Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
File: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft (raw, json)
Hash identifier: fHVzfn/Wfbn2VJ6sxEnwRnC4mWkgHC9tOFus1Oa2vrY=
Subject key identifier: AD:5E:23:CD:57:B5:9A:7E:65:D2:D5:C3:60:0D:8D:02:2F:55:0B:81
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Certificate issuer: /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial: 019D3A53DAD58561BE916DD53C6DD9D5F681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
Manifest number: 0C7E
Signing time: Sun 29 Mar 2026 16:01:07 +0000
Manifest this update: Sun 29 Mar 2026 16:01:07 +0000
Manifest next update: Mon 30 Mar 2026 16:01:07 +0000
Files and hashes: 1: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl (hash: +YqMqfgrJLx7san5wYf7fNLkAzUHKoPJg/5BE81RjhM=)
2: SbbT_vemLYhSpPxloUrfpgEATIA.roa (hash: TxqN78AgB7Nz/Wz8KEGfJojT7Yd8MRSlYTLQkCNBIXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:da:d5:85:61:be:91:6d:d5:3c:6d:d9:d5:f6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Validity
Not Before: Mar 29 16:01:07 2026 GMT
Not After : Mar 30 16:01:07 2026 GMT
Subject: CN=ad5e23cd57b59a7e65d2d5c3600d8d022f550b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:93:3c:5d:4f:40:7c:0b:56:91:a4:4e:b3:
67:6f:75:e2:ad:10:7a:c4:45:ca:7d:a9:56:3d:e3:
eb:a0:82:fb:35:ba:0e:75:60:de:88:21:e4:74:93:
a3:f3:49:0b:2a:fb:aa:bc:0d:15:da:d2:84:5d:6f:
b2:1a:3a:8e:e2:c1:af:3a:4a:4a:ac:ad:54:c1:b8:
3d:1b:04:5e:d2:bd:d3:54:da:a3:80:ad:5a:35:e2:
36:8a:f7:de:5b:a2:78:3d:a7:28:72:d6:74:e4:99:
6a:3d:95:52:6f:33:92:8f:1a:8c:a7:94:15:a9:53:
68:77:22:e4:ab:9d:0f:3f:ff:fa:60:dc:5c:61:20:
e4:af:b1:81:df:67:c3:c8:29:71:44:4e:60:b3:46:
36:3d:a1:25:3a:17:49:0b:9c:d3:6e:54:7c:15:f6:
6c:a2:8d:1d:82:60:b8:c0:4b:f1:cb:c7:77:45:7f:
4c:54:4a:72:43:fb:10:3c:e9:67:6d:a1:3a:c7:ad:
36:2d:f6:75:d8:42:de:b4:42:02:1a:9d:5a:18:72:
e0:7f:c8:8e:6a:c1:30:6d:c3:8b:4c:6d:01:f0:ff:
92:fb:7b:4e:94:b6:72:b6:39:9d:78:3c:e3:78:08:
43:e4:27:17:e2:6c:c9:da:0b:b8:02:ea:ae:7d:ba:
e6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5E:23:CD:57:B5:9A:7E:65:D2:D5:C3:60:0D:8D:02:2F:55:0B:81
X509v3 Authority Key Identifier:
keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:97:c5:76:af:de:ec:f8:9d:d7:5c:ed:29:07:3a:cf:26:2a:
68:c3:ae:eb:fb:1b:ca:dc:c4:6c:a5:6c:c7:97:fc:b8:c5:eb:
14:ff:31:a6:64:c3:fc:d8:bc:7c:5a:34:ef:3e:f8:01:b7:8f:
f1:41:c3:55:74:60:2c:78:3f:cc:66:b7:81:e5:be:17:1e:cc:
85:bc:8d:01:36:b8:33:92:b8:5f:07:c0:16:d2:33:66:cf:23:
c7:7c:ea:bc:47:a2:db:d0:09:22:91:37:2b:b3:38:64:4f:9b:
11:0a:2b:b1:e6:4f:ab:f9:a4:f8:af:c5:0a:59:29:24:a0:8a:
4a:60:12:36:2f:24:03:13:43:71:07:2d:c3:79:8b:40:69:83:
d4:97:18:8f:06:78:af:04:18:0b:d9:9d:a0:ea:f3:c1:ac:35:
78:0a:ca:6c:93:af:9b:a9:12:b5:c7:da:35:b2:34:fe:69:76:
76:f8:b5:14:f2:11:63:7d:a1:2d:ac:b1:da:24:5b:a6:74:80:
d7:b2:83:c4:17:c6:4a:da:51:91:65:68:d3:89:fe:84:2c:2d:
76:9b:df:bf:f5:b0:f3:a0:0d:b0:7f:20:a6:2c:dc:dd:d1:81:
dc:7a:1a:2d:f3:ba:88:dc:96:86:47:10:c1:22:14:09:5f:c6:
e4:9f:38:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:27 2026 by rpki-client