Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
File: DETz4ku_xgSOX_pQw9zjZP_AErA.mft (raw, json)
Hash identifier: 6RUYM/QSZpjQBc+gHoMHxpI52qbNaUKt7fpkd29JBJA=
Subject key identifier: 1C:62:67:74:7E:88:BE:21:68:5D:4F:77:C4:3B:FB:C2:80:43:DD:67
Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
Certificate issuer: /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Certificate serial: 019D38D3990C2297669542D7F213B0E8986B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
Manifest number: 1556
Signing time: Sun 29 Mar 2026 09:01:24 +0000
Manifest this update: Sun 29 Mar 2026 09:01:24 +0000
Manifest next update: Mon 30 Mar 2026 09:01:24 +0000
Files and hashes: 1: DETz4ku_xgSOX_pQw9zjZP_AErA.crl (hash: 5Mv9h7zKn0X8IImeuK1zK/hBDw+YPVBHk4QszYJQ07k=)
2: Ki_V1gbeMTHzzb2sAJkjbiTIB4k.roa (hash: G8coFslA7SGGsh7OBwFjSWY/mTtlNbU81EsuVTVQlk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:99:0c:22:97:66:95:42:d7:f2:13:b0:e8:98:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Validity
Not Before: Mar 29 09:01:24 2026 GMT
Not After : Mar 30 09:01:24 2026 GMT
Subject: CN=1c6267747e88be21685d4f77c43bfbc28043dd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:6d:2d:07:b6:a5:6b:bc:d2:aa:e4:33:49:
ba:23:c8:ab:ae:d3:0d:14:f4:d9:24:aa:7f:ef:6f:
8b:4b:e1:02:9b:dd:b3:10:e3:45:d2:3e:ba:3f:2e:
05:25:60:17:81:9c:47:74:b6:f1:08:bf:58:1a:42:
1f:1e:92:65:b0:40:49:ee:4f:25:20:a3:34:26:d4:
fc:f4:67:3c:d2:3e:fb:b3:a1:de:de:91:92:5f:5e:
0f:f7:76:06:13:37:1b:39:66:7d:ea:6d:c5:15:8c:
58:7d:d4:98:3b:ae:f5:40:a9:17:73:82:d3:b0:0d:
79:80:08:86:22:1c:58:c4:e1:6d:88:37:9e:7f:d7:
72:25:4c:b0:8f:3a:45:2b:b0:8f:58:d6:e3:76:b4:
8f:9b:d7:fc:4a:5d:fb:5b:53:08:fb:68:57:64:5b:
44:be:6f:42:dc:f1:01:fe:e8:2d:7c:49:11:e0:3f:
31:ce:df:ba:d7:c5:ae:86:ee:af:36:0f:d3:ca:b5:
07:93:47:6c:d5:14:08:84:31:fe:44:38:f0:89:b4:
2f:c6:04:c5:c0:88:da:18:f5:6d:71:36:63:2b:5c:
85:05:d4:69:8e:ae:33:13:30:37:81:c7:d7:03:05:
a9:5f:bd:b2:2b:c4:66:0e:b5:c5:dd:63:40:c1:80:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:62:67:74:7E:88:BE:21:68:5D:4F:77:C4:3B:FB:C2:80:43:DD:67
X509v3 Authority Key Identifier:
keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:07:1e:cb:1c:15:28:58:ca:03:8b:2e:fe:e7:33:0d:18:14:
06:16:70:9b:08:af:8f:fb:b4:5a:bc:d6:ea:7f:7f:43:56:12:
40:b2:67:02:e1:55:85:1a:6c:40:55:3d:48:8f:12:06:de:37:
d1:7c:fb:e1:2e:bc:c7:29:33:67:96:6e:0a:48:db:e4:21:1f:
20:2b:db:95:ff:cf:42:98:d3:b0:8d:79:a8:7e:95:ad:3b:24:
72:0d:e3:e5:4b:38:a4:db:50:c1:9b:dc:4d:0b:94:18:06:2d:
88:7e:2f:76:74:40:cf:71:1a:c0:72:77:41:2a:68:c5:cf:b6:
a3:c0:37:9a:34:1f:41:68:87:68:b7:55:58:0d:6e:3c:9c:6e:
58:9e:19:be:54:d9:e4:2e:83:8d:a5:dd:29:34:f7:bd:8d:ba:
76:96:f8:59:b7:dc:a2:da:2c:e2:2c:db:81:a9:1c:4c:e7:ee:
c5:56:37:32:98:6c:87:12:e2:40:df:64:ad:77:11:ad:2e:62:
2d:c6:cd:3e:09:6a:27:f3:b7:53:50:72:6e:3e:56:b8:63:4a:
03:f7:77:17:e2:0f:2c:d5:20:b5:89:16:0c:fd:bd:84:2a:79:
24:8c:a8:c9:3e:c2:77:11:a8:9f:77:8b:44:8e:fc:0f:7a:6f:
65:bc:3a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:11 2026 by rpki-client