Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
File: DeJyDFfbAnYQyCHIQEexELw23cM.mft (raw, json)
Hash identifier: lM81+AXiUZWNF9c3tZ+WMcVIgMurDePM9pukN1s0JDs=
Subject key identifier: 20:6C:56:19:27:C7:44:B6:2A:EB:D4:39:39:E3:11:F3:58:32:CA:F8
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 019D389BDAF43C015B13FA9513B3E96CD0E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
Manifest number: 17ED
Signing time: Sun 29 Mar 2026 08:00:31 +0000
Manifest this update: Sun 29 Mar 2026 08:00:31 +0000
Manifest next update: Mon 30 Mar 2026 08:00:31 +0000
Files and hashes: 1: DeJyDFfbAnYQyCHIQEexELw23cM.crl (hash: IrF/Z7wzsqt0Nis8CxvTT+TqlISeqMzpcSSa76KrAvo=)
2: P36uHuPS5_1ZcbFBd2BK-dl_TiA.roa (hash: U1J0vNwFsA81czhw4TBsP5/VLrBO35KlQLKDFzPg3rg=)
3: fGpklCDH_wyaIOJ-mpwmbhVEyVM.roa (hash: 55kvoIa9qkI1hdvmgneIAy4TGhe1IxvQIHXZfjKMKEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:da:f4:3c:01:5b:13:fa:95:13:b3:e9:6c:d0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Mar 29 08:00:31 2026 GMT
Not After : Mar 30 08:00:31 2026 GMT
Subject: CN=206c561927c744b62aebd43939e311f35832caf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:15:4f:9c:9c:e8:a0:f7:b2:67:9f:6a:e7:
98:c4:59:8c:ab:3f:98:9c:25:20:d5:a2:ad:fb:38:
04:42:f2:e7:60:9a:71:5b:70:89:01:b6:a0:76:e8:
f8:12:ca:ca:4b:6e:6c:45:85:12:82:c7:63:26:b7:
aa:28:2e:2a:b5:56:47:ad:9c:3e:c9:50:ad:51:b3:
74:29:2e:a8:25:40:a4:d4:4a:41:5e:4b:fa:d0:86:
a9:e0:ec:e6:b9:ad:02:cc:a9:af:67:80:6a:cb:31:
2a:30:70:23:fb:9a:fa:e2:44:df:58:19:59:a0:49:
85:3a:e3:4e:64:5e:3e:72:d8:43:3d:ea:e4:e4:1d:
f7:aa:fc:02:3e:50:59:7e:a0:9d:9b:c0:33:e1:b2:
54:78:49:ff:7a:fd:71:d7:68:55:a5:d6:94:89:1e:
61:4d:54:7a:78:8e:a7:83:ef:d0:da:55:b6:84:11:
b1:2c:43:d8:6f:f3:a4:b7:17:f3:d6:e6:3e:1f:b2:
96:f7:06:3a:28:01:16:8e:40:76:9d:c2:18:24:86:
5d:d2:48:41:f3:f4:43:45:03:a3:67:57:fc:05:a1:
d2:42:9a:4e:51:f2:db:7d:b9:13:f9:74:d4:9b:26:
95:bf:10:68:e4:88:8a:87:28:d2:11:55:05:86:2f:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6C:56:19:27:C7:44:B6:2A:EB:D4:39:39:E3:11:F3:58:32:CA:F8
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4e:d3:bb:ff:28:3b:59:7e:0c:a7:d2:46:81:da:01:ba:00:
d7:0f:77:fa:f2:21:4e:ef:32:d0:ec:1b:b2:c8:61:62:e0:58:
a8:52:c4:37:3c:2a:e2:bb:b9:d8:73:ec:02:23:4b:00:5d:54:
a9:7d:d4:e6:b7:8f:be:ca:35:71:c4:a1:d0:27:3e:dc:79:f2:
00:f5:e2:ab:c1:43:26:88:e7:80:a2:8f:b8:a4:dd:b1:a3:88:
0c:35:e3:63:4a:69:94:47:d1:8a:e1:dd:d2:ad:a6:9a:8a:08:
b2:ae:3c:dd:41:e0:40:56:0c:85:67:f9:fe:2c:c9:23:e8:ee:
c7:f9:12:0b:cb:65:3c:33:1d:f8:a0:ee:80:5c:cc:7e:79:da:
fe:8e:e0:98:40:8f:a6:69:c3:0a:05:79:6a:b2:cf:11:b8:fd:
b6:d3:f2:8c:ff:0f:ac:c9:52:86:96:b9:18:a9:11:73:0b:15:
b6:77:de:bf:25:e8:b2:9d:3b:cf:64:c9:07:8a:41:7f:51:96:
58:82:ff:17:78:bd:c2:bf:77:7b:61:e3:66:8b:69:02:58:f3:
db:be:1d:0b:ff:7f:8e:dd:bd:9c:81:e3:51:a4:4a:ed:83:e9:
63:16:bd:ce:c9:4c:57:6a:01:57:63:a9:34:b6:70:98:0b:64:
7b:92:da:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:11 2026 by rpki-client