Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
File: DETz4ku_xgSOX_pQw9zjZP_AErA.mft (raw, json)
Hash identifier: BHFzlRCLcyZVy70bNRB8AU68RLA+jH2g1UgWIL7+6f0=
Subject key identifier: DA:64:5D:65:0A:25:EF:79:60:59:72:8B:DB:C6:98:A1:18:EB:FC:15
Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
Certificate issuer: /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Certificate serial: 019D27722554DDFC684754AA9859DAEEB832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
Manifest number: 154D
Signing time: Thu 26 Mar 2026 00:01:24 +0000
Manifest this update: Thu 26 Mar 2026 00:01:24 +0000
Manifest next update: Fri 27 Mar 2026 00:01:24 +0000
Files and hashes: 1: DETz4ku_xgSOX_pQw9zjZP_AErA.crl (hash: sHo65nkhdtF0Oj8fd6NLUDbmFPndliC373v6Qqtf1IM=)
2: Ki_V1gbeMTHzzb2sAJkjbiTIB4k.roa (hash: G8coFslA7SGGsh7OBwFjSWY/mTtlNbU81EsuVTVQlk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:25:54:dd:fc:68:47:54:aa:98:59:da:ee:b8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Validity
Not Before: Mar 26 00:01:24 2026 GMT
Not After : Mar 27 00:01:24 2026 GMT
Subject: CN=da645d650a25ef796059728bdbc698a118ebfc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:99:90:fa:a0:f7:f7:03:9e:73:3e:3f:8e:5b:
0f:49:d3:8c:5c:60:e2:a5:f8:9d:b2:89:0d:9b:b0:
a8:d5:37:a6:cc:7a:75:2b:ff:0a:36:34:36:87:c0:
2f:ed:cd:9e:88:5d:85:38:a2:07:92:bf:ac:ee:1c:
16:88:07:04:40:af:c0:94:58:f7:d1:b0:d2:33:f5:
9a:f4:13:2f:d7:b7:d0:63:72:52:91:4a:eb:5c:7a:
81:f8:bd:19:15:c9:ca:03:6f:56:47:4c:2b:05:f7:
b1:e9:b2:f2:19:1f:93:bb:86:08:39:e4:17:32:01:
c0:76:c8:70:5e:76:0d:1f:1d:cb:6d:83:70:03:06:
4d:61:31:41:68:58:60:40:d0:92:74:37:95:64:0b:
32:50:7f:8d:8b:bf:4b:b3:1b:16:de:44:7f:79:99:
00:a0:fd:ff:fc:bb:f5:f3:4a:1e:dc:bf:79:b6:ce:
c5:d8:a3:bf:40:76:d9:5d:e9:78:c1:27:bd:22:0c:
57:95:81:47:6f:d7:b2:96:1a:ff:72:1f:83:8e:8a:
80:52:d6:24:08:3f:fd:0f:86:b5:68:8c:d7:17:13:
85:4c:aa:55:86:38:cc:b0:af:58:b1:d7:da:f6:d6:
37:3b:75:de:fa:ac:3c:7e:e9:a4:99:4c:ac:99:63:
7a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:64:5D:65:0A:25:EF:79:60:59:72:8B:DB:C6:98:A1:18:EB:FC:15
X509v3 Authority Key Identifier:
keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:db:42:b3:9d:5e:69:b8:7b:8e:50:11:b3:e2:36:67:9f:22:
bc:dc:04:a6:2e:10:c8:79:21:03:cc:9f:61:2c:3a:0b:82:6e:
5c:d9:47:d4:e4:f7:ed:e2:55:97:5d:62:06:7e:23:07:ed:e6:
ea:54:57:4f:45:3e:00:e1:76:a1:f0:3f:9f:37:18:c6:fa:3b:
be:df:bd:bc:b2:01:77:a4:cb:9c:fa:98:0b:18:51:50:0e:15:
c9:e0:00:c0:2d:78:e1:c0:0c:8d:d6:99:2b:6d:aa:f6:69:6f:
17:64:75:e6:19:66:67:d4:94:df:f0:19:60:82:ce:9c:e0:ca:
58:f5:19:2d:20:7f:09:c7:41:8f:26:e7:02:33:ee:88:91:33:
cc:e8:08:c7:65:93:eb:94:9a:8e:7f:0e:39:e9:75:90:6f:4b:
81:b9:b8:b8:54:fe:62:c3:97:a8:55:d4:b9:3e:08:48:80:9c:
d4:60:a3:74:6e:83:74:c1:bb:6f:31:31:b8:6e:fe:a3:2b:42:
c3:ec:5a:ca:14:2a:2f:47:7e:4c:6e:83:9c:ce:da:cd:e1:f9:
1e:de:c0:03:93:ed:4d:77:4e:8a:8a:64:09:cb:b8:8b:78:5b:
c5:57:2e:60:fe:f1:03:73:a8:0f:bd:71:a8:73:87:d0:04:60:
c4:47:39:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:22:39 2026 by rpki-client