Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
File: DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json)
Hash identifier: lyo0o7oriKGXqNn4X4SAzxaw71gzcoJFYLfnu7YmSPg=
Subject key identifier: A2:9F:19:58:15:8A:09:A7:3A:28:5F:FD:4C:78:27:81:A9:DB:E0:2B
Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
Certificate issuer: /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Certificate serial: 019CAC7DFAE96A748680F12CA649116E9A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
Manifest number: 1170
Signing time: Mon 02 Mar 2026 03:01:03 +0000
Manifest this update: Mon 02 Mar 2026 03:01:03 +0000
Manifest next update: Tue 03 Mar 2026 03:01:03 +0000
Files and hashes: 1: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: v8ziuPrk3t3sdwsKoJ7QbLgUFQiO6gL36aINuh46qmc=)
2: gYAU9kG86HbZ3YtQGu5MLj44xqI.roa (hash: vR6PgJKynGl8VT8dHy4Fb3OUdFphSgnDlBXNAPZOxik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:fa:e9:6a:74:86:80:f1:2c:a6:49:11:6e:9a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Validity
Not Before: Mar 2 03:01:03 2026 GMT
Not After : Mar 3 03:01:03 2026 GMT
Subject: CN=a29f1958158a09a73a285ffd4c782781a9dbe02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:b8:1b:37:6b:7d:c3:4a:43:c5:a4:ae:99:
af:ff:ec:6a:41:e8:88:90:fc:4a:75:94:5e:44:62:
57:ef:ca:81:8d:0d:99:c3:8e:18:a8:15:78:42:22:
d1:ac:4b:d0:ea:73:6d:a8:75:6e:c6:b6:31:0f:8a:
b8:e6:4f:b2:b4:c8:b4:61:b7:56:5b:e7:41:17:03:
b2:98:4f:f8:61:88:ce:62:01:c5:b3:81:20:ee:d7:
79:ca:2d:a6:5f:a0:73:6f:04:3f:2f:35:89:65:cd:
e6:1f:26:7a:55:30:c8:79:54:a0:47:92:4d:c6:bb:
23:37:28:bf:d5:e4:39:17:20:f2:1d:f9:6d:57:3f:
89:0d:eb:71:e4:88:10:7d:0a:fe:d6:9e:e6:fb:bb:
e1:84:1f:fa:81:b9:66:eb:63:fe:39:70:c3:75:94:
d0:f5:e9:20:57:ef:05:c7:3f:be:13:72:90:52:82:
ec:d5:64:d4:3f:0f:a2:d1:25:e5:68:ea:fb:99:6a:
76:f0:f9:bb:e9:ab:8f:2a:85:87:49:15:e8:3a:34:
e7:de:db:aa:f0:f2:4e:cd:0e:35:76:c7:ef:c4:c5:
91:94:03:55:c2:46:f8:19:a7:3f:70:5c:87:0b:10:
96:94:2b:ec:57:a7:51:32:7d:d8:8e:08:18:48:2f:
d4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9F:19:58:15:8A:09:A7:3A:28:5F:FD:4C:78:27:81:A9:DB:E0:2B
X509v3 Authority Key Identifier:
keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:62:32:74:ca:f5:df:c4:f0:69:ae:fb:4e:46:a7:39:1c:e3:
7c:7d:78:95:b6:f6:5b:1d:7b:6e:ca:2f:94:89:92:a9:6e:b0:
04:f8:91:7b:69:c4:35:8d:54:6a:c7:8b:3f:09:0f:47:f2:f2:
ae:c1:91:02:c3:44:10:f7:45:65:e6:c9:25:8f:e0:11:81:dc:
7d:18:a2:66:09:bc:11:0b:48:d1:5d:53:c4:91:d8:cd:2f:fd:
c7:78:27:ca:3c:0c:88:0f:ff:5d:68:12:25:ab:26:79:c7:e3:
54:97:a8:09:92:20:ff:1d:a0:69:7f:17:2b:02:6f:25:75:2a:
d6:5b:67:9b:e9:f5:3d:1d:6b:d7:b7:94:c6:e3:09:21:fe:ef:
ec:71:68:27:fb:b5:66:04:98:3d:41:6c:c3:4c:fd:97:f1:1b:
a2:98:bd:79:ba:e1:6c:5c:c1:e7:e1:86:54:e4:5e:41:e0:cc:
5f:4d:a1:6d:58:77:6a:14:a8:32:af:39:69:be:02:9b:40:53:
45:aa:b9:cf:0b:56:ab:c7:7b:4c:2d:ed:d8:36:b2:c0:1f:11:
6e:3f:44:d5:5a:c6:65:ea:ea:7c:17:e7:46:7e:94:c7:23:95:
04:73:2f:72:5e:ab:64:ce:4b:70:2c:b2:55:ef:ca:d3:f3:f0:
26:c1:f3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:32 2026 by rpki-client