
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
File: DefybbQ61DIFvrBn_Qqz4wAnhl0.mft (raw, json)
Hash identifier: Yl82z1Tm0qay//jMZbIa2PYUizj/C9N9O2P18J+pYYE=
Subject key identifier: 6D:C7:57:1C:29:66:54:F9:CB:A9:84:6E:E2:17:55:2B:28:0F:9B:02
Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
Certificate issuer: /CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Certificate serial: 019CAC7DC7BAC9F1B74B9A07128E6641C1A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
Manifest number: 1575
Signing time: Mon 02 Mar 2026 03:00:49 +0000
Manifest this update: Mon 02 Mar 2026 03:00:49 +0000
Manifest next update: Tue 03 Mar 2026 03:00:49 +0000
Files and hashes: 1: DefybbQ61DIFvrBn_Qqz4wAnhl0.crl (hash: YMSWLH1z1oB/oVicponbYy22CFua46qFyzdCiMya7LQ=)
2: g323boBVOxyFFRDtn1suxBzGHN0.roa (hash: eyZdCahVj22vnipsJsBb9tIVCdJEj0KFcdD786lVupg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:c7:ba:c9:f1:b7:4b:9a:07:12:8e:66:41:c1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Validity
Not Before: Mar 2 03:00:49 2026 GMT
Not After : Mar 3 03:00:49 2026 GMT
Subject: CN=6dc7571c296654f9cba9846ee217552b280f9b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:c0:9b:6c:cf:2d:a8:73:65:dc:1f:7c:27:
8b:c0:37:af:8b:27:66:e7:53:d5:76:06:8e:f3:f8:
d8:0a:42:49:ed:97:48:ae:56:0a:32:0b:8a:6c:b0:
b8:8f:fa:24:e9:25:2b:ae:c2:d2:ba:6b:f8:38:98:
2a:d6:c7:2c:63:e9:e5:3c:8c:e9:a7:c6:d6:a1:b7:
36:0b:b7:e5:bb:7d:88:8a:c8:35:43:0d:bf:e8:c3:
4b:17:ca:5d:9d:b5:70:cf:e4:59:67:33:f6:dc:d4:
08:12:09:39:d7:f7:4e:1f:5d:aa:f7:2a:87:a2:46:
ef:ab:cc:e9:a1:c7:49:35:03:ba:5b:e1:d2:13:ac:
18:ef:ba:99:35:59:49:ff:ff:96:36:7e:4e:dd:96:
2a:00:54:92:fa:f6:46:7f:d1:77:af:51:ef:5c:dd:
5c:af:34:31:b5:54:1d:49:e3:63:61:53:ff:2a:38:
eb:a9:f3:98:e2:e3:fc:10:75:05:26:21:55:91:48:
a4:87:8e:5c:09:83:29:32:4d:05:5b:a5:ca:e9:e2:
22:2e:f0:3c:4c:a9:4c:29:9a:3c:ab:d9:5b:3d:2c:
11:e5:bb:0c:f4:a4:23:14:2c:39:3b:15:b2:08:22:
b8:06:1e:71:bf:f6:ef:c0:a9:78:f3:6c:51:f2:5b:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C7:57:1C:29:66:54:F9:CB:A9:84:6E:E2:17:55:2B:28:0F:9B:02
X509v3 Authority Key Identifier:
keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:35:5c:db:35:2a:fd:d3:91:ca:9b:bb:93:ca:e4:75:d2:5a:
cd:5d:8e:34:6c:9c:fc:84:af:13:49:83:cc:99:d8:60:29:8c:
48:3f:87:a3:83:cf:64:3c:d4:65:4c:1b:39:58:b6:1a:29:9b:
29:f7:5c:2e:66:1c:e7:ab:db:b6:c1:4c:d3:f8:9f:00:e6:40:
87:0e:a7:57:a4:af:94:6a:15:81:36:29:7d:1e:ee:62:81:60:
d0:68:a1:71:de:bf:48:a2:d9:41:59:dd:84:4e:70:2c:da:c3:
2c:8f:c9:94:e8:85:64:52:94:ba:e7:69:98:08:90:d6:19:7a:
ab:0d:7e:55:52:8a:2e:56:6d:24:a3:79:77:52:41:d3:60:af:
2f:55:57:ee:88:23:3c:70:f2:be:23:9b:dd:73:2a:d2:3f:73:
0d:70:d5:0c:27:d0:d3:d9:4d:cd:62:d9:87:0d:6f:5b:61:ab:
7e:b5:43:26:29:46:f3:b1:40:57:56:31:ac:77:d6:94:67:0f:
06:a9:27:05:68:fa:60:af:1d:2a:36:dd:0c:e9:e3:72:66:d8:
fa:59:ac:ea:ff:d2:fc:17:3c:bc:fa:06:9e:1d:93:01:4f:f6:
bb:ff:43:b7:11:9a:4b:20:f1:8d:02:00:1b:44:84:9a:89:e7:
cc:18:38:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:31 2026 by rpki-client