Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
File: DeJyDFfbAnYQyCHIQEexELw23cM.mft (raw, json)
Hash identifier: DBNWisH989B3kSbncDkMLCtks45WrzMjdAV29KcMoa8=
Subject key identifier: 35:F1:B4:DC:27:1F:9C:C3:43:01:BC:71:33:A1:79:5A:87:33:65:C0
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 019EC2928E127C40BB00492C647D98E1AC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
Manifest number: 18B9
Signing time: Sat 13 Jun 2026 20:00:44 +0000
Manifest this update: Sat 13 Jun 2026 20:00:44 +0000
Manifest next update: Sun 14 Jun 2026 20:00:44 +0000
Files and hashes: 1: DeJyDFfbAnYQyCHIQEexELw23cM.crl (hash: yWAlfyin11yLiFEj2YdtjOPHJOdIg15L0jJJ3g8Y5ZY=)
2: P36uHuPS5_1ZcbFBd2BK-dl_TiA.roa (hash: U1J0vNwFsA81czhw4TBsP5/VLrBO35KlQLKDFzPg3rg=)
3: fGpklCDH_wyaIOJ-mpwmbhVEyVM.roa (hash: 55kvoIa9qkI1hdvmgneIAy4TGhe1IxvQIHXZfjKMKEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:8e:12:7c:40:bb:00:49:2c:64:7d:98:e1:ac:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Jun 13 20:00:44 2026 GMT
Not After : Jun 14 20:00:44 2026 GMT
Subject: CN=35f1b4dc271f9cc34301bc7133a1795a873365c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:2c:80:7c:f7:db:f6:d2:a9:a8:31:7f:71:
28:92:f4:41:a4:aa:90:c9:75:b3:02:6a:9a:c9:98:
e2:66:53:ec:df:23:fe:bc:eb:6f:46:fa:bc:82:93:
25:ae:00:41:8f:47:05:0e:42:7f:52:f9:62:f0:5d:
b5:6d:69:47:93:4c:c7:93:3a:6e:b7:ea:89:ea:92:
79:5f:95:90:cf:0c:07:87:0e:cb:95:e2:aa:1e:50:
9a:da:5e:dd:7b:b0:13:73:70:75:fd:e7:f9:45:f5:
fb:43:42:c1:f3:1c:30:a7:b1:7e:11:43:f2:ed:93:
c9:ec:f1:df:a9:1f:57:46:0a:f3:53:cc:3d:c0:e6:
db:1d:6b:c5:df:c1:1a:23:5f:ed:13:a7:c3:46:b5:
b6:1b:f7:0f:e0:46:78:59:ac:68:e4:70:a2:7f:4f:
59:c0:e3:25:27:87:cd:56:f6:63:cf:26:fe:d9:74:
04:88:51:fa:b5:c6:b4:bd:40:db:98:3d:c7:ed:21:
95:11:59:b2:f7:44:8b:f2:19:23:fd:aa:89:ae:8d:
8e:ab:a8:60:2a:f8:b9:5a:cc:7e:c9:11:9f:e2:f7:
19:0f:bb:9a:bf:d8:2b:b6:50:25:a2:6a:5a:fe:fb:
56:58:46:ca:38:f5:8b:87:27:a8:7f:e9:9b:40:f3:
e4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F1:B4:DC:27:1F:9C:C3:43:01:BC:71:33:A1:79:5A:87:33:65:C0
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:62:c0:a6:3a:73:2a:55:ea:1e:19:2d:37:fc:59:f5:ca:34:
a7:86:03:05:88:ae:d4:9f:f5:4f:e1:24:06:cd:71:1c:68:94:
2d:35:81:39:1a:b3:44:2b:fa:76:52:60:dc:c8:6f:fd:75:51:
c1:a9:cf:9f:f1:0a:a0:2b:87:e5:99:8e:3d:be:8d:17:ae:28:
eb:41:60:d9:5d:ab:ff:f8:d6:d2:74:c4:8b:ca:68:63:dc:26:
e0:5c:27:e4:4b:d6:3b:aa:33:f8:dc:3f:30:82:e7:aa:00:86:
95:8d:82:53:78:7a:e6:3c:ca:fd:7f:24:11:e6:bf:c7:69:28:
6d:df:13:35:9d:48:78:4d:30:89:44:dd:b3:4a:f3:ea:2c:c9:
8c:ea:43:8f:a1:b8:8b:67:71:e3:49:46:75:3e:e3:eb:84:77:
71:d6:47:5e:f4:27:bd:69:1d:6b:22:77:a5:0d:9e:b6:ab:e2:
b7:2c:a4:f0:8a:38:68:93:b7:cd:08:fb:bc:73:2f:8e:28:60:
f8:86:49:b5:f1:27:0a:fa:42:e5:9e:39:00:3d:f2:58:a5:94:
9d:ff:67:15:30:e3:71:da:6b:34:52:a4:74:d6:8a:34:35:0e:
b5:0e:f6:2b:22:c3:7c:63:71:c0:37:01:8a:1d:a6:05:7b:c2:
4e:bc:6b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:22:42 2026 by rpki-client