Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
File: dbzZGxsvmvS3QhSm1njOBxlo4c8.mft (raw, json)
Hash identifier: roh6JZBLM1pepXiwv2acdkZ6pbWESSKVQXvNQ/sUOe0=
Subject key identifier: EC:C1:16:8B:7E:D1:03:C2:6D:D6:49:1F:57:5F:34:CA:37:7F:03:C8
Authority key identifier: 75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
Certificate issuer: /CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Certificate serial: 019D9AE3414437B8932FCD6329759081E273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
Manifest number: 0AEC
Signing time: Fri 17 Apr 2026 10:01:17 +0000
Manifest this update: Fri 17 Apr 2026 10:01:17 +0000
Manifest next update: Sat 18 Apr 2026 10:01:17 +0000
Files and hashes: 1: Vqb24fiotLZOBuA1uv8cf7EHAOs.asa (hash: kL0LJuS+v//eRSQwWEOD6aFsJj9u86Nma+Ehm7jeQWc=)
2: dbzZGxsvmvS3QhSm1njOBxlo4c8.crl (hash: 1jK5wCcO6vdcHB1iwgeMgNnsiGBCJYFSZb6pPspj2K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:41:44:37:b8:93:2f:cd:63:29:75:90:81:e2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Validity
Not Before: Apr 17 10:01:17 2026 GMT
Not After : Apr 18 10:01:17 2026 GMT
Subject: CN=ecc1168b7ed103c26dd6491f575f34ca377f03c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:da:83:75:46:4f:2d:d0:f2:72:c5:49:eb:
7b:37:55:84:32:8a:44:c9:aa:be:e8:6f:10:6b:17:
c3:fa:a2:ef:c5:ba:05:84:4d:15:14:ac:43:b6:d0:
87:3b:09:26:ec:0a:67:2f:89:3b:14:37:71:0f:55:
2e:ca:53:5a:e5:2e:52:bd:85:b3:98:13:33:40:e7:
ed:d0:65:9b:ff:2a:99:0d:a0:50:93:4a:91:75:1e:
92:0e:e1:e5:4a:f8:cf:ed:25:91:9e:44:7b:cb:87:
60:95:25:a2:ed:29:4e:c7:a3:2b:6f:56:1d:a0:1f:
9a:95:a0:8c:ed:eb:62:87:81:5f:a3:f0:ee:f7:3a:
15:1f:af:67:a6:74:ae:20:71:90:20:b7:42:c7:66:
a8:3d:f6:dd:04:95:53:f9:96:1d:ad:f9:1d:f2:e2:
65:77:49:02:7f:1f:5c:72:a0:a0:71:ef:6d:d4:6a:
18:e0:57:b3:06:f0:94:1c:ab:d9:92:62:c0:f5:9b:
40:4d:1a:f9:16:bd:53:1e:ba:b5:c0:f3:9c:d0:b4:
f9:3a:b1:70:ad:58:38:00:be:53:ac:d0:16:e6:fd:
53:8c:51:84:4d:60:29:1a:d1:56:e3:a9:37:58:f2:
07:e1:7c:94:9a:08:ee:81:41:f9:69:3a:0a:b6:19:
e2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C1:16:8B:7E:D1:03:C2:6D:D6:49:1F:57:5F:34:CA:37:7F:03:C8
X509v3 Authority Key Identifier:
keyid:75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:30:ed:bd:a7:b0:42:3c:94:d8:10:4f:75:e7:85:e2:fc:6e:
2a:3f:0c:e6:04:05:7b:fa:1c:f3:57:8f:66:46:b9:f0:08:f4:
f8:e4:64:ff:ae:5c:f0:d4:4c:64:04:b9:8d:af:91:3d:59:f6:
d0:6a:f3:f3:3a:c1:ae:2c:09:5c:9a:ff:3b:38:eb:77:b0:cf:
09:38:73:9f:6c:8a:73:d1:b7:ac:36:5c:d5:55:14:11:38:66:
34:d3:f2:58:f5:d8:a8:e5:00:bf:75:05:2c:b1:e8:6d:06:01:
5f:fa:dd:12:e2:6a:a0:b6:d3:2e:3c:81:da:95:9e:58:74:44:
8f:b3:cf:bf:33:8d:2a:f3:f2:24:8b:ba:da:57:87:21:ef:9a:
32:26:82:8e:61:fb:c0:79:bc:79:d4:8f:16:9e:ba:12:ae:53:
19:1d:86:24:10:78:3e:d9:91:1f:6a:28:80:07:c3:51:e9:ff:
71:d0:0d:d3:08:fc:79:ab:ec:57:a3:7a:c8:9f:c2:44:5a:86:
37:6d:49:bf:19:98:93:f4:b3:df:00:fa:91:d4:2e:af:02:4c:
0f:34:bf:01:71:89:87:63:c7:fb:26:22:05:0d:ec:9d:80:7b:
63:8c:13:d4:e9:c1:6b:f0:aa:e0:15:e1:53:ea:d1:30:cf:aa:
f7:d9:f0:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a40FEN7iTL81jKXWQgeJzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YmNkOTFiMWIyZjlhZjRiNzQyMTRhNmQ2NzhjZTA3MTk2
OGUxY2YwHhcNMjYwNDE3MTAwMTE3WhcNMjYwNDE4MTAwMTE3WjAzMTEwLwYDVQQD
EyhlY2MxMTY4YjdlZDEwM2MyNmRkNjQ5MWY1NzVmMzRjYTM3N2YwM2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSzag3VGTy3Q8nLFSet7N1WEMopE
yaq+6G8QaxfD+qLvxboFhE0VFKxDttCHOwkm7ApnL4k7FDdxD1UuylNa5S5SvYWz
mBMzQOft0GWb/yqZDaBQk0qRdR6SDuHlSvjP7SWRnkR7y4dglSWi7SlOx6Mrb1Yd
oB+alaCM7etih4Ffo/Du9zoVH69npnSuIHGQILdCx2aoPfbdBJVT+ZYdrfkd8uJl
d0kCfx9ccqCgce9t1GoY4FezBvCUHKvZkmLA9ZtATRr5Fr1THrq1wPOc0LT5OrFw
rVg4AL5TrNAW5v1TjFGETWApGtFW46k3WPIH4XyUmgjugUH5aToKthnigwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzBFot+0QPCbdZJH1dfNMo3fwPIMB8GA1UdIwQY
MBaAFHW82RsbL5r0t0IUptZ4zgcZaOHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2Qt
MWMwNTc1NTI2OTFlLzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2QtMWMwNTc1NTI2OTFl
LzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTDtvaew
QjyU2BBPdeeF4vxuKj8M5gQFe/oc81ePZka58Aj0+ORk/65c8NRMZAS5ja+RPVn2
0Grz8zrBriwJXJr/Ozjrd7DPCThzn2yKc9G3rDZc1VUUEThmNNPyWPXYqOUAv3UF
LLHobQYBX/rdEuJqoLbTLjyB2pWeWHREj7PPvzONKvPyJIu62leHIe+aMiaCjmH7
wHm8edSPFp66Eq5TGR2GJBB4PtmRH2oogAfDUen/cdAN0wj8eavsV6N6yJ/CRFqG
N21JvxmYk/Sz3wD6kdQurwJMDzS/AXGJh2PH+yYiBQ3snYB7Y4wT1OnBa/Cq4BXh
U+rRMM+q99nwXw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:54 2026 by rpki-client