Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier: 1UGwX9UBXy/+b5Zg4peBCl5khorCuiHTgUpbm7GiofU=
Subject key identifier: C9:D2:B5:AF:60:F1:F0:99:FC:44:AE:C7:3F:0A:C6:FE:1E:2D:22:E9
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial: 019F175463E312FC09B47E5CC0535061D58A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number: 1625
Signing time: Tue 30 Jun 2026 07:00:34 +0000
Manifest this update: Tue 30 Jun 2026 07:00:34 +0000
Manifest next update: Wed 01 Jul 2026 07:00:34 +0000
Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: K3wL6uBxT6FHb7u2chDqIFUa55KjHC67qlrnVpaQya4=)
2: iYtloRWl9kFypd8JJUfmPgfj4cA.roa (hash: S73CmXUZ6HVY4mwA83JVTETkq549rHQpfRMzqNjQiJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:54:63:e3:12:fc:09:b4:7e:5c:c0:53:50:61:d5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
Validity
Not Before: Jun 30 07:00:34 2026 GMT
Not After : Jul 1 07:00:34 2026 GMT
Subject: CN=c9d2b5af60f1f099fc44aec73f0ac6fe1e2d22e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:4b:16:42:a3:e8:5c:dd:99:0e:79:80:e6:
3d:f5:5a:b1:f6:6f:7d:48:f3:60:e9:bb:56:29:0a:
28:c5:ee:44:5f:82:e4:e2:ca:8e:05:95:23:6b:78:
24:f8:ad:5f:43:81:b9:a2:68:ce:45:e5:84:d2:fd:
69:01:68:8c:ad:14:bf:b2:2e:30:7b:6b:a8:ef:08:
5d:e6:b8:1b:e2:db:df:54:55:00:b1:83:9a:9a:e3:
bd:52:12:73:bc:25:7c:fd:26:2f:b5:1c:3d:fe:72:
ac:58:2a:b9:fd:f8:61:e9:8c:b6:a5:0c:12:ca:ca:
66:d1:61:30:a1:71:98:80:b9:91:bf:b6:57:bd:e7:
ff:92:f5:8e:9a:b2:56:99:12:74:f4:58:1f:97:c9:
72:58:ca:70:09:be:a0:0d:7b:30:22:98:e0:3b:f5:
a2:db:4f:cf:a9:8a:93:61:2d:9e:35:e0:06:21:33:
79:c2:b3:b8:3d:92:02:06:ad:0e:84:2b:cd:be:37:
4f:2a:3c:58:4d:0a:2c:87:57:f0:75:b9:a8:54:49:
5b:26:64:08:79:a1:fa:cf:fb:b9:05:f5:d3:48:f8:
cc:ed:cc:5e:68:d1:8d:95:9a:3f:ee:34:68:e4:3c:
ba:3b:81:81:16:c5:01:08:96:5d:01:8b:a1:57:bd:
7b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D2:B5:AF:60:F1:F0:99:FC:44:AE:C7:3F:0A:C6:FE:1E:2D:22:E9
X509v3 Authority Key Identifier:
keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b1:ab:2c:ac:d8:fc:29:66:45:94:b6:49:64:d2:50:de:a3:
26:75:7a:a8:4b:34:cb:82:8e:ab:c1:05:bb:48:de:e6:73:8e:
0f:23:f1:2c:8e:b1:3b:69:4d:f2:be:d3:0c:bc:c6:25:67:87:
69:70:4f:cb:d5:77:63:b2:f7:02:c8:52:6e:c6:b7:21:b6:22:
83:cb:ee:f6:5d:11:9b:a1:f4:b4:0c:ac:d2:5d:cb:58:35:91:
fe:3a:90:6d:35:7a:69:ad:59:93:af:d6:71:fb:2c:96:c0:82:
28:a2:ea:8c:d4:87:1b:cf:0c:12:c4:49:98:c4:fc:02:cc:b4:
e3:d6:c5:20:d4:d4:5b:9e:3c:26:c4:11:dc:86:ed:9c:2f:0b:
d2:61:5c:e4:1c:49:5c:34:a8:0d:9c:c5:01:72:cd:2c:4c:87:
e4:1d:4a:5b:35:61:f8:6b:cc:15:19:84:f8:4e:df:e7:6a:03:
47:82:af:65:db:47:aa:36:ff:5d:46:73:be:f7:57:35:da:27:
34:fa:db:db:8b:ca:44:61:83:07:78:d6:83:d9:ab:1e:f0:0d:
db:ed:76:1a:a5:fd:44:43:1e:78:9f:c4:a1:48:46:4f:b6:5e:
e8:40:ba:d6:2e:b3:21:0b:d4:2f:0c:18:7a:a8:74:3e:10:08:
3a:18:f6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:50 2026 by rpki-client