Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
File: DeJyDFfbAnYQyCHIQEexELw23cM.mft (raw, json)
Hash identifier: sU6LVxJalDufZa8m+V+XQGL3e0zEIAwts3CI9AThQOw=
Subject key identifier: CB:97:6A:79:18:2E:12:D9:EA:B5:0D:46:95:12:5C:96:82:51:A3:AD
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 019D2B173DBAD9EC7EA2AE55BD8EDCDED386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
Manifest number: 17E6
Signing time: Thu 26 Mar 2026 17:00:36 +0000
Manifest this update: Thu 26 Mar 2026 17:00:36 +0000
Manifest next update: Fri 27 Mar 2026 17:00:36 +0000
Files and hashes: 1: DeJyDFfbAnYQyCHIQEexELw23cM.crl (hash: WIZkCQljJ8hD8Wzy10G+9SjunG05rzbKZm9HdrgPPYc=)
2: P36uHuPS5_1ZcbFBd2BK-dl_TiA.roa (hash: U1J0vNwFsA81czhw4TBsP5/VLrBO35KlQLKDFzPg3rg=)
3: fGpklCDH_wyaIOJ-mpwmbhVEyVM.roa (hash: 55kvoIa9qkI1hdvmgneIAy4TGhe1IxvQIHXZfjKMKEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:3d:ba:d9:ec:7e:a2:ae:55:bd:8e:dc:de:d3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Mar 26 17:00:36 2026 GMT
Not After : Mar 27 17:00:36 2026 GMT
Subject: CN=cb976a79182e12d9eab50d4695125c968251a3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2a:1b:9e:7a:e4:5d:15:c7:8b:89:30:04:2d:
6f:05:84:9a:c0:7a:f0:fb:88:04:29:83:52:3d:b6:
ba:92:b4:c7:41:32:6a:18:95:76:af:69:de:a6:5f:
a7:6c:1b:96:cd:c7:8f:59:34:34:03:89:58:71:88:
b6:c2:13:b1:cb:2b:7f:5c:a2:6b:35:45:c0:e7:0f:
a0:3e:a2:c4:b3:5f:b7:24:8e:95:e2:62:74:cb:b3:
aa:61:25:9d:37:6e:af:51:4f:22:53:76:0f:63:17:
fa:34:c7:13:bc:1c:4f:8d:26:b9:cc:9c:af:e3:1d:
eb:ab:cc:b6:bb:6d:99:31:66:37:0a:f2:2f:69:5f:
75:78:ef:b5:24:3a:6a:21:e6:f4:09:b9:f1:38:28:
b4:e3:66:86:37:12:67:9c:7d:b9:55:93:89:44:5a:
60:5c:63:d5:49:ad:a6:e4:e5:c0:1f:ff:06:57:37:
b0:d6:33:9d:ff:f6:30:8c:a2:60:3e:be:ad:a7:c6:
ee:51:72:e9:42:ec:61:33:62:cf:10:d8:d2:94:6d:
af:51:b7:c0:f6:22:68:91:4f:de:bf:6b:02:d6:21:
9f:b5:ec:51:64:1f:f4:6a:5a:a6:ed:6f:ec:19:19:
f3:00:7c:6d:87:18:bf:0f:1c:7a:30:3a:a1:11:87:
9f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:97:6A:79:18:2E:12:D9:EA:B5:0D:46:95:12:5C:96:82:51:A3:AD
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3b:86:f1:d1:23:59:3d:e3:54:3a:09:75:3c:ca:28:71:9c:
09:09:b4:11:4d:ba:02:6c:d0:fa:f1:e8:47:e0:eb:17:ed:2c:
e9:93:81:df:ac:74:07:61:3f:88:60:de:59:9d:64:f4:cd:18:
50:45:68:42:07:3e:5e:1c:a0:fb:a5:d7:6c:af:38:d9:32:f9:
c7:7c:be:99:08:50:62:a2:e8:fe:f2:f4:9e:aa:f6:2b:a6:db:
3e:9e:b0:87:cc:8f:d8:36:5e:df:7d:6f:26:79:2e:90:ab:41:
4a:1a:df:84:13:8d:40:79:34:93:9d:82:4d:74:50:9b:10:da:
a5:49:01:9f:b8:df:2e:9c:1f:7c:1d:07:57:1f:0b:cd:70:79:
ec:18:54:2d:f7:a7:1b:d0:b4:7a:52:83:66:c8:27:e9:68:34:
32:44:24:0e:b3:39:f6:a6:87:79:9a:5f:e4:02:11:a4:13:72:
d2:44:15:47:c1:19:5a:af:e9:7d:a2:9c:59:3d:04:80:16:cf:
7a:1a:e8:22:82:0b:8f:6c:1b:a9:ff:92:24:81:81:2f:e4:5b:
20:10:96:43:63:81:cf:a9:81:d3:60:3f:ee:8e:5b:66:8a:ea:
ea:30:ba:25:df:7f:f4:4e:d2:7b:c4:4e:11:bc:a1:83:e0:74:
e8:df:25:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:56:41 2026 by rpki-client