Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: K2dnfAP71PEv0rHtzbClNK3q9DMbMIiZv8ezL0C62uk=
Subject key identifier: 27:94:1C:C6:D3:18:73:D5:0A:3C:01:09:EE:29:16:A1:54:8A:C9:97
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 019CABD9493FC6B9FEFE11B256E14130E5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:09 +0000
Manifest this update: Mon 02 Mar 2026 00:01:09 +0000
Manifest next update: Tue 03 Mar 2026 00:01:09 +0000
Files and hashes: 1: 3D6ST7VPwU1ruJHTqcORchHTAiE.roa (hash: NASIK7MkKYD9o//4ZODXB3XY9C+uWrjRQevxzYiJxB0=)
2: FsryNOkpTRhYXYiVpfSErxkdF5I.roa (hash: 7TnmsucFlZLELXfMUZN9SGlpQMX8+cF0eWaXdVfCFOM=)
3: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: /jKBfHS9eyptffixLu1s3HOGcVqMbQQnD6DrQYNo6Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:49:3f:c6:b9:fe:fe:11:b2:56:e1:41:30:e5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Mar 2 00:01:09 2026 GMT
Not After : Mar 3 00:01:09 2026 GMT
Subject: CN=27941cc6d31873d50a3c0109ee2916a1548ac997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:04:d3:09:80:15:a2:e4:bd:ab:4f:9e:e3:
52:94:ad:50:11:fd:38:4a:19:fd:b3:40:62:05:4e:
7c:75:02:ca:47:70:4f:45:90:7f:f2:aa:07:e4:da:
16:37:d8:03:b5:07:0e:b8:09:42:a4:e5:7e:e7:7c:
66:fa:12:c9:14:01:7c:5a:e7:9b:21:33:b1:e5:dd:
22:3b:5c:f4:64:a5:ca:aa:2d:b0:b9:74:de:00:f5:
40:d7:6f:9b:56:c8:00:d0:ff:e3:fc:69:c5:8b:63:
dd:5e:d5:e3:b6:27:07:20:a9:9d:2b:aa:0e:b7:bc:
0b:ec:36:bf:b5:3d:4c:7f:e6:05:22:9b:d3:4c:09:
c1:9b:52:1c:18:ae:28:b6:7c:af:1d:8f:99:68:b8:
92:f8:76:d1:d7:99:1e:cc:2b:3a:1b:eb:18:04:7e:
90:09:cc:68:e1:f1:0c:05:d1:53:c0:09:28:fc:91:
08:e6:23:60:93:ac:26:38:90:31:2c:8d:53:e7:e1:
ef:f1:a4:cb:55:71:74:ce:18:18:52:f6:eb:b3:10:
b4:f3:3f:13:39:50:d4:37:1a:44:bd:2d:12:35:20:
4e:49:39:97:07:fc:ef:d9:6b:eb:f8:85:58:c6:94:
c9:30:94:41:a2:ea:d8:ba:23:79:b2:78:df:17:50:
35:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:94:1C:C6:D3:18:73:D5:0A:3C:01:09:EE:29:16:A1:54:8A:C9:97
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:90:30:e6:98:97:cf:6e:6c:f2:38:12:1c:53:ae:b4:64:f0:
5c:79:ab:e9:5d:e3:54:44:80:67:06:5d:41:d8:a3:08:48:e3:
0f:18:e9:39:69:ba:88:29:d1:05:59:89:5c:98:f4:9f:12:b8:
cb:96:99:5f:ba:1c:95:bc:cf:ba:21:f5:da:2a:48:35:a5:3c:
a4:53:a9:d7:63:e5:20:b2:0e:8e:c7:12:3a:e1:26:a5:4c:1c:
00:ca:37:c6:6a:1c:71:9d:be:7e:36:dc:bb:39:53:75:85:63:
f9:b1:ba:5f:92:ed:2e:35:7f:3d:ba:0b:96:5a:da:9b:b0:88:
0e:aa:7b:3f:bf:04:6f:c8:f5:f0:d7:64:0e:ed:ed:11:9d:2a:
11:60:21:76:97:c6:dc:77:a0:f1:93:86:7c:26:63:2b:ec:77:
ab:42:00:ae:57:b3:65:2d:c0:5d:9e:66:d3:f3:55:1a:d0:dc:
6b:b2:4b:a2:d7:c4:3e:37:ea:82:5a:46:a4:6d:52:40:7f:e2:
ec:7c:07:8b:fc:43:ae:5e:7b:6e:43:c0:31:0d:ff:14:b8:ee:
27:a5:6f:c4:6f:b8:41:2e:33:4a:47:0b:bc:46:01:ad:6c:fd:
a5:89:1d:1f:01:27:56:c8:e3:ba:65:6f:12:e6:be:3d:b2:12:
67:ef:a1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:00 2026 by rpki-client