Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
File: deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json)
Hash identifier: 14W4xEkjua7gHV+fg/+7GYApR1fkYYlNI6sMNYvTdIQ=
Subject key identifier: 1A:2A:0C:3D:C6:57:AC:A1:D9:5A:6D:36:B0:64:A1:D9:FC:67:A3:BB
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial: 019CAD22D65C3858145E867A9158AFB2CB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
Manifest number: 1852
Signing time: Mon 02 Mar 2026 06:01:07 +0000
Manifest this update: Mon 02 Mar 2026 06:01:07 +0000
Manifest next update: Tue 03 Mar 2026 06:01:07 +0000
Files and hashes: 1: IKecYpJsyQoCMXhzFQm8qwezc6Q.roa (hash: AyBWoAIIW8QVXSZmJhv+7IehUMdxfXtLu4x8wnOD+Zo=)
2: Niz0xaF_UJO5sK6yvy3cMVF07nA.roa (hash: l65DOQXiJc/vw8R7nLx1kl+6tdgkTZuIaNzOHJm95Zo=)
3: WFTfI5tspGo4Ss0OCZAL-JGWw3k.roa (hash: ygHs+fWVxGVJnQRLr2/Xp2LQTIWtPolhwTvnQdcJhwg=)
4: Wrrx-J8255kGZZQo2Z_lshL_g94.roa (hash: RJwUNDcFiRkR23EOeiZYpldoRJTn3DHSqOqjyT0fbkQ=)
5: cKp2OZnMQ6gfuVdFBIpAAe-tLzE.roa (hash: mbO9zdERKtIWiDiD8x4e0EjpaANpcC71gfDZ39R7GH8=)
6: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: mNPUHdn+qEZHuiWxsf+o590ptkmK+0dqVimww21cKt4=)
7: p6DmQaVdSnpO0418vCwa-3h5IyU.roa (hash: oLcwvSqddOQ2Ul0V7nGknSGHPS/F0P9Nc73tzvsSSQ4=)
8: r2Y6Npuwz2fSFJGlB1IqT0Y2GL8.roa (hash: lnldbd2L1Ux8PYgmjwCpHbxAbqqtYXmXImm+n59vkVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:d6:5c:38:58:14:5e:86:7a:91:58:af:b2:cb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Validity
Not Before: Mar 2 06:01:07 2026 GMT
Not After : Mar 3 06:01:07 2026 GMT
Subject: CN=1a2a0c3dc657aca1d95a6d36b064a1d9fc67a3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:b6:3a:86:c5:6e:08:6a:89:a7:9b:0b:c7:
92:7f:11:3f:02:7c:91:3b:a9:90:2f:df:c8:b5:b0:
07:33:a7:3a:94:d2:ca:38:0c:90:5c:da:e9:1a:c5:
99:c0:dd:7e:a5:1b:37:58:44:32:1f:9c:53:11:7a:
07:1f:7f:70:ca:58:f1:51:26:05:97:b7:21:af:0a:
61:22:e0:1c:d3:3e:14:10:db:fa:f2:98:f1:15:7c:
3e:28:11:3a:5c:a6:9f:3a:0a:c9:32:6c:1a:61:a7:
83:37:fd:2d:b2:47:03:db:18:28:61:46:82:df:bf:
38:19:2a:bb:c2:a0:79:0e:8b:1f:ef:90:72:b5:ee:
ff:29:9d:7e:fd:c0:67:65:35:13:80:47:d5:cf:84:
20:2a:18:06:84:d5:89:98:a9:fd:26:41:c8:59:a6:
61:e2:fd:51:28:9b:63:8e:61:29:96:84:21:36:dd:
f8:8f:3c:89:63:43:a1:a9:c0:35:71:cc:15:d1:10:
3c:00:05:2f:4d:5d:e7:c0:6a:39:8a:93:c5:0c:be:
5d:6e:9d:01:45:cc:7e:80:02:68:01:05:3b:ec:01:
ac:87:46:88:d1:1d:16:c5:e0:31:5d:c6:1a:73:c8:
e1:6b:58:4c:5f:77:cb:dc:75:9d:17:8a:09:96:5b:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2A:0C:3D:C6:57:AC:A1:D9:5A:6D:36:B0:64:A1:D9:FC:67:A3:BB
X509v3 Authority Key Identifier:
keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9a:c6:6f:34:16:ad:8e:18:46:0b:dc:68:3b:b9:a7:d8:c2:
fb:04:3b:c9:70:9e:21:bd:95:d2:9b:d9:a6:76:a2:14:2e:81:
8a:bd:8d:ed:08:4e:2f:ee:5f:41:40:a1:68:63:b0:e5:b1:29:
61:0f:f2:a9:4d:ed:9c:07:41:8c:60:c2:1d:fb:4d:14:be:af:
5f:84:a8:50:57:76:f9:a7:cc:75:58:7d:0b:11:4c:6e:70:78:
d8:14:ac:dd:64:62:e3:58:cc:f5:f4:32:f3:12:9a:18:48:10:
a3:e6:e9:4f:53:3d:32:f7:93:f4:6d:3b:92:d3:ca:3a:66:62:
4f:04:17:bc:7d:93:35:db:3e:b8:75:fe:fb:4b:d7:69:28:33:
0a:3f:ab:41:41:a1:00:c3:32:d3:24:aa:a7:af:de:88:98:cd:
36:06:89:d5:ca:88:b3:06:61:c1:87:66:a1:09:3b:d0:cc:fd:
ba:7d:21:4c:35:43:06:fb:2e:4d:33:12:31:c9:eb:cb:eb:6a:
0d:9d:06:b4:a1:4b:ab:a2:6b:5d:76:cb:1e:4b:c6:b6:9e:6d:
a0:25:13:c8:0d:8b:ad:fa:a0:a5:9c:cc:be:a4:35:cf:11:3c:
e9:49:56:35:d9:15:a0:59:07:ca:93:2d:82:c0:25:50:a4:28:
11:62:c5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:42:25 2026 by rpki-client