Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
File: deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json)
Hash identifier: 21R0NcgOnIZTngW+QIW0vIaomCeK4yQ1RS5U6RnIOek=
Subject key identifier: DD:AE:62:3D:E0:95:9B:3A:39:51:5F:01:D4:46:BC:7C:28:A2:83:84
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial: 01A0C4E9A253824F38F3386310DD3D8AA293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
Manifest number: 1A71
Signing time: Mon 21 Sep 2026 17:00:40 +0000
Manifest this update: Mon 21 Sep 2026 17:00:40 +0000
Manifest next update: Tue 22 Sep 2026 17:00:40 +0000
Files and hashes: 1: IKecYpJsyQoCMXhzFQm8qwezc6Q.roa (hash: AyBWoAIIW8QVXSZmJhv+7IehUMdxfXtLu4x8wnOD+Zo=)
2: Niz0xaF_UJO5sK6yvy3cMVF07nA.roa (hash: l65DOQXiJc/vw8R7nLx1kl+6tdgkTZuIaNzOHJm95Zo=)
3: WFTfI5tspGo4Ss0OCZAL-JGWw3k.roa (hash: ygHs+fWVxGVJnQRLr2/Xp2LQTIWtPolhwTvnQdcJhwg=)
4: Wrrx-J8255kGZZQo2Z_lshL_g94.roa (hash: RJwUNDcFiRkR23EOeiZYpldoRJTn3DHSqOqjyT0fbkQ=)
5: _RQQ5tVF2eFgG4W622rODRsfodw.roa (hash: tBfa8G6tBLKfwxInkvbCwg+hxTDjAv00awjpszqTn38=)
6: cKp2OZnMQ6gfuVdFBIpAAe-tLzE.roa (hash: mbO9zdERKtIWiDiD8x4e0EjpaANpcC71gfDZ39R7GH8=)
7: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: P1LZpm1HpqCJPMoMADz6tFmKP0DTInkOsBydntA+6t8=)
8: p6DmQaVdSnpO0418vCwa-3h5IyU.roa (hash: oLcwvSqddOQ2Ul0V7nGknSGHPS/F0P9Nc73tzvsSSQ4=)
9: tzZM7nYn-Yv6VuwdydL4arg8J2c.roa (hash: k/xFXsG2Cc7BkpgSwakJflKtWLf9ZeYiel+DCWnqX60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:a2:53:82:4f:38:f3:38:63:10:dd:3d:8a:a2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Validity
Not Before: Sep 21 17:00:40 2026 GMT
Not After : Sep 22 17:00:40 2026 GMT
Subject: CN=ddae623de0959b3a39515f01d446bc7c28a28384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:a5:7a:03:29:d6:8c:6d:95:01:0a:e1:3b:
7f:8b:32:eb:ba:67:df:e2:97:8d:55:1a:fb:7a:4b:
96:2b:f9:ee:c1:10:05:02:a6:49:0e:e3:09:22:d4:
3f:32:5f:35:d9:ed:74:b1:09:26:c0:a0:e3:dd:0b:
1f:1d:5f:16:d7:2b:92:05:c7:7b:fc:e2:e1:56:dd:
8f:25:1a:d0:0c:ca:c0:2b:19:dc:6e:71:98:5d:81:
4a:5f:0e:d5:f7:7e:fd:37:63:ee:bd:9c:6f:8b:df:
d5:7e:fd:dd:66:80:91:a4:f2:a6:61:7b:c7:4f:04:
14:fc:c8:f6:a6:12:b0:34:3b:47:52:6f:70:aa:a7:
04:1c:b8:ef:15:e6:03:b1:eb:73:7e:70:86:e7:ae:
6c:ef:a1:a6:ed:e6:97:de:89:82:7a:3d:75:ca:63:
0e:23:78:77:3b:5e:b6:cd:4e:0f:24:fe:72:50:6d:
5e:51:4e:4e:0b:59:64:98:11:44:cc:c9:d0:db:3a:
d0:2b:d3:6d:f6:a9:8a:b8:c3:88:47:8c:64:b4:84:
a8:1a:ae:ed:de:e4:c0:85:83:b0:b7:f6:7e:83:22:
fd:bc:7d:01:9c:c2:74:8f:60:86:c4:b0:c1:54:6f:
e2:9d:ad:65:3d:ce:df:12:be:62:47:fe:49:e6:54:
ba:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AE:62:3D:E0:95:9B:3A:39:51:5F:01:D4:46:BC:7C:28:A2:83:84
X509v3 Authority Key Identifier:
keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e6:29:0e:e4:1c:98:04:ab:c0:36:1e:5a:36:11:97:58:e3:
ac:5e:3e:24:32:32:db:9e:3d:74:6e:d9:8b:f7:ca:be:67:38:
42:f8:70:81:9b:f3:0f:32:3f:8f:0c:b6:20:3a:7a:33:c8:bc:
77:40:92:7c:64:1c:23:5c:da:ea:07:0e:ce:48:a7:73:6a:a8:
12:7c:16:6f:88:e0:17:0e:17:9f:ce:c0:14:74:36:09:4a:db:
1b:e4:7b:1a:af:e9:5f:f2:66:4b:f9:95:6c:f7:a4:f0:fb:d0:
a4:48:9b:de:23:f6:b6:a8:45:8f:65:54:0f:cb:97:78:cc:de:
68:48:ae:ee:80:d8:4f:22:40:7f:07:38:ae:43:bf:2a:80:a8:
14:7c:91:0e:f5:1d:85:07:b5:02:d2:4e:1e:92:09:6c:26:f5:
28:08:35:96:e7:a9:48:81:00:98:4b:3f:e8:53:9a:77:f5:dd:
3f:34:c7:52:23:e3:dd:13:c7:98:0b:7d:f1:c6:23:69:cc:cb:
3b:80:10:85:15:9c:8c:18:98:8d:4b:62:0d:0e:9e:07:69:61:
7d:a0:12:ae:a5:61:61:b3:be:86:b8:5f:4a:bd:d0:70:b6:82:
67:36:ea:4c:54:6d:85:0e:55:5c:c9:dc:4b:16:3a:6a:75:13:
d3:ef:20:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:55:14 2026 by rpki-client