Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
File: DeJyDFfbAnYQyCHIQEexELw23cM.mft (raw, json)
Hash identifier: 2SAfZ9ElzPRA86NbPIhA2bZ4x565NhTWVxw9dX7QlsA=
Subject key identifier: 3F:EB:36:53:B9:B8:C2:DA:40:55:0F:33:CE:48:55:E1:D3:89:E1:84
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 019F178C5E3D5C4C9C9D926F06BBD18FE94D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
Manifest number: 18E5
Signing time: Tue 30 Jun 2026 08:01:42 +0000
Manifest this update: Tue 30 Jun 2026 08:01:42 +0000
Manifest next update: Wed 01 Jul 2026 08:01:42 +0000
Files and hashes: 1: DeJyDFfbAnYQyCHIQEexELw23cM.crl (hash: 4UHJXSAwtyoskfM2Z9zWKgREUQDvHD3Lg2ZAwFA+unU=)
2: P36uHuPS5_1ZcbFBd2BK-dl_TiA.roa (hash: U1J0vNwFsA81czhw4TBsP5/VLrBO35KlQLKDFzPg3rg=)
3: fGpklCDH_wyaIOJ-mpwmbhVEyVM.roa (hash: 55kvoIa9qkI1hdvmgneIAy4TGhe1IxvQIHXZfjKMKEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8c:5e:3d:5c:4c:9c:9d:92:6f:06:bb:d1:8f:e9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Jun 30 08:01:42 2026 GMT
Not After : Jul 1 08:01:42 2026 GMT
Subject: CN=3feb3653b9b8c2da40550f33ce4855e1d389e184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:8d:60:1b:3c:39:7e:15:4f:15:27:03:42:
77:04:9c:b3:9c:6e:ee:6d:15:ff:62:07:22:e2:a6:
62:e8:5e:2e:4b:44:64:13:b5:78:37:c3:44:e1:c5:
f8:e1:70:fc:7d:59:7e:0c:ae:ab:d7:e4:e4:4f:aa:
43:a8:fe:59:83:1c:f3:c0:58:28:40:88:af:25:31:
49:01:52:cb:ea:c6:d2:e8:33:81:0b:de:66:16:54:
af:6d:61:53:ba:db:39:72:d6:79:ad:7e:ba:53:e9:
ba:65:bf:62:04:71:3a:67:89:19:b2:af:78:a9:ac:
9d:3d:a2:0b:39:43:84:27:d9:54:da:33:33:e4:f5:
ee:2f:d4:0b:b7:3a:f2:10:45:f0:63:41:59:b7:e1:
1a:f1:84:fb:fb:d9:8e:a0:18:95:06:f1:fc:c9:87:
65:6c:c5:34:ab:60:e4:f4:7d:1b:3c:4b:f5:2b:8f:
8d:bc:5a:a8:2e:a2:a5:f1:f5:cc:3a:65:c1:70:cc:
0b:62:d2:15:7e:0e:4d:6d:49:8e:16:fd:e5:24:59:
5d:c4:e0:27:3e:e9:50:a9:66:e0:cd:40:c4:7e:a8:
90:9b:3d:f7:10:61:e7:f6:34:7a:fc:1a:49:2c:15:
67:be:c4:05:c1:56:58:dd:b8:cd:61:e4:c7:6f:d2:
d9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EB:36:53:B9:B8:C2:DA:40:55:0F:33:CE:48:55:E1:D3:89:E1:84
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ee:ff:bd:63:b2:62:0b:0e:06:3d:81:5a:72:89:25:59:84:
3b:d6:5a:47:6a:ec:a3:45:eb:d1:bf:60:aa:34:09:a7:33:70:
e4:69:3a:55:9f:38:3d:e7:69:50:58:cb:7c:ff:da:12:63:e2:
a7:ce:8c:21:3c:c8:eb:1f:31:a3:2c:07:e2:3e:ad:51:f1:8c:
dc:42:b3:a7:3a:cb:1e:ad:ad:28:62:99:01:2b:f5:05:bb:0a:
03:13:c2:75:f0:30:1f:99:3e:f3:59:32:c6:c7:c0:fd:65:f8:
86:44:a8:06:3e:be:40:34:06:64:aa:08:e3:97:ad:7c:ad:88:
86:23:27:19:59:29:31:52:dd:e8:c1:a1:a4:b0:a9:e1:91:1e:
28:2b:b2:d2:7c:3e:36:65:74:dc:03:37:30:f3:cf:9f:6c:f8:
28:8d:99:e0:a5:9d:53:07:7a:12:45:bb:c9:72:1e:c2:0e:11:
34:ba:05:6f:6d:46:da:cb:fa:02:b9:42:8e:16:63:e3:f1:4e:
a5:3d:bc:9d:94:f3:b3:e6:d9:80:e2:6e:01:3b:b6:ce:3a:84:
a8:10:db:2f:b1:f6:74:e5:48:de:d8:c3:50:7b:0e:d2:65:48:
9b:62:c5:0b:10:6a:2e:59:cc:1a:c9:b9:c0:49:04:95:83:8f:
d3:43:e3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:10 2026 by rpki-client