Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
File: DibUX9VpIdNGnRnEdXLydfnVUkI.mft (raw, json)
Hash identifier: l3PlU6EmR4ftAP8Kgv9Ys0owDz4yoYrL/4HsjGn3h7c=
Subject key identifier: 97:98:E6:D6:2E:D0:A0:73:C8:7C:57:F3:B4:AC:A7:6E:B8:C5:7F:F7
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Certificate issuer: /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial: 019D9AABBBB3B6AE406C2D351F91F69C716C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
Manifest number: 0B10
Signing time: Fri 17 Apr 2026 09:00:39 +0000
Manifest this update: Fri 17 Apr 2026 09:00:39 +0000
Manifest next update: Sat 18 Apr 2026 09:00:39 +0000
Files and hashes: 1: DibUX9VpIdNGnRnEdXLydfnVUkI.crl (hash: 4Bdegwrgtp9X7iLX7Yd2JvMJj2zO+pTpMa0zeh+Ab8s=)
2: E5N49IFOZzcUudGH8Hfr0F0ywvk.roa (hash: qu/cDpuHW9hVmNW832+M9NPLYicyAqIzhTV6hHRmh3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:bb:b3:b6:ae:40:6c:2d:35:1f:91:f6:9c:71:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
Validity
Not Before: Apr 17 09:00:39 2026 GMT
Not After : Apr 18 09:00:39 2026 GMT
Subject: CN=9798e6d62ed0a073c87c57f3b4aca76eb8c57ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:94:56:1d:7b:f4:d3:87:1d:c9:88:1f:fe:
1f:6a:72:42:3a:8a:23:8a:5f:7e:19:82:76:3a:a0:
69:78:0c:97:e2:b8:35:34:01:ae:3d:86:76:49:dd:
ee:6b:a3:c8:8a:60:a3:19:7f:8b:4f:06:0e:5e:e3:
04:d4:19:3e:16:06:cf:42:43:2f:3f:49:4c:33:ab:
f5:5c:51:c3:a1:61:d1:fc:d1:bb:ea:51:dd:5f:03:
25:4b:66:ac:50:26:ac:52:b0:87:91:cb:61:38:7b:
93:fd:8c:7f:c4:3b:f5:aa:2a:f0:2d:47:8b:48:0a:
77:48:ba:a6:c4:8e:a9:2f:b5:ec:72:ec:a3:72:bc:
67:45:8c:89:d7:89:97:db:ab:fc:ba:21:8e:d2:4e:
e9:e6:a0:3f:12:26:94:61:9c:3d:e2:c1:e5:67:a5:
c2:22:38:1f:48:07:85:c2:ff:52:2c:14:72:9c:aa:
14:47:13:32:e9:45:74:7f:43:c9:71:c5:fb:6c:3a:
0e:ac:2a:57:57:d8:68:6c:7c:70:7d:1c:4c:a8:9d:
2d:d8:2d:2e:3a:98:67:95:cc:e4:5b:c5:21:9a:d5:
f8:d4:d5:39:52:64:f9:51:43:b3:59:31:6e:86:31:
62:19:9b:d2:d1:16:32:06:f1:fa:bd:4c:b8:fb:6a:
5a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:98:E6:D6:2E:D0:A0:73:C8:7C:57:F3:B4:AC:A7:6E:B8:C5:7F:F7
X509v3 Authority Key Identifier:
keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:41:26:47:2a:aa:7e:68:14:ee:76:1f:98:f1:07:97:22:c8:
85:e7:a7:4b:e6:25:66:75:b3:10:56:46:aa:b9:91:50:3c:b4:
6a:82:a0:95:bf:de:89:0a:df:36:5f:34:aa:6c:a4:b1:19:38:
f8:31:4f:a8:af:9c:08:25:e8:8c:92:f9:9a:46:e3:9b:db:33:
fa:a0:bb:7e:76:93:53:48:ea:db:0d:09:c1:2f:bc:be:2c:af:
a0:64:81:9a:6c:37:08:07:14:ee:db:cc:22:56:6f:68:f1:ba:
65:75:6b:76:88:be:27:26:42:fe:58:34:ba:20:fd:72:8e:f1:
1e:95:3f:1f:9d:72:7d:c4:1e:82:7c:aa:fa:25:63:0a:1a:f7:
55:22:e0:c7:1e:f9:bd:74:fb:33:b7:91:1e:99:03:c7:71:e9:
e5:34:3c:ec:75:c1:c8:0a:06:64:2a:65:3b:8c:d6:7c:d0:b3:
ec:41:78:e6:03:6b:25:b7:68:a2:db:0a:05:27:04:fc:da:1b:
ef:f2:6f:0c:46:33:08:ad:47:4c:6c:4e:27:6d:06:7c:49:e0:
7e:2e:29:f0:2d:e7:4a:7a:81:d8:fa:45:8f:d0:ce:1c:b5:f8:
48:da:b2:01:cc:dd:96:7f:50:1a:4c:63:61:f1:3f:54:43:d9:
2e:17:2b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:51 2026 by rpki-client