Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier: Jt8CLL7wL3oqAmxYkZZ/EbohyQJhNLEINsjEgabyCrs=
Subject key identifier: DC:3B:B8:AE:9E:EE:B1:70:93:73:03:61:FB:6A:92:CD:99:76:C6:4F
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial: 019CAA589E252B3A30680FB37982E284ABBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 17:01:00 +0000
Manifest this update: Sun 01 Mar 2026 17:01:00 +0000
Manifest next update: Mon 02 Mar 2026 17:01:00 +0000
Files and hashes: 1: BCkDmJhYgCR9TE4jRqDw3_AqqdI.roa (hash: mNQmWHALaV0PGX2z6HR7E/b09jPkjPuON0y07SlXofA=)
2: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: XKo8AeJyOLPV1WiBBOH/ZG02iiRbnNKNeUXRgFiJ2/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:9e:25:2b:3a:30:68:0f:b3:79:82:e2:84:ab:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Validity
Not Before: Mar 1 17:01:00 2026 GMT
Not After : Mar 2 17:01:00 2026 GMT
Subject: CN=dc3bb8ae9eeeb17093730361fb6a92cd9976c64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4c:af:19:d9:09:15:c8:fd:1f:b3:85:a7:46:
3d:07:08:68:9e:e4:08:e5:8a:b4:29:ef:e5:59:3a:
c4:71:bc:8f:40:63:38:c6:d1:41:f5:9b:58:34:f8:
04:13:3a:84:00:20:b1:df:28:22:fa:12:3c:26:7b:
83:a4:96:71:e9:86:82:83:d1:a4:c7:99:50:6e:92:
0e:32:3e:9d:fa:e9:95:8b:e4:ff:c8:65:05:42:2f:
25:8d:da:aa:60:e5:52:2a:e2:fc:f7:8f:f0:ef:90:
11:70:17:0a:d5:6f:5a:67:45:58:ba:0a:9d:7d:e0:
6c:d9:4f:8f:e2:10:50:cf:bb:13:b9:2c:55:03:fd:
a2:6d:95:c4:5d:ee:1b:63:55:50:4f:8e:ef:35:c6:
dc:3f:94:2d:b3:86:61:9c:76:35:b0:a0:be:ab:a8:
ab:97:7a:e8:44:cf:0f:0d:9f:4d:4c:77:f8:6c:03:
d7:5d:48:b6:69:74:9d:a7:ad:48:ac:42:31:18:fd:
ce:a4:31:a3:9b:75:1c:b7:7b:70:a0:15:76:c1:86:
94:96:83:73:b8:3f:b5:c7:54:38:1b:e3:ee:54:da:
16:14:25:4b:28:34:16:87:e4:d6:25:63:20:68:19:
0a:e0:40:0a:ab:19:9b:d6:50:ca:f2:b1:07:80:db:
49:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3B:B8:AE:9E:EE:B1:70:93:73:03:61:FB:6A:92:CD:99:76:C6:4F
X509v3 Authority Key Identifier:
keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ac:eb:37:a0:76:4b:19:4e:21:71:a3:00:53:a8:fb:9b:e1:
3d:df:f5:7a:6e:ec:37:91:50:50:5b:cc:19:48:51:c7:2b:e5:
ba:b5:26:5e:cf:09:ce:13:86:d3:d4:05:9e:ca:40:d5:ab:9a:
d6:04:d6:b3:97:55:a3:3d:02:6b:a6:c5:98:7b:8e:72:5e:1c:
8e:64:87:27:c2:45:37:b1:65:96:f7:1d:55:da:b5:27:c3:5a:
49:22:a7:2f:31:ac:38:a5:56:7d:92:70:f3:39:ce:fb:5c:1f:
91:20:6a:53:a1:75:01:31:2f:4c:03:80:e2:94:61:2a:d5:1c:
b7:06:11:40:3d:c3:a6:99:c4:dc:23:3d:69:dd:6f:04:7a:ea:
23:3d:96:65:25:25:f9:95:89:ce:29:0a:26:06:af:5c:10:da:
ec:04:51:5a:71:9f:cd:7d:4c:36:ef:38:79:5a:5f:3a:4e:0d:
cd:cc:bb:9b:96:10:7c:f1:42:f5:85:51:ec:3a:76:fd:21:d5:
0c:9c:4b:63:b7:e4:fd:64:6d:89:f2:d2:bc:12:34:10:ff:a5:
3b:4a:bc:6e:1a:d5:ae:f3:90:c0:00:4e:ed:9e:11:57:cb:55:
89:7c:12:b2:6e:e8:5a:ba:f0:c9:8d:fa:90:0c:f6:6f:8a:82:
7a:dc:3c:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWJ4lKzowaA+zeYLihKu9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYjQ5MTIyZDllOWJiYWZhNTc3ZjY0NDdmMjFiOGJlYzc2
YzA1ZjAwHhcNMjYwMzAxMTcwMTAwWhcNMjYwMzAyMTcwMTAwWjAzMTEwLwYDVQQD
EyhkYzNiYjhhZTllZWViMTcwOTM3MzAzNjFmYjZhOTJjZDk5NzZjNjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0yvGdkJFcj9H7OFp0Y9BwhonuQI
5Yq0Ke/lWTrEcbyPQGM4xtFB9ZtYNPgEEzqEACCx3ygi+hI8JnuDpJZx6YaCg9Gk
x5lQbpIOMj6d+umVi+T/yGUFQi8ljdqqYOVSKuL894/w75ARcBcK1W9aZ0VYugqd
feBs2U+P4hBQz7sTuSxVA/2ibZXEXe4bY1VQT47vNcbcP5Qts4ZhnHY1sKC+q6ir
l3roRM8PDZ9NTHf4bAPXXUi2aXSdp61IrEIxGP3OpDGjm3Uct3twoBV2wYaUloNz
uD+1x1Q4G+PuVNoWFCVLKDQWh+TWJWMgaBkK4EAKqxmb1lDK8rEHgNtJmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNw7uK6e7rFwk3MDYftqks2ZdsZPMB8GA1UdIwQY
MBaAFA20kSLZ6buvpXf2RH8huL7HbAXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2Et
MTQ2MDBkNTc4MDhhLzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2EtMTQ2MDBkNTc4MDhh
LzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6zrN6B2
SxlOIXGjAFOo+5vhPd/1em7sN5FQUFvMGUhRxyvlurUmXs8JzhOG09QFnspA1aua
1gTWs5dVoz0Ca6bFmHuOcl4cjmSHJ8JFN7FllvcdVdq1J8NaSSKnLzGsOKVWfZJw
8znO+1wfkSBqU6F1ATEvTAOA4pRhKtUctwYRQD3DppnE3CM9ad1vBHrqIz2WZSUl
+ZWJzikKJgavXBDa7ARRWnGfzX1MNu84eVpfOk4Nzcy7m5YQfPFC9YVR7Dp2/SHV
DJxLY7fk/WRtifLSvBI0EP+lO0q8bhrVrvOQwABO7Z4RV8tViXwSsm7oWrrwyY36
kAz2b4qCetw84w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:33:46 2026 by rpki-client