Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
File: DibUX9VpIdNGnRnEdXLydfnVUkI.mft (raw, json)
Hash identifier: X/utObSPC1BxMVuZuw/MkNVnnkeU9XQ7uZ2Z1NrjVC4=
Subject key identifier: 34:C8:FE:96:F1:70:C4:14:E3:7A:F1:41:11:44:48:4B:33:BD:23:BD
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Certificate issuer: /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial: 019D382E0C0276F014A084F61BC35115511A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
Manifest number: 0ADD
Signing time: Sun 29 Mar 2026 06:00:34 +0000
Manifest this update: Sun 29 Mar 2026 06:00:34 +0000
Manifest next update: Mon 30 Mar 2026 06:00:34 +0000
Files and hashes: 1: DibUX9VpIdNGnRnEdXLydfnVUkI.crl (hash: fyytu/VJjJDsNPohlfaoWxOpebuFlk5pgzTgsDtVpZA=)
2: E5N49IFOZzcUudGH8Hfr0F0ywvk.roa (hash: qu/cDpuHW9hVmNW832+M9NPLYicyAqIzhTV6hHRmh3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:0c:02:76:f0:14:a0:84:f6:1b:c3:51:15:51:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
Validity
Not Before: Mar 29 06:00:34 2026 GMT
Not After : Mar 30 06:00:34 2026 GMT
Subject: CN=34c8fe96f170c414e37af1411144484b33bd23bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:d9:8c:30:e9:4e:e2:67:36:d9:91:06:05:
1f:6a:ea:69:ae:18:76:30:72:c0:94:4c:18:50:9e:
f1:11:f0:07:a6:26:d8:64:e0:f4:53:38:c8:17:61:
75:91:3c:a6:0c:c6:e9:43:1c:bc:b3:85:7b:e1:ee:
5a:68:5b:17:1c:6c:e2:4b:c5:2c:2c:d7:45:34:34:
16:2d:94:52:ee:3c:21:13:0a:12:95:2d:45:a0:e3:
a2:59:d1:a7:23:19:44:a6:9e:f0:0e:5b:d1:af:6c:
d9:ed:ee:31:12:71:53:3e:91:b9:58:d5:79:26:a6:
ca:d3:b9:d7:ea:f0:6c:be:8c:8f:d6:97:66:17:4a:
86:27:0c:e6:f4:40:f6:c5:23:2e:e5:58:cf:44:3e:
8d:8c:87:48:87:53:ab:fe:a9:54:52:98:4a:8b:5d:
38:ce:43:84:93:b4:1d:53:27:fa:d5:12:ff:98:67:
45:c5:05:0a:e8:fd:8d:ae:db:c4:78:92:74:26:5f:
d6:9f:34:b7:c6:77:57:65:86:6f:05:37:67:77:7a:
16:5e:87:d1:05:72:c4:18:ec:d6:46:c0:c0:54:50:
11:10:45:d4:e2:10:20:c3:0d:db:78:17:45:f3:14:
44:f2:4a:8a:b8:a8:50:e6:36:b9:21:30:20:87:54:
48:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C8:FE:96:F1:70:C4:14:E3:7A:F1:41:11:44:48:4B:33:BD:23:BD
X509v3 Authority Key Identifier:
keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a4:67:5f:fe:79:53:7e:72:72:b2:54:85:8e:d2:e6:66:2f:
6b:4a:68:04:8a:c7:8c:13:0e:ef:52:67:5a:9e:11:a2:3a:fb:
43:a7:6a:08:a1:52:db:d5:96:a2:86:66:e4:fd:86:f8:62:44:
87:fd:c7:bd:bc:74:d9:28:b1:ee:0d:e8:af:fc:29:11:7c:9b:
a2:a9:f7:08:fd:d7:cf:db:ab:28:50:8b:cb:e8:c6:9e:ba:0c:
51:ee:50:0f:91:2d:04:67:f4:be:83:08:f5:8e:16:1a:c1:a8:
12:3f:a6:91:42:f2:2b:3f:9b:ed:3d:74:63:85:09:a3:48:91:
da:d3:16:f1:eb:cd:c8:3e:61:cb:93:22:66:3c:dc:18:da:86:
19:d5:65:d8:4f:85:4a:19:07:29:53:29:f4:bf:ca:d2:40:b0:
c2:22:7f:8c:3f:fe:ae:4b:5e:9e:f6:3c:39:b5:cb:68:d4:fa:
55:0d:55:3e:15:99:5f:cf:7e:f6:bd:44:52:39:b7:3c:ac:71:
21:02:48:fc:9b:2c:39:2d:aa:57:64:cc:37:ce:29:5a:5c:3b:
0c:2f:56:c3:8c:e7:e3:d4:db:8f:29:56:23:56:9a:3e:5e:4f:
0f:11:3c:41:30:9c:9a:44:d6:17:db:6b:14:56:b2:d5:94:3d:
3f:aa:bf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:52 2026 by rpki-client