
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.mft
File: dbh4BinZITNXwHDBwBBgU0dIg8E.mft (raw, json)
Hash identifier: xeahiU1M0YYbqYzf3Mlm5FADoAKwH1cp0BSJvl0Xuls=
Subject key identifier: D4:00:D7:E7:22:4B:46:EF:2A:BF:1F:61:5D:83:80:67:68:43:41:D7
Authority key identifier: 75:B8:78:06:29:D9:21:33:57:C0:70:C1:C0:10:60:53:47:48:83:C1
Certificate issuer: /CN=75b8780629d9213357c070c1c0106053474883c1
Certificate serial: 019CAD592F47AB87C7E468D85DDA7F557C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbh4BinZITNXwHDBwBBgU0dIg8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.mft
Manifest number: 0E6B
Signing time: Mon 02 Mar 2026 07:00:28 +0000
Manifest this update: Mon 02 Mar 2026 07:00:28 +0000
Manifest next update: Tue 03 Mar 2026 07:00:28 +0000
Files and hashes: 1: dbh4BinZITNXwHDBwBBgU0dIg8E.crl (hash: kJEcNFiutAhrICD7RGPH6JTKRzi3uIX7AUrv3yTGEIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbh4BinZITNXwHDBwBBgU0dIg8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:2f:47:ab:87:c7:e4:68:d8:5d:da:7f:55:7c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b8780629d9213357c070c1c0106053474883c1
Validity
Not Before: Mar 2 07:00:28 2026 GMT
Not After : Mar 3 07:00:28 2026 GMT
Subject: CN=d400d7e7224b46ef2abf1f615d838067684341d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e0:b8:fa:07:b2:b2:f7:11:e3:46:42:be:a3:
a4:43:da:e0:6a:66:ff:8a:d2:2b:2d:a1:02:3d:fc:
4f:88:69:21:35:4b:45:dd:12:3b:48:d0:4e:fb:1d:
f3:89:2b:e4:40:3f:20:88:ca:c9:0e:c1:bb:5a:35:
e7:7f:b6:00:86:ff:91:70:a5:4f:e9:1f:3a:7b:bc:
8d:65:86:25:88:65:40:42:d5:b0:90:4a:2c:16:d4:
9f:50:3f:7f:29:a5:11:65:9d:fa:3e:b6:29:4a:e5:
c3:67:16:a8:ca:ec:f3:a8:75:97:d4:ac:cd:9f:60:
74:28:5d:73:ec:f3:ac:12:42:e4:d2:02:01:d0:21:
b5:c8:d2:e7:0d:c9:d7:1f:c4:05:e6:a4:75:2d:1b:
e1:50:6d:9f:bb:53:87:4e:67:ce:3e:64:00:c5:32:
8a:a2:bd:b1:cc:50:31:39:fe:25:a8:30:55:a2:93:
3f:69:29:53:dd:ec:27:75:e9:e1:df:8e:ec:a6:a5:
a5:3e:e7:a8:5e:53:91:54:de:ac:0e:33:a9:6d:36:
f6:09:32:7c:de:53:53:52:9d:2a:11:fe:78:30:f6:
d7:47:76:c3:81:86:c6:91:fa:fa:7c:f1:e9:b0:bb:
c5:91:6d:58:70:20:7d:3e:87:10:42:42:0f:cd:4b:
f1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:00:D7:E7:22:4B:46:EF:2A:BF:1F:61:5D:83:80:67:68:43:41:D7
X509v3 Authority Key Identifier:
keyid:75:B8:78:06:29:D9:21:33:57:C0:70:C1:C0:10:60:53:47:48:83:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbh4BinZITNXwHDBwBBgU0dIg8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b0:2e:84:0d:0e:0b:9e:22:a5:5e:e0:61:e2:1b:7b:5f:67:
c5:c2:39:04:f7:82:57:6e:c6:2a:85:50:f9:6d:be:f2:6c:4b:
ee:15:2c:5e:11:74:06:5f:d7:35:00:8d:2c:17:65:53:00:25:
e0:89:57:c2:b5:ec:95:5a:a1:65:33:e1:85:4b:0c:8d:f2:68:
cc:a1:4e:79:50:78:af:90:dc:71:f3:5f:85:d6:f6:92:d5:80:
09:03:26:4f:8a:8f:53:5b:b9:12:3e:1e:18:31:99:54:6e:2e:
57:7a:da:c1:be:3e:a5:d8:fc:39:21:94:ed:44:01:72:e9:96:
74:79:96:08:05:fa:81:e2:22:dd:ab:af:e1:8a:fd:62:f7:89:
6c:4e:2a:c7:79:1b:28:b4:61:f1:9c:06:c3:3b:5a:3d:ae:b3:
47:fd:f6:4c:61:c8:90:2b:26:e0:b0:c9:6f:01:eb:5c:d6:e4:
0d:d3:10:b1:6a:0b:0b:68:39:d2:64:99:37:14:51:35:25:da:
7f:32:52:63:e5:b2:fa:98:97:3b:a4:b5:ec:65:bb:ca:0f:83:
7a:5d:e6:ba:5f:a7:7e:56:d8:bc:f2:c8:27:4b:be:c5:be:e9:
b1:76:1c:5f:af:d3:60:60:f6:8e:60:2f:9e:37:14:f3:b3:3d:
3a:b3:bb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:00 2026 by rpki-client