Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
File: DefybbQ61DIFvrBn_Qqz4wAnhl0.mft (raw, json)
Hash identifier: f2+ekm1tbXuE8wBN14uvGrut9JoTo2+wABlHLU71JBM=
Subject key identifier: 18:03:28:EF:9E:F9:5C:BA:D2:B7:ED:56:A4:77:11:17:30:7A:F5:10
Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
Certificate issuer: /CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Certificate serial: 019D2816CE6BBBD11D84BBE12A33D5B8D36E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
Manifest number: 15B5
Signing time: Thu 26 Mar 2026 03:01:16 +0000
Manifest this update: Thu 26 Mar 2026 03:01:16 +0000
Manifest next update: Fri 27 Mar 2026 03:01:16 +0000
Files and hashes: 1: DefybbQ61DIFvrBn_Qqz4wAnhl0.crl (hash: 4GemmVib9qkBwn5n4ZN0NSP06MyOeED8uLJlIANWasY=)
2: g323boBVOxyFFRDtn1suxBzGHN0.roa (hash: eyZdCahVj22vnipsJsBb9tIVCdJEj0KFcdD786lVupg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ce:6b:bb:d1:1d:84:bb:e1:2a:33:d5:b8:d3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Validity
Not Before: Mar 26 03:01:16 2026 GMT
Not After : Mar 27 03:01:16 2026 GMT
Subject: CN=180328ef9ef95cbad2b7ed56a4771117307af510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:aa:b9:c9:1a:f9:99:6b:57:74:da:86:aa:
9e:67:bc:48:ed:84:d4:56:be:17:ac:bf:e9:d8:ac:
94:7e:4c:75:47:c1:60:10:eb:10:87:a7:92:2f:fb:
b1:b3:90:f6:73:79:d6:15:4b:49:0a:41:d9:d9:5f:
5e:25:92:5f:7d:12:d8:47:55:a9:eb:d4:60:ec:2b:
7b:ba:ef:b6:97:4c:8c:ad:0e:0c:f1:0a:53:0c:e9:
cb:82:f3:da:01:f2:b7:e7:89:fb:6b:a5:93:c5:52:
9b:3d:10:14:9e:61:d3:2c:8e:a5:d1:62:04:21:df:
94:3d:40:df:ec:4c:96:bf:41:41:d2:05:62:b2:90:
56:d5:65:7b:f4:b6:96:3b:89:42:bf:de:e0:31:eb:
3c:bf:f3:c2:76:1d:e8:47:8e:a8:15:af:38:90:1f:
2a:a3:a8:2f:c5:bd:cd:f7:4d:c3:65:52:8a:95:fa:
04:8f:a3:ee:55:5c:b4:b0:b8:9f:87:0e:b8:7b:91:
82:f7:43:2b:6f:9b:cb:5b:81:4d:ae:5f:27:61:97:
0c:1d:ae:75:2b:89:ce:ea:2a:71:55:41:18:6e:3b:
7c:0e:ed:54:fc:ff:d7:97:4d:c4:54:41:26:5b:62:
73:6d:a7:31:3a:c4:0b:6f:e5:22:87:99:39:94:8d:
57:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:03:28:EF:9E:F9:5C:BA:D2:B7:ED:56:A4:77:11:17:30:7A:F5:10
X509v3 Authority Key Identifier:
keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f8:6c:20:97:3a:8d:55:b3:32:bc:ae:bb:d6:a1:0a:bf:49:
f2:ab:d1:da:7a:15:e1:05:c0:9d:4e:91:eb:23:e3:14:6d:9c:
e3:b6:ab:35:80:f3:47:90:88:76:b1:88:35:b3:c1:27:45:04:
61:fb:1d:ce:29:98:a3:be:ae:ba:8e:25:6b:d6:96:9d:a7:7a:
3a:97:db:55:64:3d:ba:0a:b0:4a:8b:19:29:a3:03:23:5f:c8:
92:ce:8f:21:d9:44:f1:6f:1a:3d:f9:19:f4:95:8d:0d:5d:9d:
a9:11:a0:a5:30:c6:fc:57:0f:2c:b9:43:6b:d1:6a:6d:0b:3d:
b1:af:9d:cb:a3:32:e7:55:e0:39:cb:4a:43:e9:c8:a9:92:99:
32:d4:9e:55:09:c4:a3:04:bd:fc:bd:e3:c4:ff:f7:38:c7:7e:
a8:ac:f1:b0:94:74:b9:e5:fe:65:88:24:83:4d:e1:3e:37:21:
41:c0:90:18:f8:76:1f:c9:91:3c:bb:68:94:48:76:95:65:47:
24:93:65:9e:83:2a:62:f6:b7:a3:f8:30:84:d7:a1:0c:1e:9c:
9d:13:27:fe:c4:5d:7a:7e:04:47:ec:6b:5c:9f:e6:5b:2f:97:
5b:2b:63:87:25:d5:df:dc:3b:5f:43:04:c0:5e:4e:15:c7:99:
b4:f5:33:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:25 2026 by rpki-client