Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
File: DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json)
Hash identifier: X0owzNaHNm1ceC2meVqhk5qQMm/zpNDDz+6HRi4LCeY=
Subject key identifier: EE:39:3E:DD:0A:1E:07:2C:98:A6:FD:57:B8:CF:8A:A1:94:BD:9A:F8
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial: 01A0DB03FF59D91D46B1C3CE66D4A85428E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
Manifest number: 1A75
Signing time: Sat 26 Sep 2026 00:01:07 +0000
Manifest this update: Sat 26 Sep 2026 00:01:07 +0000
Manifest next update: Sun 27 Sep 2026 00:01:07 +0000
Files and hashes: 1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: ZoENecC+bjABTAtXJ4hxOX8/if01dFmoDCWsaxwbGRA=)
2: FzYYHJjZ1VyjrqmR6VyqdhmHs8I.roa (hash: A2gvDrWNnIIKvLZJlwmcHqXl0rLuVgpVjavbxPCN9B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:03:ff:59:d9:1d:46:b1:c3:ce:66:d4:a8:54:28:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Validity
Not Before: Sep 26 00:01:07 2026 GMT
Not After : Sep 27 00:01:07 2026 GMT
Subject: CN=ee393edd0a1e072c98a6fd57b8cf8aa194bd9af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:66:a8:f7:d4:db:33:a4:e9:0c:b5:03:8b:
0f:2f:3c:e7:dc:df:d8:5b:14:85:dc:d4:d6:07:77:
26:ea:59:52:85:e0:28:cd:cd:e5:d0:01:da:2f:ba:
fb:89:09:a1:45:b1:4f:21:b2:47:7b:98:a9:c6:b7:
65:83:2f:64:a7:c1:c0:92:3e:8f:3f:aa:db:74:8a:
00:7e:9b:99:4f:8c:a4:c2:c0:69:a4:08:3d:83:fc:
85:50:a3:2e:d8:0f:dc:07:12:08:c0:09:37:4a:3c:
64:19:7f:08:bf:8d:cf:68:f5:a5:a4:89:50:90:df:
28:41:ad:34:c0:cd:93:8a:db:dc:fd:9a:3d:fc:9d:
a3:af:c6:54:84:22:e9:79:ba:d2:4c:0c:94:22:af:
c3:18:f1:80:2c:fd:6e:f2:4e:49:3b:66:49:9c:ad:
eb:96:9f:fa:2c:da:89:14:cb:14:d2:dd:c1:b2:c9:
e1:86:92:42:51:4e:c5:2f:0a:02:c6:6d:fa:5e:d0:
7e:fe:99:4a:7d:01:7f:6d:5e:50:96:2d:31:b1:1f:
92:2e:c5:cc:40:ef:fd:53:b6:b2:2e:24:d0:5c:7f:
1c:4c:0f:15:0b:af:57:59:fd:55:81:1a:9e:d8:10:
3e:c3:0f:a3:bb:7d:25:55:7f:66:82:61:a8:87:95:
2d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:39:3E:DD:0A:1E:07:2C:98:A6:FD:57:B8:CF:8A:A1:94:BD:9A:F8
X509v3 Authority Key Identifier:
keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e0:14:e5:13:97:93:94:db:15:b0:01:d4:82:61:64:44:a4:
d6:cb:b4:f5:e5:e7:09:15:6c:39:d7:b3:66:b5:97:2b:41:18:
f5:b0:f5:0f:2a:42:a9:1b:97:30:b8:f9:2d:db:01:e6:74:db:
ef:cb:27:3d:42:2a:e8:fc:3c:ac:39:e9:ba:d2:29:6f:f1:67:
d7:b0:5e:e1:62:36:2f:48:24:73:30:e4:f2:a5:80:9d:d3:f9:
22:75:ae:e0:f8:7d:dc:cf:b4:10:e7:7d:f6:74:a6:28:a8:fd:
90:45:50:fc:e3:37:8c:2d:11:05:e5:79:80:e2:14:64:c4:72:
c1:9f:22:25:55:56:2e:59:b1:26:13:63:57:d0:fe:65:90:20:
9d:5e:09:1a:a0:85:79:c0:6f:0b:63:41:33:1a:4a:59:e9:ee:
c4:b6:7a:7e:a5:f0:93:8e:8e:7e:47:6a:5e:cc:54:37:f8:8e:
f4:d6:dd:11:f3:a9:c2:dc:71:f4:1f:45:a8:da:37:fd:18:a0:
a1:51:45:b7:17:16:d9:62:51:2c:1e:82:c3:cf:65:82:b3:39:
72:31:0c:2c:a9:c8:35:50:35:1e:ea:b5:6f:b3:0d:21:36:6a:
8f:f6:11:c4:45:ad:32:13:87:be:84:c9:f8:70:1a:eb:f7:eb:
f4:92:0b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:28:39 2026 by rpki-client