Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
File: dbzZGxsvmvS3QhSm1njOBxlo4c8.mft (raw, json)
Hash identifier: sd9I3wh46gUPwldbbc/oujuFDR1+kwCItM7szzlqFXw=
Subject key identifier: 93:BB:70:4D:35:D6:18:BF:C3:80:8B:48:60:E6:FD:84:C8:5A:A4:61
Authority key identifier: 75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
Certificate issuer: /CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Certificate serial: 019CA78ECB4E8618B7A619DDF5AB986774AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
Manifest number: 0A6E
Signing time: Sun 01 Mar 2026 04:01:19 +0000
Manifest this update: Sun 01 Mar 2026 04:01:19 +0000
Manifest next update: Mon 02 Mar 2026 04:01:19 +0000
Files and hashes: 1: Vqb24fiotLZOBuA1uv8cf7EHAOs.asa (hash: kL0LJuS+v//eRSQwWEOD6aFsJj9u86Nma+Ehm7jeQWc=)
2: dbzZGxsvmvS3QhSm1njOBxlo4c8.crl (hash: pw28VSlZoJLfdMkaGCXzlAq9fgeLvV/Q684ysAmio1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:8e:cb:4e:86:18:b7:a6:19:dd:f5:ab:98:67:74:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Validity
Not Before: Mar 1 04:01:19 2026 GMT
Not After : Mar 2 04:01:19 2026 GMT
Subject: CN=93bb704d35d618bfc3808b4860e6fd84c85aa461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:de:89:31:bd:4f:08:49:5e:b3:e8:5f:6b:
64:f6:f7:72:5d:a7:8e:de:13:8c:f4:16:0f:71:7e:
ce:10:3b:bd:ae:c8:0d:4b:d4:43:c0:fc:03:08:e0:
2e:b1:a5:86:f8:72:60:eb:28:d8:26:68:b2:e7:7b:
9c:f7:63:21:33:ec:79:a4:95:74:e8:79:9a:84:c1:
4b:13:2a:3f:ed:b2:ba:ed:27:c5:77:df:d5:f7:9f:
31:f4:f3:02:ca:96:65:cd:52:bd:33:33:71:17:55:
3b:4e:4e:11:3a:1c:73:04:62:1c:ec:26:60:c7:50:
c8:2f:43:dd:04:e7:3c:ca:fa:72:6f:83:61:2b:4d:
e5:29:e9:99:b7:59:f8:b3:88:d2:2d:29:36:00:15:
6e:1b:90:13:2f:a0:54:55:fa:cc:be:b8:5d:ba:36:
1e:4a:61:12:a1:f5:d0:29:c2:6b:28:9d:a1:be:67:
95:17:9f:13:f1:87:0c:a3:de:68:07:f4:85:80:e0:
09:10:76:dd:7a:f3:ff:f9:84:4c:68:ac:9f:34:02:
c7:e6:eb:a4:0d:5c:fb:63:2f:a9:4f:9e:50:a7:d9:
a0:cf:b5:ab:aa:84:fc:21:fe:8c:34:20:4a:05:e1:
22:b4:ea:8a:5d:93:bf:b5:5c:0e:9b:b8:17:ce:e3:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BB:70:4D:35:D6:18:BF:C3:80:8B:48:60:E6:FD:84:C8:5A:A4:61
X509v3 Authority Key Identifier:
keyid:75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:35:b0:b2:b2:4a:98:be:fe:2f:c4:61:19:6d:6a:48:74:c2:
9d:1c:a1:13:78:db:f2:ca:4a:53:32:f0:ca:4f:ee:ce:b9:f7:
08:66:b8:39:67:be:02:07:1f:e6:b8:3a:d5:0a:f2:34:5a:4f:
8c:7d:c5:0f:cb:e8:b4:c1:32:9d:81:90:e0:07:18:82:42:45:
d9:76:b0:06:dd:b1:fd:2d:14:28:1a:59:8f:51:5e:bc:65:77:
33:7a:dd:4e:6b:67:d0:7c:6b:f5:ff:f6:f3:cd:97:dd:7d:1a:
c1:6e:3e:62:5b:fe:1a:34:5a:a0:9a:e2:8d:3b:37:fb:46:09:
18:1e:23:2b:cb:11:eb:7c:df:eb:f2:0d:af:20:57:2f:0a:c0:
96:23:eb:e3:2e:bd:8b:d2:03:94:6e:ce:61:dc:de:94:6d:7d:
5e:cb:86:c1:62:65:fc:d8:b1:0c:82:b6:b9:d0:bd:9f:d9:cd:
b9:db:d0:da:2e:b6:fd:10:b6:f2:ad:e5:f3:bb:62:c7:08:fa:
e6:c4:05:f9:cb:27:1f:7e:37:d1:ac:30:01:7c:0d:c8:05:c1:
e5:e8:6a:0b:98:35:84:ec:b6:05:28:66:a6:fd:3c:3a:4e:6c:
26:c9:7c:ec:ee:95:21:0c:bd:62:e7:5b:dd:4a:da:a3:0d:4c:
06:dc:5a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:46:26 2026 by rpki-client