Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
File: DefybbQ61DIFvrBn_Qqz4wAnhl0.mft (raw, json)
Hash identifier: fLkEbg3l6ftOcwv5nUlJdDsu5OY+LNH/EX0qwSj8vEo=
Subject key identifier: 34:6B:B8:EB:4D:57:2A:02:09:A7:0C:E1:FA:EB:B1:F0:3D:2B:B6:8D
Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
Certificate issuer: /CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Certificate serial: 01A13ECB9CF2738EF4B7F8E53ED8624B750E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
Manifest number: 17D3
Signing time: Thu 15 Oct 2026 09:01:33 +0000
Manifest this update: Thu 15 Oct 2026 09:01:33 +0000
Manifest next update: Fri 16 Oct 2026 09:01:33 +0000
Files and hashes: 1: DefybbQ61DIFvrBn_Qqz4wAnhl0.crl (hash: hsjtk0rDaABKS76Yru81ya6R7k4XsUz8k5LZJXN3PAU=)
2: g323boBVOxyFFRDtn1suxBzGHN0.roa (hash: eyZdCahVj22vnipsJsBb9tIVCdJEj0KFcdD786lVupg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 09:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:9c:f2:73:8e:f4:b7:f8:e5:3e:d8:62:4b:75:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Validity
Not Before: Oct 15 09:01:33 2026 GMT
Not After : Oct 16 09:01:33 2026 GMT
Subject: CN=346bb8eb4d572a0209a70ce1faebb1f03d2bb68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:c9:a6:d7:e3:13:32:4c:7e:d1:39:98:db:
fa:f9:be:fe:6d:92:a9:59:cd:5d:48:68:4d:f1:ad:
f0:07:7d:b4:31:73:0e:6a:a0:23:a6:52:99:ad:aa:
f1:81:9a:50:91:78:a7:2a:ce:1f:fc:31:42:dd:90:
fd:a1:b7:ab:4c:2d:a7:b8:5e:2a:8c:69:60:e7:17:
11:d1:e6:84:ff:5c:94:25:49:d9:a1:a2:d9:a9:30:
0c:e5:f5:ad:86:51:f2:3c:63:b6:d2:37:2e:e0:8c:
d8:0b:38:af:77:68:0e:c2:cc:f7:17:de:86:15:f0:
1f:74:bc:82:70:1e:45:a6:d6:2c:89:1f:07:53:b4:
41:85:e5:7f:cd:0e:c4:ff:b4:7b:f3:f8:0c:e4:cc:
70:f6:42:c4:3f:25:47:b8:65:aa:a1:db:c6:57:70:
a3:48:dc:ff:27:10:c2:3d:53:30:cd:97:a6:41:63:
74:e9:37:e8:26:3e:42:d7:a4:99:3b:87:ab:27:95:
61:d2:7d:c4:3a:c7:f8:9a:45:09:66:8c:61:25:ca:
d6:99:46:f3:49:9f:b9:2d:2a:e8:b2:22:79:51:81:
55:51:d2:49:5e:df:80:14:d0:8a:2b:ee:6a:b9:0f:
25:4b:3b:96:65:14:e7:2c:a7:89:ce:2a:60:0e:a1:
d2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6B:B8:EB:4D:57:2A:02:09:A7:0C:E1:FA:EB:B1:F0:3D:2B:B6:8D
X509v3 Authority Key Identifier:
keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7d:5a:a7:6a:e4:1e:b0:23:80:91:fc:de:bb:90:78:29:78:
da:57:5b:4a:c0:ba:db:f3:6a:2d:5b:1d:af:7c:35:c2:21:9b:
80:b4:44:2a:60:67:cb:9b:52:e0:6f:80:d3:e2:76:74:24:e1:
8e:bb:42:19:72:e5:1a:08:1a:56:b7:df:81:68:de:ef:51:d0:
63:19:0b:67:77:37:d0:a1:d5:70:4a:58:73:0c:9b:45:11:30:
69:cc:2b:9f:9c:b5:1f:4e:a6:4b:f7:92:62:2d:36:b9:41:4f:
a3:4c:79:1c:3b:ab:14:46:75:dd:22:6e:a2:c8:c4:ce:51:1b:
36:4d:f7:5f:b7:fd:06:f5:a7:6c:12:34:71:63:07:6d:ba:df:
fe:c8:c4:b3:10:4d:dc:c5:b6:9e:a1:21:20:82:62:ab:97:37:
48:78:26:59:9d:c7:a0:ce:49:32:bb:2b:6a:6d:87:7f:d3:07:
86:aa:12:5c:c5:a2:f3:2a:6e:fd:c1:2b:92:a0:e2:54:12:31:
05:09:c1:87:63:b8:3a:76:fb:6c:88:17:f2:f3:60:a2:ce:b1:
b8:3b:08:73:d7:9e:13:5d:7b:df:91:9d:1f:16:75:41:52:5d:
14:e1:31:52:1c:f3:d2:bd:93:6d:53:8c:96:37:c6:23:3b:f8:
06:f8:39:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:05:57 2026 by rpki-client