Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
File: DefybbQ61DIFvrBn_Qqz4wAnhl0.mft (raw, json)
Hash identifier: 6zy9je59izTfx4ph+ghUuQcfZrACF/dL7gYbgMFffpQ=
Subject key identifier: DC:7D:38:91:33:FA:86:C2:51:4D:11:54:24:AE:3A:89:8E:B6:36:7F
Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
Certificate issuer: /CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Certificate serial: 01A1DD26F8FEED3A23096EAF667F3824ADE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
Manifest number: 1825
Signing time: Sun 15 Nov 2026 03:01:20 +0000
Manifest this update: Sun 15 Nov 2026 03:01:20 +0000
Manifest next update: Mon 16 Nov 2026 03:01:20 +0000
Files and hashes: 1: DefybbQ61DIFvrBn_Qqz4wAnhl0.crl (hash: 1c65zHvecKSGHAFdEAr+CvhIkrVrMOKwGwE481z5Wno=)
2: g323boBVOxyFFRDtn1suxBzGHN0.roa (hash: eyZdCahVj22vnipsJsBb9tIVCdJEj0KFcdD786lVupg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:f8:fe:ed:3a:23:09:6e:af:66:7f:38:24:ad:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Validity
Not Before: Nov 15 03:01:20 2026 GMT
Not After : Nov 16 03:01:20 2026 GMT
Subject: CN=dc7d389133fa86c2514d115424ae3a898eb6367f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:f1:85:13:c2:a8:af:5b:80:3b:94:be:2c:
4a:a6:c4:05:92:d9:0c:32:9e:3b:23:f9:f9:6f:8c:
df:cb:99:8f:ac:f3:c8:cc:ae:53:e1:c7:d0:55:d5:
4d:47:71:ca:65:d1:d9:9a:68:44:d0:7e:4c:fe:9f:
79:1b:a2:05:9f:e6:09:51:73:f0:e2:36:28:23:9c:
87:d8:4a:1a:f9:75:09:3f:50:69:37:7b:a9:00:5f:
e6:a8:04:bd:8d:73:bc:ed:b3:41:1f:8c:3f:a0:08:
86:be:64:b2:92:5a:7a:58:23:ad:a8:50:82:ae:09:
f3:39:1e:97:76:cc:8c:66:3f:a1:13:fa:52:02:ea:
e0:01:2c:92:9a:ca:2a:89:e8:25:e0:91:bb:3f:f8:
dc:c1:4f:d3:69:88:6d:1b:94:de:01:72:4c:70:69:
d9:4e:f9:99:4c:72:23:55:27:ed:4b:e4:9c:99:2d:
bf:71:5a:e9:53:a8:49:6d:32:40:6c:af:72:ca:0e:
4d:93:91:c3:d7:b5:0a:89:53:81:c3:13:3f:48:c7:
0d:9b:f7:39:42:d2:4a:be:76:3c:1b:25:b6:21:f5:
7a:bd:ae:8b:f5:fb:93:35:f8:16:4d:74:66:5a:20:
00:49:92:b2:51:85:fd:25:05:ad:e7:3b:a8:38:31:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7D:38:91:33:FA:86:C2:51:4D:11:54:24:AE:3A:89:8E:B6:36:7F
X509v3 Authority Key Identifier:
keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f5:59:6b:4a:e5:5b:cb:e4:8c:b0:bf:e3:53:4c:66:11:bd:
1e:7b:67:2d:96:2e:df:ab:21:51:d3:b5:b1:bf:9d:ae:1c:05:
e0:78:c8:86:61:c5:3f:6a:e3:71:17:72:e3:91:2d:90:00:6f:
6b:87:a3:f5:df:1d:7b:39:30:6f:83:c1:cc:d8:29:04:bd:9f:
bb:f2:65:a1:b9:86:00:f8:63:78:79:66:5c:9a:fd:48:36:61:
8f:fe:a4:59:5c:20:10:c4:2a:a8:ac:db:b1:1b:64:36:22:23:
1c:e3:85:ed:95:d1:6a:90:d7:98:c1:32:f4:df:8f:7b:32:30:
9e:fc:f3:59:cc:20:76:98:1a:88:9a:36:08:64:11:3b:46:4c:
f6:b6:b5:12:12:e3:dc:3f:a2:f9:87:b5:e1:99:4c:3f:0e:c5:
40:f6:81:ef:43:6a:56:00:aa:be:d2:57:32:a1:f5:a4:69:1b:
89:07:26:d8:b0:e0:e3:65:cb:a6:9f:15:73:0b:bd:00:76:a4:
af:a9:6d:c5:5b:8a:87:8c:36:6e:c8:fb:02:78:38:c3:c1:81:
5e:06:31:d6:9b:81:01:a2:6f:f6:2a:a1:64:c7:aa:93:17:69:
52:38:d4:78:3c:ee:ee:70:2b:84:50:b2:93:33:67:0d:c6:39:
d3:11:61:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:15:48 2026 by rpki-client