Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
File: DibUX9VpIdNGnRnEdXLydfnVUkI.mft (raw, json)
Hash identifier: Vt1yTlpYT0ErDl9JmExyYgKY8lucMSwoY3KernLa3DY=
Subject key identifier: D5:24:2D:E4:C9:FB:EC:6C:E2:27:88:49:DE:C7:39:87:80:1B:F6:83
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Certificate issuer: /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial: 019D28BB839D7F59621BBA1340811E1BAFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
Manifest number: 0AD5
Signing time: Thu 26 Mar 2026 06:01:10 +0000
Manifest this update: Thu 26 Mar 2026 06:01:10 +0000
Manifest next update: Fri 27 Mar 2026 06:01:10 +0000
Files and hashes: 1: DibUX9VpIdNGnRnEdXLydfnVUkI.crl (hash: sHnINRNzPdCgPEoxTlD7P1QqnLntdzqqHuEt4jRPpXg=)
2: E5N49IFOZzcUudGH8Hfr0F0ywvk.roa (hash: qu/cDpuHW9hVmNW832+M9NPLYicyAqIzhTV6hHRmh3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:83:9d:7f:59:62:1b:ba:13:40:81:1e:1b:af:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
Validity
Not Before: Mar 26 06:01:10 2026 GMT
Not After : Mar 27 06:01:10 2026 GMT
Subject: CN=d5242de4c9fbec6ce2278849dec73987801bf683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4f:7f:58:ee:c7:b0:71:7f:b3:cc:82:bb:d6:
00:54:b1:32:f0:01:04:76:cf:5e:bb:9f:ba:78:56:
f3:43:2a:83:f8:8b:fc:7a:14:68:30:50:23:f7:e9:
a8:74:84:3e:d3:1a:d5:4c:31:45:62:4d:7a:32:f0:
e2:db:4d:d0:87:1a:a3:ba:07:aa:1c:7c:61:ae:e4:
5b:01:8e:5a:9c:22:3c:70:2d:1a:97:3e:22:a0:fb:
9d:8c:06:e7:0c:b7:98:de:3f:da:20:6d:e0:49:62:
9f:1b:e5:c1:be:1a:16:ee:88:28:d0:f2:97:b0:8a:
83:c1:15:f3:f8:e0:a9:18:2b:50:aa:9d:bf:62:06:
ae:07:2f:29:50:4c:5f:45:bc:99:3f:90:3c:16:b7:
be:08:65:0f:25:48:c0:a3:5b:64:8d:ac:65:01:ba:
87:a0:05:0c:78:3a:90:3c:4d:75:dd:30:28:ca:c3:
12:ca:e2:a8:37:cf:dc:cd:64:34:c9:0d:e1:38:90:
dd:59:2a:5a:c7:30:d7:c0:42:04:a8:9c:b2:60:f6:
b9:b2:b9:f1:89:42:b9:f8:8b:d8:28:ee:8e:63:d0:
7c:8f:53:d6:e3:ad:d6:6c:fc:50:14:4d:c1:da:7c:
12:7a:9a:da:d4:a2:b0:4f:9d:88:53:0f:75:35:59:
7a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:24:2D:E4:C9:FB:EC:6C:E2:27:88:49:DE:C7:39:87:80:1B:F6:83
X509v3 Authority Key Identifier:
keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bf:b8:7f:12:e3:cf:1e:c4:4d:cd:6c:3c:51:af:87:e7:be:
7d:9e:0e:cf:db:73:6e:c0:60:5b:08:b4:1e:f2:5e:fe:70:0f:
0a:db:67:ea:f4:a7:08:2f:07:91:63:10:79:e4:10:6d:f2:6a:
0f:8f:be:c3:5f:c7:b8:eb:41:40:51:14:51:e5:e3:76:ec:c2:
d7:9e:f9:f9:ce:40:55:0a:53:a3:0d:55:3e:53:91:af:8d:19:
e6:e4:06:76:40:c4:56:32:18:93:29:d0:82:f2:c4:3b:26:9f:
11:29:f3:4c:ba:7b:db:ae:75:3d:05:99:0c:3f:1b:1e:6b:8b:
45:1c:13:75:ab:ee:bd:ee:26:a9:0e:dd:a5:0f:75:5a:17:d1:
4d:cb:e6:2d:94:4d:6e:49:d5:ca:65:08:b2:6a:01:66:b1:f6:
b7:b3:95:9c:68:9c:a5:19:3d:f1:ee:9f:79:53:4f:00:83:dc:
0f:bc:1d:25:42:fa:b9:65:51:15:21:e7:3a:a1:81:64:54:d5:
4f:45:d9:b9:17:8b:37:83:47:7e:de:53:d0:2f:cd:0f:50:c1:
76:38:da:b6:06:2d:92:83:b8:00:8b:f0:52:22:83:fe:ac:2d:
11:0e:6b:c5:16:a2:5e:a3:8c:f8:f2:e1:6e:d2:9c:c8:50:f0:
ad:d4:dc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:12 2026 by rpki-client