Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
File: DeJyDFfbAnYQyCHIQEexELw23cM.mft (raw, json)
Hash identifier: 24DnqmnVdLYayjTOW28c/ecdhrv8wuxqUoJd34SsX8g=
Subject key identifier: 29:47:8D:01:A6:60:CA:44:E6:9D:90:13:1E:BF:A8:FE:6F:86:67:F9
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 019D9D0851E5813849F8A26AE7E991C41DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
Manifest number: 1821
Signing time: Fri 17 Apr 2026 20:01:01 +0000
Manifest this update: Fri 17 Apr 2026 20:01:01 +0000
Manifest next update: Sat 18 Apr 2026 20:01:01 +0000
Files and hashes: 1: DeJyDFfbAnYQyCHIQEexELw23cM.crl (hash: AjLtc+ToH7WVeI72fDCJ228xA2h1G7hjcy963A4Ko6U=)
2: P36uHuPS5_1ZcbFBd2BK-dl_TiA.roa (hash: U1J0vNwFsA81czhw4TBsP5/VLrBO35KlQLKDFzPg3rg=)
3: fGpklCDH_wyaIOJ-mpwmbhVEyVM.roa (hash: 55kvoIa9qkI1hdvmgneIAy4TGhe1IxvQIHXZfjKMKEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:51:e5:81:38:49:f8:a2:6a:e7:e9:91:c4:1d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Apr 17 20:01:01 2026 GMT
Not After : Apr 18 20:01:01 2026 GMT
Subject: CN=29478d01a660ca44e69d90131ebfa8fe6f8667f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4b:ee:2e:71:65:4f:f4:75:4e:59:f2:28:25:
5c:81:4b:eb:6f:5a:03:e7:2e:a2:b9:d9:37:95:36:
2a:d0:01:d0:ce:a0:2e:3b:4a:69:6e:10:bf:28:9d:
64:46:7d:43:b9:55:c1:bd:70:1c:ee:5f:da:78:60:
ae:ef:0b:54:e7:c8:49:97:61:f1:a8:86:bb:89:79:
24:47:15:3c:23:ea:11:5b:ef:0f:55:e8:3d:70:42:
6c:85:ac:e1:27:39:aa:9f:b0:99:31:96:01:5f:fd:
57:9a:aa:1c:1f:11:3e:1b:6c:7a:68:5b:89:3b:a6:
b0:8e:f8:ff:0c:74:89:ea:15:95:4a:21:94:59:d7:
b4:7b:d8:0a:a2:35:63:fe:ed:32:1d:ee:4d:1a:51:
d0:12:4a:92:34:fc:d5:3d:1d:8a:a2:3c:be:4a:8a:
50:13:3b:64:fb:33:1e:03:2c:c9:f2:45:7e:5f:79:
e8:27:4f:91:28:bd:ac:c8:32:54:42:b0:1f:d6:2c:
52:0a:80:e6:0d:55:37:cc:d8:f2:71:f8:bf:b0:55:
4c:8a:2a:81:e4:a7:af:ed:fa:c7:17:d3:a2:a2:95:
05:64:38:2c:8c:90:37:9a:66:85:32:da:20:fb:f2:
b0:b0:d1:a5:33:04:4f:f8:aa:a7:85:bd:fd:ca:81:
b1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:47:8D:01:A6:60:CA:44:E6:9D:90:13:1E:BF:A8:FE:6F:86:67:F9
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:16:d3:6b:b7:e4:ac:be:f0:d4:eb:30:b9:6c:dd:44:0d:0f:
86:6d:e5:25:a0:67:a0:02:9f:8e:83:9c:61:f3:68:8d:6d:ff:
9a:4f:15:2f:f4:af:0c:5e:bb:ad:bd:ec:19:d8:eb:18:7e:2a:
12:5d:ef:b4:7d:3b:89:6c:a6:10:ac:76:ad:7e:b9:c9:cf:f4:
42:63:39:2e:16:10:91:e8:c1:b0:88:0b:a3:be:30:2c:e5:02:
0c:68:92:55:d5:68:3d:4d:a1:d2:19:2a:5e:63:4a:b7:d1:b0:
b9:51:62:3b:36:31:f3:6e:14:b4:76:ec:f9:cf:51:06:e6:37:
e3:2b:00:d6:c9:99:53:23:12:88:6b:e6:bf:76:33:df:1d:13:
64:20:74:49:26:22:c8:68:53:8c:2a:12:bc:50:48:d0:26:01:
0e:0a:84:79:b5:ab:6d:1d:be:e3:31:e2:bb:a2:32:9f:8c:4e:
eb:59:d5:e8:fa:41:88:a4:36:39:39:99:62:09:4c:17:23:2f:
83:06:b9:a2:94:b9:d3:93:31:3f:04:09:d2:16:16:07:10:65:
cd:a1:95:ca:74:4f:5f:9c:dd:18:4d:56:16:a2:54:cc:d1:83:
77:bb:f4:6c:f4:ec:82:90:e1:18:5e:f6:a8:e9:a4:3a:5b:58:
6f:e2:c2:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dCFHlgThJ+KJq5+mRxB33MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZTI3MjBjNTdkYjAyNzYxMGM4MjFjODQwNDdiMTEwYmMz
NmRkYzMwHhcNMjYwNDE3MjAwMTAxWhcNMjYwNDE4MjAwMTAxWjAzMTEwLwYDVQQD
EygyOTQ3OGQwMWE2NjBjYTQ0ZTY5ZDkwMTMxZWJmYThmZTZmODY2N2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kvuLnFlT/R1TlnyKCVcgUvrb1oD
5y6iudk3lTYq0AHQzqAuO0ppbhC/KJ1kRn1DuVXBvXAc7l/aeGCu7wtU58hJl2Hx
qIa7iXkkRxU8I+oRW+8PVeg9cEJshazhJzmqn7CZMZYBX/1XmqocHxE+G2x6aFuJ
O6awjvj/DHSJ6hWVSiGUWde0e9gKojVj/u0yHe5NGlHQEkqSNPzVPR2Kojy+SopQ
Eztk+zMeAyzJ8kV+X3noJ0+RKL2syDJUQrAf1ixSCoDmDVU3zNjycfi/sFVMiiqB
5Kev7frHF9OiopUFZDgsjJA3mmaFMtog+/KwsNGlMwRP+Kqnhb39yoGxIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClHjQGmYMpE5p2QEx6/qP5vhmf5MB8GA1UdIwQY
MBaAFA3icgxX2wJ2EMghyEBHsRC8Nt3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGVKeURGZmJBbllReUNISVFFZXhFTHcyM2NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jNWE1MzAtMTMwYi00YTYyLTk4MjAt
NjMxMGJmNjMwNTFmLzEvRGVKeURGZmJBbllReUNISVFFZXhFTHcyM2NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9jNWE1MzAtMTMwYi00YTYyLTk4MjAtNjMxMGJmNjMwNTFm
LzEvRGVKeURGZmJBbllReUNISVFFZXhFTHcyM2NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRbTa7fk
rL7w1OswuWzdRA0Phm3lJaBnoAKfjoOcYfNojW3/mk8VL/SvDF67rb3sGdjrGH4q
El3vtH07iWymEKx2rX65yc/0QmM5LhYQkejBsIgLo74wLOUCDGiSVdVoPU2h0hkq
XmNKt9GwuVFiOzYx824UtHbs+c9RBuY34ysA1smZUyMSiGvmv3Yz3x0TZCB0SSYi
yGhTjCoSvFBI0CYBDgqEebWrbR2+4zHiu6Iyn4xO61nV6PpBiKQ2OTmZYglMFyMv
gwa5opS505MxPwQJ0hYWBxBlzaGVynRPX5zdGE1WFqJUzNGDd7v0bPTsgpDhGF72
qOmkOltYb+LCkw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:03:15 2026 by rpki-client