Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
File: DETz4ku_xgSOX_pQw9zjZP_AErA.mft (raw, json)
Hash identifier: RsxbUPWmAjN2TU+om1xxwnO1q572fA26bICVTOQIc/E=
Subject key identifier: 00:A7:16:E5:51:AC:48:DF:D4:B0:C4:DB:8E:D4:30:36:92:ED:3F:E3
Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
Certificate issuer: /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Certificate serial: 019F916CA2938033E1972B0867F129DA180F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
Manifest number: 168D
Signing time: Fri 24 Jul 2026 00:00:43 +0000
Manifest this update: Fri 24 Jul 2026 00:00:43 +0000
Manifest next update: Sat 25 Jul 2026 00:00:43 +0000
Files and hashes: 1: DETz4ku_xgSOX_pQw9zjZP_AErA.crl (hash: tNbNFIAIEkjXWBwYyuQpTlgtdV6AgvRv0ghq3Gg2QmE=)
2: Ki_V1gbeMTHzzb2sAJkjbiTIB4k.roa (hash: G8coFslA7SGGsh7OBwFjSWY/mTtlNbU81EsuVTVQlk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:a2:93:80:33:e1:97:2b:08:67:f1:29:da:18:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Validity
Not Before: Jul 24 00:00:43 2026 GMT
Not After : Jul 25 00:00:43 2026 GMT
Subject: CN=00a716e551ac48dfd4b0c4db8ed4303692ed3fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0e:db:27:db:73:c8:0e:66:53:8d:73:f8:c7:
3c:a8:e5:8d:a2:6b:3a:38:46:dc:f3:7c:c3:78:96:
cf:f8:2c:6b:ff:2f:58:5e:11:08:3c:a3:65:00:af:
b4:b2:5d:ec:0e:14:9d:f5:fd:98:0c:98:77:92:7e:
be:b9:47:b2:be:bc:68:52:35:66:d7:36:a8:be:b5:
3a:f5:2a:c5:b3:4f:56:02:24:16:bc:71:35:d0:75:
cf:e5:16:1f:f5:90:ab:7a:d0:8b:0b:a3:53:36:76:
65:53:4d:54:32:03:75:e1:f2:5f:12:7c:83:bf:04:
17:60:3e:00:9e:d4:ac:18:00:2e:fa:70:86:06:fc:
ee:c3:41:6c:8a:9e:a6:4b:18:ea:d4:8d:ff:9e:7f:
56:61:22:ee:be:51:66:f0:3c:11:bf:de:fe:c2:bf:
7b:12:84:1a:d5:9d:d1:ee:c1:ad:bf:da:8a:74:2e:
5b:e7:ce:e6:9c:dd:2d:d1:40:77:12:16:fb:b3:15:
13:ca:f2:8d:b2:b7:cb:57:7c:9a:b1:fb:73:f4:0e:
bf:50:8e:38:ed:41:92:91:f3:57:8c:e5:6b:01:b4:
9d:a7:97:ed:49:da:f3:ec:2b:20:ca:11:22:16:43:
56:fb:88:6d:e9:70:cf:14:4b:cd:13:3a:ac:47:db:
60:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A7:16:E5:51:AC:48:DF:D4:B0:C4:DB:8E:D4:30:36:92:ED:3F:E3
X509v3 Authority Key Identifier:
keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:10:02:91:41:b6:0b:26:69:85:c9:b1:f7:b1:6a:8d:84:84:
1e:04:22:6a:b3:dc:00:03:09:62:32:3a:44:f2:7a:88:87:bc:
a5:6a:f1:d1:e9:ff:95:0e:c0:e6:be:4f:6c:e7:7d:bc:3f:6b:
f7:ed:19:ea:ce:3c:9a:84:11:00:00:28:4d:bc:74:34:51:d8:
08:9f:18:e5:99:6e:44:8b:91:58:77:cb:da:f8:18:44:b7:50:
14:69:c5:27:38:88:69:3a:78:05:a4:47:f3:1d:9e:cc:b8:92:
f9:af:75:dd:2b:52:22:62:d4:8a:ba:11:e6:de:eb:e3:01:68:
ec:73:b4:18:5b:56:1c:cb:05:0c:7b:d2:62:97:d8:e5:c6:15:
89:c0:b6:49:4a:49:dc:c1:2b:09:4c:5d:ce:ef:b1:9e:08:d4:
8a:2f:7a:23:4b:a4:f0:b3:82:e1:8e:51:d0:34:8a:14:c6:59:
e4:e7:66:53:f6:5e:24:a3:d2:58:eb:1b:68:63:84:d8:78:ae:
6a:46:1e:34:76:ca:2c:8e:8b:7a:a7:ee:de:e4:62:1d:11:5d:
99:7d:77:35:66:cc:7e:68:17:e1:e4:5b:d3:9a:3f:a9:1c:46:
e0:9b:13:e8:c8:f1:ea:39:a0:83:d6:f6:a9:d1:4d:d2:41:13:
c8:c5:22:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:40:20 2026 by rpki-client