Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
File: DefybbQ61DIFvrBn_Qqz4wAnhl0.mft (raw, json)
Hash identifier: 1orTh61CYz6wcovMDz1dcZbSilLuGrW5Jldl9pNunoI=
Subject key identifier: A1:48:9D:D3:38:59:8E:7D:F4:F7:1A:27:36:F9:57:22:97:FB:C1:C8
Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
Certificate issuer: /CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Certificate serial: 019D37899BE376904B9B7CB9B3B107E115F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
Manifest number: 15BD
Signing time: Sun 29 Mar 2026 03:00:58 +0000
Manifest this update: Sun 29 Mar 2026 03:00:58 +0000
Manifest next update: Mon 30 Mar 2026 03:00:58 +0000
Files and hashes: 1: DefybbQ61DIFvrBn_Qqz4wAnhl0.crl (hash: seSYuyl5V7L+tUBG0/8oYbnSixEkFFF0k5KoQHQBt5k=)
2: g323boBVOxyFFRDtn1suxBzGHN0.roa (hash: eyZdCahVj22vnipsJsBb9tIVCdJEj0KFcdD786lVupg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:9b:e3:76:90:4b:9b:7c:b9:b3:b1:07:e1:15:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Validity
Not Before: Mar 29 03:00:58 2026 GMT
Not After : Mar 30 03:00:58 2026 GMT
Subject: CN=a1489dd338598e7df4f71a2736f9572297fbc1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7a:db:d9:12:f9:56:5e:36:cb:34:05:43:9e:
e1:5a:15:03:2d:98:a7:ff:d9:c1:ba:98:10:85:3b:
fe:0b:56:c1:79:20:6b:17:cb:1d:f1:53:3f:ed:88:
12:5a:e0:d8:16:85:f6:94:67:18:44:da:4a:cc:f6:
f1:7f:f2:60:e3:3a:76:58:4c:31:1c:db:b7:9e:7c:
3f:55:64:77:68:d0:99:22:05:03:2b:7d:95:ca:a6:
37:41:bb:fa:d9:49:71:43:e9:b8:7a:eb:6c:7d:8f:
71:27:d6:03:2c:5f:15:0d:04:e7:4a:1a:79:4e:97:
06:c8:42:69:b1:9f:93:d8:4a:83:3d:e5:10:ac:cd:
e6:28:06:58:aa:a2:0d:df:ac:c1:83:58:d3:84:6e:
1a:e0:67:e0:b7:65:d0:95:78:f8:8a:bb:5b:2d:fc:
cb:cc:82:79:46:bb:61:0f:af:d4:5a:57:b8:7a:a0:
a5:11:7b:41:89:fe:be:ad:8f:b1:31:20:fc:23:9b:
71:4c:b0:d4:54:cc:a1:ee:ad:57:36:70:7c:94:a4:
29:71:a5:a1:53:82:3a:7f:6c:a5:da:45:2d:14:27:
d8:e9:92:8b:dc:f8:31:4e:00:36:cb:45:58:78:7f:
23:e7:b3:d8:ae:f3:f4:2d:4b:fe:0a:0f:62:26:c3:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:48:9D:D3:38:59:8E:7D:F4:F7:1A:27:36:F9:57:22:97:FB:C1:C8
X509v3 Authority Key Identifier:
keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:27:b8:74:84:97:2e:a4:91:69:d4:ac:27:71:09:95:e1:70:
75:8d:6f:03:85:2f:cf:1f:b7:e7:09:12:6f:a1:bc:1b:47:55:
20:f4:69:50:10:60:2f:dd:35:9f:11:9f:2b:b9:3c:89:74:89:
b5:ec:f8:86:ad:c5:f8:c8:a4:51:c9:bd:d9:ec:2f:a4:43:56:
f4:70:13:10:d7:f0:43:1b:84:10:88:24:e4:fd:6e:9d:b3:c4:
62:02:89:ba:ac:d1:37:63:b3:76:98:ff:16:d3:1b:ff:25:36:
47:35:bf:69:b1:c9:50:75:c0:d5:3b:18:3c:b7:9b:f2:45:ad:
ef:14:46:b9:e7:43:9c:c2:93:a7:ed:8e:8b:a8:e3:3e:cf:0f:
19:ce:1c:ae:c7:cf:1e:70:14:67:16:81:08:b3:f3:4c:dd:19:
d9:f8:1a:8d:87:8c:7e:c9:c0:8e:a2:bf:4e:ad:46:47:e2:38:
90:a0:02:11:9a:2b:1b:97:c1:66:b7:7e:ca:6b:1a:d9:7b:c2:
32:37:08:d7:72:f8:35:f1:e7:fe:21:c1:9f:49:f3:6e:07:42:
91:26:29:b7:cf:b9:d4:a7:55:a5:62:a8:95:2f:5f:d9:59:cf:
a6:ad:39:3c:ee:a5:17:36:66:5a:a3:c4:96:e7:78:fa:83:c5:
4d:12:e2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:35 2026 by rpki-client