Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
File: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft (raw, json)
Hash identifier: hn/6tUpiOtgxuMkf02uOgui4Mb+qSml09YnTJzCFK8o=
Subject key identifier: 24:0D:A4:EE:27:20:1F:93:44:64:5D:B2:13:79:53:92:CC:21:39:74
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Certificate issuer: /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial: 019CAB6BEE9F382563345D63B6D0095EF1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
Manifest number: 0C34
Signing time: Sun 01 Mar 2026 22:01:43 +0000
Manifest this update: Sun 01 Mar 2026 22:01:43 +0000
Manifest next update: Mon 02 Mar 2026 22:01:43 +0000
Files and hashes: 1: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl (hash: DWTmMrc476zSGAuyRIFJ5t3ULigEV/4E7nI9deaMxHM=)
2: SbbT_vemLYhSpPxloUrfpgEATIA.roa (hash: TxqN78AgB7Nz/Wz8KEGfJojT7Yd8MRSlYTLQkCNBIXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ee:9f:38:25:63:34:5d:63:b6:d0:09:5e:f1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Validity
Not Before: Mar 1 22:01:43 2026 GMT
Not After : Mar 2 22:01:43 2026 GMT
Subject: CN=240da4ee27201f9344645db213795392cc213974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:71:bb:4b:30:c4:2b:47:28:ae:33:b1:2f:
e1:74:7c:f4:d7:46:fb:1c:df:52:bb:38:c7:b3:c3:
7a:07:36:aa:7b:9b:81:ca:0e:9d:90:90:1d:fa:93:
5a:71:c2:6e:8a:c3:47:93:70:55:d9:4c:cd:ca:78:
5d:9d:6c:02:b9:3b:8a:6b:d0:bf:c7:1a:04:3b:80:
3c:c5:fb:97:bc:a8:24:af:4f:52:44:22:d6:f4:7f:
b5:a4:ae:30:40:2c:2b:30:c4:36:26:98:fa:48:91:
4f:df:3c:3c:e3:af:fa:07:7a:51:31:2b:19:d5:15:
ff:90:b9:b1:b4:b5:b7:93:25:f5:18:6a:e1:3f:81:
50:a2:8e:c1:2e:6e:30:1a:8b:dd:d7:c4:fc:a5:15:
84:89:94:90:0f:5d:1d:87:8a:b6:89:d3:49:4c:81:
95:95:81:de:c4:47:ba:24:98:cc:ff:f3:4c:67:06:
bb:e9:23:47:a4:e8:d9:d4:4e:21:a7:5e:6f:4a:d8:
c0:0c:ff:8e:03:3d:ce:d0:38:5a:96:4d:27:14:16:
d6:c0:93:dc:e8:d3:1e:da:fa:99:33:9c:a6:ea:22:
56:53:cf:30:19:bd:1e:96:ff:3a:f9:0e:c9:33:aa:
b8:50:ac:0d:69:66:80:55:38:fa:5f:f3:5f:3f:b9:
28:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0D:A4:EE:27:20:1F:93:44:64:5D:B2:13:79:53:92:CC:21:39:74
X509v3 Authority Key Identifier:
keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f6:8d:d4:9d:16:c2:a8:e8:a2:3a:2c:be:97:1a:29:89:0e:
a2:29:23:10:77:7d:c9:6f:70:4f:b4:70:a0:35:24:eb:3f:51:
c4:a2:1b:25:8c:99:38:c9:f9:7b:c5:ff:65:13:a1:c5:3b:74:
2b:d4:90:dd:88:1e:8b:7c:3b:93:b1:fe:6c:b3:82:0b:a6:40:
18:3a:40:33:18:22:01:ca:99:dc:5b:2b:32:3e:97:c6:35:c6:
ac:e0:8e:31:18:f5:fd:fc:22:e8:68:f4:aa:00:cd:2a:3a:2f:
d7:ac:fe:3a:12:d3:ad:da:4d:85:4f:0a:11:90:68:af:eb:06:
a9:c3:cc:8f:a1:3b:1a:92:88:9e:66:fe:51:c0:d9:df:4e:c9:
f1:ab:02:e0:24:4f:9f:43:0a:d7:0e:e6:b7:b1:8b:89:48:68:
96:a0:29:08:d7:fe:24:47:56:7c:cd:e9:68:78:05:d6:d1:de:
4e:34:42:7c:f2:b9:14:b3:ee:3c:76:3e:81:35:bf:58:c9:f1:
6b:a3:4c:f6:80:d4:b9:0e:4a:de:33:bb:f9:04:9b:04:3b:3e:
87:a3:68:c1:a7:99:9d:f4:b5:3c:fe:30:e8:4e:46:60:d7:a7:
05:84:a0:18:49:90:84:2a:e5:17:ae:ae:f3:fe:62:1a:7c:24:
5d:8b:13:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:03:10 2026 by rpki-client