Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
File: DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json)
Hash identifier: 5WPoGVfZzvNCV1E+IDl3fcntmfZEoX0Isa5goC4E0oQ=
Subject key identifier: 2D:40:6E:D3:28:F2:AC:F0:67:8A:A9:13:FB:A1:F5:2C:5C:F9:F6:48
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial: 019CAB342565568AE17F9B8BFCB510762D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 21:00:47 +0000
Manifest this update: Sun 01 Mar 2026 21:00:47 +0000
Manifest next update: Mon 02 Mar 2026 21:00:47 +0000
Files and hashes: 1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: Z1+gpKOGJndvLWClfpFMpUnWuFhWnuggVeCN52SH4KU=)
2: FzYYHJjZ1VyjrqmR6VyqdhmHs8I.roa (hash: A2gvDrWNnIIKvLZJlwmcHqXl0rLuVgpVjavbxPCN9B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:25:65:56:8a:e1:7f:9b:8b:fc:b5:10:76:2d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Validity
Not Before: Mar 1 21:00:47 2026 GMT
Not After : Mar 2 21:00:47 2026 GMT
Subject: CN=2d406ed328f2acf0678aa913fba1f52c5cf9f648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:3c:bc:14:75:7b:aa:ff:52:1e:26:c7:29:
18:15:9c:d2:1d:70:d5:39:e6:53:5e:6e:aa:79:7e:
b3:bc:31:e3:46:fb:17:ec:8c:b3:7e:d3:1e:83:28:
1d:9d:7b:c3:5e:c5:e3:78:d6:0d:c5:0a:f3:a8:d6:
4f:24:c3:5b:84:aa:8f:06:2f:d9:90:52:da:93:87:
e8:e4:89:05:30:e0:46:a8:76:cd:97:ea:0b:73:e9:
da:bb:e8:6b:22:1f:a6:ac:33:74:21:09:35:a9:39:
92:36:09:af:ce:2c:b7:10:4a:2f:b0:30:fa:2e:a0:
cf:e3:2b:2b:90:b4:04:59:5c:46:1a:58:4f:03:36:
c3:b4:f2:8b:20:fe:da:96:96:33:2e:65:8b:c2:76:
28:37:48:ea:10:b8:3b:6d:5d:ff:80:80:18:6b:cd:
34:c6:5d:01:20:a7:c1:97:e7:14:48:b9:8f:65:cd:
74:a6:eb:75:5f:19:75:f0:97:08:6e:4f:f9:ff:db:
ef:c3:1e:5d:cb:e1:c3:70:1c:ec:66:83:61:9b:a7:
be:99:1f:49:45:35:8f:98:e8:ff:b2:cc:f6:49:0f:
bc:ee:b2:76:d7:66:be:f2:b0:28:f9:4c:d5:1b:dc:
93:84:27:62:e6:fa:a1:0a:4f:65:a2:f0:17:a4:38:
33:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:40:6E:D3:28:F2:AC:F0:67:8A:A9:13:FB:A1:F5:2C:5C:F9:F6:48
X509v3 Authority Key Identifier:
keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5e:77:39:f5:9e:55:69:b5:a8:c3:74:2f:f4:d0:f0:87:e7:
dd:ca:bc:13:63:b4:0c:09:68:50:63:9f:9a:4d:fc:9c:cb:99:
c1:6e:0e:86:c0:79:4a:1d:6f:55:17:22:8b:ce:7f:31:9c:a2:
47:00:86:74:2f:85:84:4c:79:9d:cd:17:4b:6a:bb:85:b8:4a:
04:4f:4a:d2:54:7d:c6:ae:6f:54:ea:3a:89:6d:b1:a4:26:17:
15:5a:ac:21:1e:7b:05:2a:79:5a:80:5c:13:ce:26:94:47:2a:
bd:6d:4e:b8:f1:4f:9a:0b:a2:cd:f2:86:40:1f:b6:e5:ce:44:
af:7d:57:66:bd:d0:5c:52:a2:98:4c:22:f4:d2:3b:42:ea:4d:
fb:b3:99:7c:c4:f3:b9:75:4e:e5:1f:0d:17:56:a4:5f:b6:26:
ba:29:c4:bc:df:59:d7:0d:26:27:73:58:18:06:ba:78:ca:07:
5b:57:ec:fd:95:77:c7:24:d6:37:e5:0c:c2:30:3f:d0:1f:26:
0a:70:b0:eb:7d:a0:cb:06:41:2f:70:9c:f7:fc:5f:a9:ac:ba:
16:9d:63:77:4e:9c:8a:de:d2:a1:06:24:d7:c6:89:3a:ed:14:
ed:c9:b9:1e:4f:15:ca:5b:58:de:8f:d6:13:1a:fd:0a:3d:df:
0c:bb:a7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:18 2026 by rpki-client