Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
File: DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json)
Hash identifier: I8rQNQwmlM64LAr/L9zlwR55B7SCJcivue4uRaUHKYc=
Subject key identifier: 3B:6E:8E:34:C8:03:C4:8E:00:AB:43:AE:A6:3F:C9:DB:37:DB:75:41
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial: 019D9C9A6BB79E972CCFE8B16182E32D6DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 18:00:58 +0000
Manifest this update: Fri 17 Apr 2026 18:00:58 +0000
Manifest next update: Sat 18 Apr 2026 18:00:58 +0000
Files and hashes: 1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: Su/GcVQMrQDvf4xz8W9ZxIXpbqdinswOIZf4fUD/pV4=)
2: FzYYHJjZ1VyjrqmR6VyqdhmHs8I.roa (hash: A2gvDrWNnIIKvLZJlwmcHqXl0rLuVgpVjavbxPCN9B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:6b:b7:9e:97:2c:cf:e8:b1:61:82:e3:2d:6d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Validity
Not Before: Apr 17 18:00:58 2026 GMT
Not After : Apr 18 18:00:58 2026 GMT
Subject: CN=3b6e8e34c803c48e00ab43aea63fc9db37db7541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:3a:b2:b5:6b:c7:92:89:d6:c6:1e:d9:dd:8d:
8e:a7:2b:fa:35:d9:18:23:69:52:55:82:fd:16:db:
e2:78:9e:c6:f3:50:2e:c3:1e:2a:e7:c6:fa:fb:2d:
63:f0:9c:f7:94:e1:b0:4e:54:ce:9f:53:7c:d7:65:
2e:5b:64:41:70:d6:f9:7c:b2:5a:c0:50:60:ee:ac:
56:96:38:f3:72:bc:23:c2:a7:d8:96:e7:84:46:71:
1c:03:ef:f2:13:59:d0:fa:5f:a2:de:e8:ff:ec:ba:
7c:67:ee:65:bb:e1:0f:b9:4e:3c:50:57:6e:62:1a:
99:7d:b1:28:b0:bc:9a:13:54:4a:e1:20:38:15:80:
dc:ff:56:0d:49:c9:11:23:d2:33:69:bb:a4:a9:6d:
a9:14:f4:71:c2:b8:d8:6c:cd:ee:83:59:3c:fc:80:
36:19:2f:27:9e:1a:21:5c:0f:d4:35:9f:77:e4:68:
c0:ff:ca:70:d9:4d:ff:e3:25:64:18:57:3f:ba:57:
d5:35:49:08:30:83:56:74:70:fd:6b:e7:61:f0:fb:
2e:63:db:2b:d0:af:a4:12:fa:6d:a3:7b:54:2a:bc:
0f:ff:90:ca:ff:28:e1:21:71:a5:62:78:65:fb:83:
c2:39:27:84:f4:b7:ab:55:96:90:0e:c4:42:5f:17:
f3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6E:8E:34:C8:03:C4:8E:00:AB:43:AE:A6:3F:C9:DB:37:DB:75:41
X509v3 Authority Key Identifier:
keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e5:c7:e7:ac:e2:3f:cc:9c:18:60:2d:5d:1c:be:ad:b9:e2:
32:93:a3:eb:d8:ba:7e:43:6b:5e:0d:c4:a7:dd:2b:c1:19:a8:
68:94:cd:c3:0d:61:c2:5c:f1:5f:39:34:d5:ab:f8:eb:9e:63:
c4:71:59:8f:7b:b6:33:43:4a:83:47:e6:74:b8:d8:52:85:18:
f7:08:f6:69:43:da:bb:38:27:8b:02:45:33:8f:fe:40:f5:fd:
21:5f:66:5a:a8:52:bc:00:34:b0:8f:07:d2:69:fc:7b:ad:a3:
bd:31:f7:65:99:72:ef:59:ff:94:2a:86:3d:f2:88:4e:85:3f:
5a:0d:d1:25:c3:52:12:ac:5c:df:bf:1b:8e:83:e7:07:cc:b4:
04:b4:b4:81:1b:e6:3d:59:26:6d:51:9e:ec:7c:8c:e0:0f:48:
d7:2c:57:12:00:d6:9b:40:73:30:4f:3a:fb:26:91:21:57:3f:
6e:8b:24:a0:f4:ba:68:f2:11:8a:ee:67:0e:35:f6:c5:e5:0a:
83:94:c5:a2:94:98:17:52:2f:8b:e7:2a:ca:bf:da:66:4f:64:
95:65:3b:35:0c:f9:0a:35:cf:b3:5b:98:f9:23:c3:18:c1:80:
25:79:45:be:0a:04:31:34:4d:e1:2d:d1:db:f8:89:c4:6d:f9:
30:0b:59:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:37:10 2026 by rpki-client