Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
File: DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json)
Hash identifier: hR8vF8bSp8eaUmGq0g0pNgOCfNJFK2pZnnugatW3rgY=
Subject key identifier: 4E:7E:15:8F:A6:AF:87:1A:D6:BF:AD:E8:49:D0:8A:D3:92:95:2F:3B
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial: 019FA7F43221176BF9E44F52FF7796A48B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 09:00:26 +0000
Manifest this update: Tue 28 Jul 2026 09:00:26 +0000
Manifest next update: Wed 29 Jul 2026 09:00:26 +0000
Files and hashes: 1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: IDiwBAUwWoQFGcSUSwfPUfq0aAcbx1I7w5lxzlDrdgc=)
2: FzYYHJjZ1VyjrqmR6VyqdhmHs8I.roa (hash: A2gvDrWNnIIKvLZJlwmcHqXl0rLuVgpVjavbxPCN9B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:32:21:17:6b:f9:e4:4f:52:ff:77:96:a4:8b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Validity
Not Before: Jul 28 09:00:26 2026 GMT
Not After : Jul 29 09:00:26 2026 GMT
Subject: CN=4e7e158fa6af871ad6bfade849d08ad392952f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d0:d1:ff:50:48:27:01:e9:c0:40:61:28:dc:
5c:cd:6f:bb:76:16:20:a6:4c:77:37:8b:03:67:01:
96:3d:29:cd:34:05:56:8b:86:a0:96:20:d0:66:0b:
c5:26:7b:b0:8e:76:07:8b:43:dc:27:be:12:80:36:
a5:20:10:1a:fa:9d:1f:5b:e5:52:4c:b5:5a:d9:8a:
54:e3:91:be:96:b2:43:3a:76:49:ac:86:68:33:5d:
23:d3:52:83:67:c2:52:6f:62:6b:ce:59:c5:c5:0d:
0d:87:12:61:b6:1c:e8:e6:8f:85:eb:0d:08:42:88:
69:fa:9c:8e:ec:d4:d3:40:d8:51:b0:92:b4:db:7c:
59:db:e5:b7:ed:7c:bf:ca:6d:dc:be:7b:b0:34:98:
23:bb:40:ff:79:0e:24:7c:e0:6a:99:04:86:29:0e:
a7:95:3d:c0:75:75:9a:81:2b:2d:c8:9f:b9:66:57:
7a:56:9a:40:74:00:60:06:11:39:6d:12:e6:bf:0f:
23:2c:53:26:9c:61:d7:80:97:6d:7c:55:26:fe:36:
b6:7c:0c:41:08:62:5d:be:ec:61:6a:fb:6b:1a:98:
2d:e2:d2:86:2b:87:43:b3:29:09:1b:4d:f2:13:36:
15:fc:24:35:81:41:e1:4f:5d:4a:bb:d4:d6:d5:82:
88:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7E:15:8F:A6:AF:87:1A:D6:BF:AD:E8:49:D0:8A:D3:92:95:2F:3B
X509v3 Authority Key Identifier:
keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b4:f5:3f:21:c9:5f:09:9e:26:e4:28:fb:e1:0d:04:e9:66:
89:08:56:10:44:c8:dd:f2:0f:f9:72:e1:06:85:75:6f:24:05:
2b:e4:02:8d:52:41:c2:e5:cb:cf:1a:fd:6a:79:3f:4c:3e:72:
a6:d0:0e:2c:3e:22:82:ab:aa:27:7d:5a:f0:13:0c:c9:57:31:
66:ba:a8:8b:d8:56:0c:8f:c6:b2:80:da:16:ee:5b:86:28:44:
ab:33:d6:20:46:e3:79:63:fb:db:28:c1:3e:4e:77:94:63:e4:
ad:24:d9:4a:80:e8:88:b8:1b:56:94:5a:fe:93:d3:c8:57:96:
24:ff:1d:dc:38:91:ad:c8:d8:52:17:1e:b5:24:f9:0a:f5:00:
13:aa:fb:da:91:eb:dc:e3:8e:5c:b4:fb:cb:11:60:1f:64:3f:
67:5b:23:15:7f:e8:82:94:bf:c4:5a:5c:32:91:df:98:78:61:
65:99:e0:b9:0a:e1:96:b0:84:f3:e1:7d:e4:e4:b7:46:fd:95:
fa:87:11:cc:11:22:82:e9:f5:2e:90:9a:b7:4e:b2:eb:54:d3:
c6:1d:09:f4:f2:0f:13:9f:5e:54:76:73:a3:f6:62:eb:7f:3a:
8c:8a:a2:f6:41:8f:d5:f2:b1:e4:b1:78:c7:5c:a6:ac:44:03:
62:db:b2:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+n9DIhF2v55E9S/3eWpItaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMTAzN2MxN2JjMTVhN2M5ZDg1Njk4ODdmNWIwNTgzNWNl
MzJkMjcwHhcNMjYwNzI4MDkwMDI2WhcNMjYwNzI5MDkwMDI2WjAzMTEwLwYDVQQD
Eyg0ZTdlMTU4ZmE2YWY4NzFhZDZiZmFkZTg0OWQwOGFkMzkyOTUyZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9DR/1BIJwHpwEBhKNxczW+7dhYg
pkx3N4sDZwGWPSnNNAVWi4agliDQZgvFJnuwjnYHi0PcJ74SgDalIBAa+p0fW+VS
TLVa2YpU45G+lrJDOnZJrIZoM10j01KDZ8JSb2JrzlnFxQ0NhxJhthzo5o+F6w0I
Qohp+pyO7NTTQNhRsJK023xZ2+W37Xy/ym3cvnuwNJgju0D/eQ4kfOBqmQSGKQ6n
lT3AdXWagSstyJ+5Zld6VppAdABgBhE5bRLmvw8jLFMmnGHXgJdtfFUm/ja2fAxB
CGJdvuxhavtrGpgt4tKGK4dDsykJG03yEzYV/CQ1gUHhT11Ku9TW1YKIMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5+FY+mr4ca1r+t6EnQitOSlS87MB8GA1UdIwQY
MBaAFAwQN8F7wVp8nYVpiH9bBYNc4y0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREJBM3dYdkJXbnlkaFdtSWYxc0ZnMXpqTFNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNjJhN2ItOGY3Ni00ODk5LWExNTMt
OGM1MDAyOTVjYjk2LzEvREJBM3dYdkJXbnlkaFdtSWYxc0ZnMXpqTFNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hNjJhN2ItOGY3Ni00ODk5LWExNTMtOGM1MDAyOTVjYjk2
LzEvREJBM3dYdkJXbnlkaFdtSWYxc0ZnMXpqTFNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbT1PyHJ
XwmeJuQo++ENBOlmiQhWEETI3fIP+XLhBoV1byQFK+QCjVJBwuXLzxr9ank/TD5y
ptAOLD4igquqJ31a8BMMyVcxZrqoi9hWDI/GsoDaFu5bhihEqzPWIEbjeWP72yjB
Pk53lGPkrSTZSoDoiLgbVpRa/pPTyFeWJP8d3DiRrcjYUhcetST5CvUAE6r72pHr
3OOOXLT7yxFgH2Q/Z1sjFX/ogpS/xFpcMpHfmHhhZZnguQrhlrCE8+F95OS3Rv2V
+ocRzBEigun1LpCat06y61TTxh0J9PIPE59eVHZzo/Zi6386jIqi9kGP1fKx5LF4
x1ymrEQDYtuy5A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:18:13 2026 by rpki-client