Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
File: DibUX9VpIdNGnRnEdXLydfnVUkI.mft (raw, json)
Hash identifier: rn900iibTw1h5d6WvrScDmXWI2BgDu5IfCx+o6AE8Pw=
Subject key identifier: 9E:AB:38:2D:24:02:D9:4E:81:3B:8D:AD:80:36:CC:40:ED:15:02:8F
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Certificate issuer: /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial: 019CAD229A30F4DD5C084273327638275744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
Manifest number: 0A95
Signing time: Mon 02 Mar 2026 06:00:51 +0000
Manifest this update: Mon 02 Mar 2026 06:00:51 +0000
Manifest next update: Tue 03 Mar 2026 06:00:51 +0000
Files and hashes: 1: DibUX9VpIdNGnRnEdXLydfnVUkI.crl (hash: 4PBnTJK0SjVrxgHSsI0ARD4qe8jFz0TCMWMc8ev2ezI=)
2: E5N49IFOZzcUudGH8Hfr0F0ywvk.roa (hash: qu/cDpuHW9hVmNW832+M9NPLYicyAqIzhTV6hHRmh3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:9a:30:f4:dd:5c:08:42:73:32:76:38:27:57:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
Validity
Not Before: Mar 2 06:00:51 2026 GMT
Not After : Mar 3 06:00:51 2026 GMT
Subject: CN=9eab382d2402d94e813b8dad8036cc40ed15028f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:30:e3:90:96:d8:e2:5f:73:d9:0d:9b:5b:
46:49:d4:78:b8:10:6b:04:be:c9:79:48:bc:8c:85:
59:e1:60:86:29:b3:c5:08:97:65:50:fe:d7:07:ac:
11:51:f2:95:03:b4:67:76:de:9b:41:cd:12:74:19:
67:9c:45:96:9c:c8:95:2b:5a:89:45:36:73:64:36:
2d:2b:b6:3e:79:41:78:d0:60:5e:51:8e:d6:e6:c7:
c0:51:ef:53:93:6b:02:f9:b2:dd:90:50:10:0d:cd:
82:58:52:ee:32:d2:bf:cf:81:09:44:4b:3c:57:dc:
a1:3c:71:74:7f:81:9b:67:46:67:6f:b4:8e:97:06:
2c:3c:88:4b:d1:53:85:6a:cd:88:05:03:d7:01:c9:
b8:d2:c7:e3:5f:94:97:b2:96:d0:99:44:f5:a1:f6:
26:1b:26:2b:14:bb:07:40:a8:bd:9c:43:05:43:37:
aa:45:4f:ca:44:ae:9c:00:fb:e6:70:19:46:33:ac:
d6:2e:54:b9:ab:de:0f:ee:ab:36:c9:82:65:6e:ae:
79:e1:27:b3:8c:92:a4:67:e2:71:46:79:91:21:0e:
51:7d:22:ea:2c:19:f9:6e:b1:09:e6:24:83:2c:5e:
2d:4e:9b:aa:4a:7f:36:4d:d1:98:9a:19:ac:69:f6:
c6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AB:38:2D:24:02:D9:4E:81:3B:8D:AD:80:36:CC:40:ED:15:02:8F
X509v3 Authority Key Identifier:
keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:87:9d:52:e4:ed:64:cd:b0:3d:0b:ce:08:d8:5e:7e:b3:ec:
38:69:e5:3d:9f:09:3a:5d:42:98:e4:3a:89:4a:bf:5d:9d:15:
cc:47:dd:56:ff:6d:11:74:22:d8:76:8d:55:fc:d2:67:f9:b5:
14:96:d8:89:e5:59:df:32:ea:13:3e:5d:e1:11:d1:e6:2c:26:
f0:38:a0:05:f3:40:a4:ee:b1:fc:ad:dd:32:a9:5e:29:e2:e3:
51:0b:3a:62:53:f7:9f:05:78:74:2c:8f:e5:8a:ee:eb:c2:ce:
f3:a0:4b:51:2e:c1:ec:d8:e7:93:73:84:ad:a5:2f:62:21:71:
a4:45:b0:3a:24:dd:d5:dc:ec:af:b1:22:41:7b:af:1b:83:67:
ff:06:b4:b1:7a:de:c1:53:f7:52:66:d1:9f:b2:70:2d:7a:3c:
71:e1:3d:18:fb:21:c7:6f:e8:40:af:5a:df:ad:07:14:30:99:
7f:58:ae:e2:f9:1f:25:d9:de:0f:a5:3c:d1:dd:71:e8:15:86:
ec:f7:83:44:f8:e3:9f:85:7f:6a:51:93:6c:06:4b:b0:28:ba:
09:60:71:83:f4:be:df:50:37:85:52:f9:6c:0f:14:c3:3a:a4:
2b:d9:61:24:1f:4f:d5:13:3c:dc:21:84:90:a8:c2:71:9b:fb:
a4:7c:2d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:12 2026 by rpki-client