Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
File: dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft (raw, json)
Hash identifier: E9PLB303G3rROCDUWHOmwnz9oPRjDzyAlJyaNOjdhug=
Subject key identifier: 7F:68:10:60:20:A3:05:5F:B1:12:47:BB:16:BC:79:E5:F1:06:A4:C1
Authority key identifier: 75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
Certificate issuer: /CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Certificate serial: 019CAEA32FCACA6361416A05C6FC323F7B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
Manifest number: 0562
Signing time: Mon 02 Mar 2026 13:00:56 +0000
Manifest this update: Mon 02 Mar 2026 13:00:56 +0000
Manifest next update: Tue 03 Mar 2026 13:00:56 +0000
Files and hashes: 1: Ey3NVFNZGCHqRvki0g7r8C0_gMY.roa (hash: l3PwDzdUu8sAqi7VNj0H3fSsXYCfHAzMO+z2/d+bwfM=)
2: dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl (hash: r1GVBcW1UvGs9ABElxOeEDqcyV8IjkWTOTM4GlMTm6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:2f:ca:ca:63:61:41:6a:05:c6:fc:32:3f:7b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Validity
Not Before: Mar 2 13:00:56 2026 GMT
Not After : Mar 3 13:00:56 2026 GMT
Subject: CN=7f68106020a3055fb11247bb16bc79e5f106a4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:48:b7:9b:cb:18:6b:6d:f3:b2:0e:7d:74:
7a:70:c0:b4:25:80:ac:6e:42:4f:78:c1:ab:c1:ad:
53:c9:a5:41:e8:a6:72:6d:f0:7c:28:07:d5:b4:7c:
e5:9a:24:55:c8:26:94:33:30:c9:27:eb:2b:0d:2d:
51:2b:22:3b:b4:b6:91:68:05:89:ca:c7:8d:b6:db:
ab:46:f3:3b:e2:76:24:5d:1b:06:93:7c:36:71:79:
bb:12:c0:d3:4b:34:dc:ec:9d:0c:ec:22:69:d7:cb:
83:0e:a0:b4:5a:0e:e4:a6:65:77:09:1e:8b:e7:75:
ee:25:34:5f:40:7e:bf:2d:5b:79:62:52:92:4b:c7:
70:a3:98:03:2f:22:4f:45:5c:38:90:19:0e:a6:25:
fd:df:df:88:be:85:2b:23:97:15:f3:c5:1d:29:8c:
2f:23:57:76:cd:27:3c:2d:cb:f9:7b:cb:94:a3:d0:
fa:16:e7:72:01:44:81:b6:09:ff:29:40:32:5f:7c:
5c:4a:41:17:0b:b0:70:a3:05:88:52:78:45:f2:d3:
0a:70:30:37:d2:be:19:3e:72:83:63:59:bc:8b:42:
e9:4f:28:07:44:b4:61:46:0f:e5:95:03:59:57:da:
85:66:00:b5:29:6d:1f:df:85:1f:31:2a:8c:6f:8d:
af:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:68:10:60:20:A3:05:5F:B1:12:47:BB:16:BC:79:E5:F1:06:A4:C1
X509v3 Authority Key Identifier:
keyid:75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:71:74:4e:b6:20:83:d0:b6:be:50:d5:f2:7d:76:4c:22:02:
00:52:6a:0b:fb:2b:34:d0:32:19:74:2b:ca:7d:ad:b0:de:83:
0b:9f:9e:97:b4:b3:9a:a2:30:14:33:61:3b:05:e5:c1:3d:56:
44:2d:32:86:9f:03:fc:48:fc:2f:41:cd:f4:3e:b3:27:bd:d5:
92:04:42:6b:c6:3c:15:fd:93:e3:f9:eb:0d:83:43:0f:ab:b6:
e6:e7:01:05:9b:bd:67:02:6a:00:6e:c7:32:15:a0:6d:b5:51:
36:18:ae:2e:d2:3c:bc:7f:e6:6f:8a:40:6e:7f:b0:f5:68:df:
62:eb:70:26:ac:0b:04:70:7d:5f:8d:49:8a:4d:27:3e:f3:2f:
09:93:a3:aa:69:60:63:16:0c:9b:f5:30:15:d7:b9:c4:fa:ca:
3a:f8:fe:b6:ad:fd:5c:51:a2:61:58:13:08:1e:9e:ee:f5:67:
34:87:26:cb:cd:ba:03:e1:1e:5a:f5:25:96:e8:a6:d7:67:17:
07:2d:e2:89:e9:66:5a:56:2f:4e:d8:62:ea:4c:19:09:a0:e3:
80:76:18:0b:1f:ce:c9:37:61:3d:55:33:b8:3e:66:64:66:e3:
7d:02:80:d2:92:83:d1:d1:80:d9:93:4d:74:5c:79:fc:ea:cb:
db:27:fe:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:11 2026 by rpki-client