Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
File: DeJyDFfbAnYQyCHIQEexELw23cM.mft (raw, json)
Hash identifier: zYsJqlfIGFNloU0jyg46+BuoW0IFmHT09vlWLouhfVk=
Subject key identifier: 21:B5:CD:19:2D:36:9B:BD:2E:2A:C2:E6:FE:DF:33:3F:C8:9D:85:B7
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 019CAD90CBCC442DBE34976E5B635ED4977E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
Manifest number: 17A5
Signing time: Mon 02 Mar 2026 08:01:13 +0000
Manifest this update: Mon 02 Mar 2026 08:01:13 +0000
Manifest next update: Tue 03 Mar 2026 08:01:13 +0000
Files and hashes: 1: DeJyDFfbAnYQyCHIQEexELw23cM.crl (hash: kMlDhMB6KrrqDyOmEYlYDxNwa4pFINwati1JeSHnPNw=)
2: P36uHuPS5_1ZcbFBd2BK-dl_TiA.roa (hash: U1J0vNwFsA81czhw4TBsP5/VLrBO35KlQLKDFzPg3rg=)
3: fGpklCDH_wyaIOJ-mpwmbhVEyVM.roa (hash: 55kvoIa9qkI1hdvmgneIAy4TGhe1IxvQIHXZfjKMKEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:cb:cc:44:2d:be:34:97:6e:5b:63:5e:d4:97:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Mar 2 08:01:13 2026 GMT
Not After : Mar 3 08:01:13 2026 GMT
Subject: CN=21b5cd192d369bbd2e2ac2e6fedf333fc89d85b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e6:92:38:e2:31:61:d1:05:ee:7b:94:4a:b6:
a3:80:7d:a2:12:e3:48:58:61:0d:68:64:93:08:e0:
a5:97:fc:d7:20:14:52:23:a0:24:68:60:a4:b6:7b:
20:0d:19:77:f3:ef:1e:eb:f3:bf:ab:00:25:f0:1c:
44:0a:79:d5:fb:d1:5a:73:1b:20:46:7f:11:b4:42:
44:30:08:37:62:f7:f2:0d:36:3b:77:57:21:cd:97:
95:e3:59:23:3e:15:e0:b4:30:b9:b1:be:25:59:aa:
ea:6c:3e:52:bd:11:41:30:19:2c:7d:90:54:b9:9c:
eb:a6:3b:cb:2e:20:f9:aa:43:ec:e1:75:65:ba:06:
aa:7e:01:09:36:f4:49:32:57:8c:98:84:ff:74:da:
ad:75:45:2f:7c:db:c3:b5:84:29:15:3f:21:d5:cc:
fa:9c:50:40:20:83:c0:c8:b2:82:42:02:1d:fc:f0:
55:6e:c2:3d:b5:63:b2:bd:a7:48:5d:8c:b0:c5:c2:
6c:80:d7:59:92:ab:d7:34:b4:ca:00:23:1b:7a:a2:
09:c8:54:6e:e9:40:35:3b:f4:c3:65:bf:c9:d8:41:
55:d5:c7:e4:3e:ca:9d:48:cd:61:50:14:e2:59:6d:
86:29:7c:b1:e0:c6:f6:6f:24:48:e5:ff:cc:40:8f:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B5:CD:19:2D:36:9B:BD:2E:2A:C2:E6:FE:DF:33:3F:C8:9D:85:B7
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e0:9d:fd:67:f3:6f:30:22:9b:04:12:d7:6b:af:ec:85:22:
16:e6:17:2d:07:48:24:2c:a2:b2:74:f9:b3:c6:e8:e9:4a:b4:
b2:3d:62:43:e4:c9:a8:ad:12:03:15:fe:42:87:59:c5:19:6a:
75:0c:1a:a4:2f:72:f7:5d:3f:4d:6c:54:e4:a1:9f:93:c4:7a:
39:38:91:c5:b0:50:ac:5e:75:b7:1a:49:bc:76:9f:e4:d5:0f:
f9:22:49:0b:2b:50:72:c5:19:84:6c:89:f5:ed:20:bb:e2:ec:
f3:45:1c:34:00:46:0a:73:6b:26:16:f9:ba:3f:d8:41:71:d3:
46:dc:4c:ea:0e:a3:7d:29:11:4d:2a:49:2b:ea:7a:da:65:eb:
37:47:e1:f3:fc:04:0d:27:3a:60:0b:d2:23:70:52:35:fa:37:
01:f6:5e:b2:65:aa:53:e2:85:75:e1:ae:d3:87:fe:19:f9:13:
09:e0:d0:63:b3:5e:30:86:f4:a3:cb:3f:a2:0d:ed:7a:4a:33:
7b:36:8f:a6:6a:0a:a7:48:1d:28:f7:9a:bd:cc:f3:51:16:82:
09:27:38:5b:f2:2c:a3:1c:f8:3f:54:c7:28:b0:8f:99:90:31:
f5:b8:b2:1e:3b:c9:13:4c:ae:87:dd:12:52:7f:cd:0f:8e:d1:
19:1f:93:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:35:52 2026 by rpki-client