Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
File: dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft (raw, json)
Hash identifier: pCKzmWe9CjV8h+H3P3veHwSnaL2LcYzVYTIqo0SRDT0=
Subject key identifier: 34:F2:7C:A8:C1:2F:17:6A:57:A9:E2:25:7A:85:2F:39:72:82:79:FE
Authority key identifier: 75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
Certificate issuer: /CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Certificate serial: 019CAAFD34298D83B33D4A8F51E5959F7EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 20:00:46 +0000
Manifest this update: Sun 01 Mar 2026 20:00:46 +0000
Manifest next update: Mon 02 Mar 2026 20:00:46 +0000
Files and hashes: 1: 21dEdElNkV3wCunznBThEBlJcX4.roa (hash: 5wxxdJq/NDV1f9XwNpVa9dOVitTrL0/8VPX3yplDJdQ=)
2: dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl (hash: VPLQa8Y62Cz3QDNtxgN+ZXm4EVC54xKpAc7BUNYBeF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:34:29:8d:83:b3:3d:4a:8f:51:e5:95:9f:7e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Validity
Not Before: Mar 1 20:00:46 2026 GMT
Not After : Mar 2 20:00:46 2026 GMT
Subject: CN=34f27ca8c12f176a57a9e2257a852f39728279fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:1e:4f:c8:98:d1:39:0e:6d:cf:1a:09:fe:
ea:a0:ba:0c:6d:db:b8:88:41:66:8f:58:32:20:be:
8f:13:98:bb:e3:d8:fa:dd:2d:2c:4c:a1:d2:f5:72:
27:f6:83:d4:95:52:6b:2d:c5:ba:f4:1c:6f:8c:83:
02:c6:59:fb:8e:8c:c6:6c:65:e7:82:db:86:46:b4:
31:35:f9:60:d9:c5:16:ff:cf:e5:e4:75:9f:ef:f8:
4c:ae:b1:77:5a:44:32:c3:f3:48:54:13:e2:1f:7e:
27:82:42:8b:d1:9a:75:49:88:34:94:c6:c2:47:4b:
a5:5f:b6:84:84:d2:ca:72:50:28:19:ca:84:bc:93:
a2:22:f3:d1:f0:36:82:0f:44:d6:71:e1:b0:61:9d:
48:cd:80:6f:5c:37:b7:2b:b9:fd:00:97:61:c3:6f:
d2:cf:30:b0:e5:44:77:66:7a:bb:ea:e6:c1:c2:36:
e7:a8:09:0d:f8:2c:bb:35:01:e8:05:a3:e8:2b:af:
aa:16:ee:e9:d1:9e:cb:1b:4c:be:85:76:35:5f:8e:
6e:92:df:44:7a:a1:b4:3e:8b:50:91:2b:f1:5a:99:
54:03:38:6c:31:24:df:22:3d:c8:f8:ba:88:eb:8a:
09:5e:8c:7c:db:fc:60:29:ae:13:32:09:36:c0:7a:
4b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F2:7C:A8:C1:2F:17:6A:57:A9:E2:25:7A:85:2F:39:72:82:79:FE
X509v3 Authority Key Identifier:
keyid:75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8e:e3:54:61:88:4d:1c:5c:13:19:1b:e6:50:9b:1e:4c:df:
10:80:3a:98:0e:7c:27:c1:91:e0:84:35:8b:82:39:92:5e:52:
45:62:c3:f4:1a:66:00:42:25:c3:e3:8c:18:90:71:19:57:b7:
72:cf:82:82:65:8f:5d:af:2c:1c:4d:e3:db:68:63:68:10:45:
48:79:cf:a7:0a:90:31:4e:a4:c8:1b:b0:b6:1b:c8:5b:48:a3:
e2:47:0b:04:97:93:1b:fb:e0:99:20:40:8c:25:2b:7f:66:66:
4f:fa:81:80:a2:da:f5:3e:a3:55:75:1f:3b:dd:c3:c0:b0:3d:
19:1b:67:21:d4:4d:1e:8e:bb:5f:d9:fa:24:8d:bb:36:eb:92:
5f:1b:42:6e:cb:78:2a:11:1c:92:b0:5b:e7:50:4f:84:b0:1a:
1d:1c:49:46:4e:e3:4b:81:b2:14:de:fd:b1:da:cb:7b:11:af:
b2:05:a9:54:ba:be:08:dd:b4:c0:d8:33:45:87:32:58:e8:51:
46:fe:9f:b1:45:fd:4d:48:6e:3f:dd:3c:23:fd:1b:d2:b5:7c:
1e:04:26:5a:bb:a7:e9:35:e3:51:69:53:ce:e7:cf:92:ca:33:
1f:92:04:30:60:cb:68:03:6c:59:cb:b2:20:fe:a0:28:80:d0:
2a:b3:50:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/TQpjYOzPUqPUeWVn36xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1Yjk4MmVhYmE0NDA4Y2Q5NDE4OTlmNWNlZWMxZGE2YTY3
YzVjNDkwHhcNMjYwMzAxMjAwMDQ2WhcNMjYwMzAyMjAwMDQ2WjAzMTEwLwYDVQQD
EygzNGYyN2NhOGMxMmYxNzZhNTdhOWUyMjU3YTg1MmYzOTcyODI3OWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBIeT8iY0TkObc8aCf7qoLoMbdu4
iEFmj1gyIL6PE5i749j63S0sTKHS9XIn9oPUlVJrLcW69BxvjIMCxln7jozGbGXn
gtuGRrQxNflg2cUW/8/l5HWf7/hMrrF3WkQyw/NIVBPiH34ngkKL0Zp1SYg0lMbC
R0ulX7aEhNLKclAoGcqEvJOiIvPR8DaCD0TWceGwYZ1IzYBvXDe3K7n9AJdhw2/S
zzCw5UR3Znq76ubBwjbnqAkN+Cy7NQHoBaPoK6+qFu7p0Z7LG0y+hXY1X45ukt9E
eqG0PotQkSvxWplUAzhsMSTfIj3I+LqI64oJXox82/xgKa4TMgk2wHpLewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTyfKjBLxdqV6niJXqFLzlygnn+MB8GA1UdIwQY
MBaAFHW5guq6RAjNlBiZ9c7sHaamfFxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJtQzZycEVDTTJVR0puMXp1d2RwcVo4WEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82OWYzZjMtMGZhYS00NjVmLWFhN2Et
ZDcxY2ExOWY5ODllLzEvZGJtQzZycEVDTTJVR0puMXp1d2RwcVo4WEVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC82OWYzZjMtMGZhYS00NjVmLWFhN2EtZDcxY2ExOWY5ODll
LzEvZGJtQzZycEVDTTJVR0puMXp1d2RwcVo4WEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO47jVGGI
TRxcExkb5lCbHkzfEIA6mA58J8GR4IQ1i4I5kl5SRWLD9BpmAEIlw+OMGJBxGVe3
cs+CgmWPXa8sHE3j22hjaBBFSHnPpwqQMU6kyBuwthvIW0ij4kcLBJeTG/vgmSBA
jCUrf2ZmT/qBgKLa9T6jVXUfO93DwLA9GRtnIdRNHo67X9n6JI27NuuSXxtCbst4
KhEckrBb51BPhLAaHRxJRk7jS4GyFN79sdrLexGvsgWpVLq+CN20wNgzRYcyWOhR
Rv6fsUX9TUhuP908I/0b0rV8HgQmWrun6TXjUWlTzufPksozH5IEMGDLaANsWcuy
IP6gKIDQKrNQwA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:27 2026 by rpki-client