Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier: 7hY1mwZzYyvEOFOZl81Dyb0UwewhdPZGyoGuJ+D58ng=
Subject key identifier: 09:B2:28:DD:A7:8B:A9:DF:9E:D6:A7:AF:A8:2B:79:B1:B3:CE:44:8C
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial: 019D98BD4BA30DC17500C4AB733AD0C991D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number: 139B
Signing time: Fri 17 Apr 2026 00:00:35 +0000
Manifest this update: Fri 17 Apr 2026 00:00:35 +0000
Manifest next update: Sat 18 Apr 2026 00:00:35 +0000
Files and hashes: 1: ISzoHWBHuetmLQLrWc6n51rZYYg.roa (hash: 1yzmUR8v23fkpuJd9tVMCHTMq6Cr5Yk1vOljZxe5hY0=)
2: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: Gj107FOx+0jcnbFwHooEDHGfXf8/BsLtByD+3IUh3NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:4b:a3:0d:c1:75:00:c4:ab:73:3a:d0:c9:91:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
Validity
Not Before: Apr 17 00:00:35 2026 GMT
Not After : Apr 18 00:00:35 2026 GMT
Subject: CN=09b228dda78ba9df9ed6a7afa82b79b1b3ce448c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:7f:18:f0:cd:d1:31:3a:14:af:d3:17:90:
b9:73:f3:92:01:9d:95:44:67:fb:82:6d:d2:01:08:
51:27:6a:2f:db:2d:cf:c8:78:7b:61:53:2d:26:e3:
66:f3:1d:a7:bb:4f:ec:0b:31:7d:5d:f8:2f:ce:5d:
65:a3:62:73:aa:30:a7:38:7a:7d:09:f1:cd:f5:e7:
fa:fe:f9:c9:1b:bb:c8:1e:95:35:89:14:f0:51:f1:
d1:13:93:e1:9d:e9:f5:a4:27:0c:d9:f4:9e:c2:f3:
81:d7:f7:a5:5f:3d:be:9e:d1:3b:d5:4a:b9:13:3f:
30:05:fa:7a:3c:e5:80:22:42:92:af:d3:60:80:a9:
65:54:5d:72:a3:d3:f2:52:9d:f6:e6:9f:59:66:29:
75:6a:66:56:81:62:77:3c:77:6c:e4:37:77:c3:6a:
46:82:bd:e3:4d:aa:85:26:c3:06:8f:ae:29:39:10:
0b:10:0f:3b:06:fa:9b:bc:df:b2:14:7d:7e:9a:1c:
b6:9c:14:42:c4:d5:fb:1a:e5:5f:f4:8f:24:71:18:
45:e8:06:3f:5e:a5:b3:37:89:6a:3d:3a:78:7f:bb:
93:f0:90:89:7b:52:52:8f:76:f9:20:85:f5:ee:84:
49:62:a0:01:75:b0:56:55:5c:9c:73:92:e7:82:d0:
a4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B2:28:DD:A7:8B:A9:DF:9E:D6:A7:AF:A8:2B:79:B1:B3:CE:44:8C
X509v3 Authority Key Identifier:
keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:93:c1:03:c0:32:54:7c:de:df:f2:83:14:a3:8d:d6:0f:a0:
73:82:44:c7:15:40:f5:f8:08:cc:fc:4c:71:dd:94:fb:8c:45:
89:37:cb:9e:97:cb:20:f2:fa:d8:01:81:0b:2f:7c:13:fd:5d:
91:c0:6c:22:22:ce:38:00:be:37:82:c3:94:b0:ac:df:c2:41:
d2:81:a4:3b:9e:3b:a2:aa:ed:ca:b7:d5:13:ec:9f:3a:28:80:
bd:d4:10:2c:a1:0e:92:96:88:79:58:5c:81:5a:75:c8:2e:fc:
02:63:2a:63:97:28:ba:b2:12:28:ae:dc:46:58:29:c2:7c:35:
c9:34:28:47:b9:b1:74:97:2e:4e:7e:da:38:46:b6:d3:d3:4d:
a0:92:54:8f:c6:19:b7:44:89:de:31:4e:b2:0a:a1:44:7b:d6:
92:8e:79:67:f9:c1:d1:f5:cb:00:2a:52:68:6d:92:60:60:f6:
86:54:46:0f:ce:e1:35:f9:99:0c:39:52:46:12:c9:2e:12:fd:
3d:5d:21:56:a9:5e:89:00:ec:99:d3:ff:c0:31:7b:dc:f0:d5:
fe:a7:1d:11:bb:00:b6:70:a5:b1:14:2b:6f:4b:27:e3:a9:e3:
47:a0:25:f5:12:46:df:f3:6b:b7:bf:6d:74:ed:ad:bc:62:c6:
38:fb:c1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:54 2026 by rpki-client