1a:5f:49:e2:34:c7:ae:f7:df:d8:3a:34:19:e9:d1:
b9:37:64:65:20:0e:b3:58:fb:75:7e:c3:9e:85:d2:7b:90:35:
fa:61:5b:8a:ab:0b:a2:10:f1:21:78:32:8c:91:47:6c:43:19:
8a:28:5d:62:b5:b7:f3:60:16:8c:1f:07:64:d0:68:e2:ae:6e:
06:30:8d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:41:55 2026 by rpki-client