Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier: bKcR/NCkz79J57LGg1ldzKQbpHJlvsSP+gXV9nWWWfQ=
Subject key identifier: 90:F1:CC:68:74:FA:60:5C:9B:38:03:DF:04:0C:F4:E2:E5:D9:AC:67
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial: 01A0EA77479B2E045DB7CE3ABBC0E1BF75BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number: 1553
Signing time: Tue 29 Sep 2026 00:01:20 +0000
Manifest this update: Tue 29 Sep 2026 00:01:20 +0000
Manifest next update: Wed 30 Sep 2026 00:01:20 +0000
Files and hashes: 1: ISzoHWBHuetmLQLrWc6n51rZYYg.roa (hash: 1yzmUR8v23fkpuJd9tVMCHTMq6Cr5Yk1vOljZxe5hY0=)
2: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: RJ5596Te+iVk1wQ4n7s3YLCocy34RVvxlGgRdo794as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:77:47:9b:2e:04:5d:b7:ce:3a:bb:c0:e1:bf:75:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
Validity
Not Before: Sep 29 00:01:20 2026 GMT
Not After : Sep 30 00:01:20 2026 GMT
Subject: CN=90f1cc6874fa605c9b3803df040cf4e2e5d9ac67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f5:7e:77:f8:af:21:e5:5f:3b:3d:72:ef:3d:
bd:96:37:71:6b:b3:62:75:30:0a:b4:e9:3d:da:00:
a6:3d:5b:7e:30:79:80:90:51:7a:7b:28:b1:82:8a:
7f:d4:f3:24:d4:be:21:a7:2f:5d:51:4d:74:1d:ac:
85:39:a0:d4:5e:4a:ac:0b:70:58:5b:1d:a4:80:8d:
de:a2:23:56:3f:32:45:4e:01:c0:19:de:01:92:12:
4d:5f:03:63:63:68:35:df:cf:26:db:42:d5:40:a9:
59:4a:a4:f9:0b:c9:2e:28:3d:cb:d6:96:6d:1a:93:
b3:ba:eb:cf:51:4d:9f:a4:be:6c:a0:bd:3d:28:1f:
ac:9b:b7:ba:f1:4f:d5:7e:db:47:19:fe:6c:b6:db:
55:4c:f3:f6:0f:0c:68:e3:06:b8:a7:34:59:cd:33:
53:2d:f8:e5:99:4d:d8:15:e6:2c:93:55:55:08:64:
7a:6d:e6:5f:f9:89:db:ea:10:c9:66:29:e3:2d:e8:
b6:b3:3a:35:87:db:dd:47:01:3a:ed:4c:9a:e8:a3:
17:76:14:e5:f3:71:d9:b2:5c:ae:32:a0:aa:35:bc:
49:eb:17:37:ce:6a:57:99:49:5b:09:6e:54:59:e9:
bb:e7:3c:33:51:f1:fb:23:8f:e9:9b:be:1a:a0:89:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F1:CC:68:74:FA:60:5C:9B:38:03:DF:04:0C:F4:E2:E5:D9:AC:67
X509v3 Authority Key Identifier:
keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:01:12:33:85:cc:31:4c:63:c7:b2:1b:04:a3:7d:98:2c:46:
68:b5:a5:aa:6c:98:25:d2:33:53:50:40:7e:2a:ac:5b:ba:54:
fe:38:55:53:f2:a4:06:31:05:28:77:ff:c9:c8:79:fb:ad:9a:
5f:ec:b6:3d:13:0b:9b:d0:61:05:fd:22:3c:2b:2e:2c:47:aa:
d5:66:24:33:83:45:48:d4:d2:60:83:3e:9d:90:21:5b:9a:8e:
b6:ee:af:89:eb:00:b7:25:6b:fe:1d:08:b3:9d:77:01:6f:20:
61:02:51:59:ab:da:0a:e4:50:e4:e3:3d:2d:1e:66:39:f1:25:
8d:14:32:5c:a6:41:42:65:91:59:aa:3b:16:80:da:85:be:1b:
6a:bc:7c:68:4b:f1:c4:09:04:9d:6a:ff:2c:aa:c6:2d:e1:b5:
d7:eb:da:68:4a:28:e9:0e:d1:1f:df:4c:54:7b:12:05:1b:66:
75:94:06:7a:ec:38:7f:0b:81:03:1d:3c:c4:db:8e:bc:4c:ea:
d9:65:95:dc:1b:1d:df:67:18:13:19:e5:d6:46:4d:cb:b3:4f:
05:58:a7:2f:89:17:a8:8d:d1:25:c1:8b:e5:86:21:c3:34:b6:
95:cf:e9:17:19:89:74:1b:7e:d1:c4:f0:8e:6c:fe:bb:69:02:
4f:2b:92:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDqd0ebLgRdt846u8Dhv3W6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTQ5MWE2YjEwNDMzYjk5NjE1NzU2ZmRlOTMxM2YyYmUx
ZDNkZjAwHhcNMjYwOTI5MDAwMTIwWhcNMjYwOTMwMDAwMTIwWjAzMTEwLwYDVQQD
Eyg5MGYxY2M2ODc0ZmE2MDVjOWIzODAzZGYwNDBjZjRlMmU1ZDlhYzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fV+d/ivIeVfOz1y7z29ljdxa7Ni
dTAKtOk92gCmPVt+MHmAkFF6eyixgop/1PMk1L4hpy9dUU10HayFOaDUXkqsC3BY
Wx2kgI3eoiNWPzJFTgHAGd4BkhJNXwNjY2g1388m20LVQKlZSqT5C8kuKD3L1pZt
GpOzuuvPUU2fpL5soL09KB+sm7e68U/VfttHGf5stttVTPP2Dwxo4wa4pzRZzTNT
LfjlmU3YFeYsk1VVCGR6beZf+Ynb6hDJZinjLei2szo1h9vdRwE67Uya6KMXdhTl
83HZslyuMqCqNbxJ6xc3zmpXmUlbCW5UWem75zwzUfH7I4/pm74aoInnoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDxzGh0+mBcmzgD3wQM9OLl2axnMB8GA1UdIwQY
MBaAFHQUkaaxBDO5lhV1b96TE/K+HT3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTct
ODRiNTc2OTNjN2E4LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTctODRiNTc2OTNjN2E4
LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAESM4XM
MUxjx7IbBKN9mCxGaLWlqmyYJdIzU1BAfiqsW7pU/jhVU/KkBjEFKHf/ych5+62a
X+y2PRMLm9BhBf0iPCsuLEeq1WYkM4NFSNTSYIM+nZAhW5qOtu6viesAtyVr/h0I
s513AW8gYQJRWavaCuRQ5OM9LR5mOfEljRQyXKZBQmWRWao7FoDahb4barx8aEvx
xAkEnWr/LKrGLeG11+vaaEoo6Q7RH99MVHsSBRtmdZQGeuw4fwuBAx08xNuOvEzq
2WWV3Bsd32cYExnl1kZNy7NPBVinL4kXqI3RJcGL5YYhwzS2lc/pFxmJdBt+0cTw
jmz+u2kCTyuSxQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 08:10:50 2026 by rpki-client