Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File: Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier: NvDdG2gq6KCyRhiDB5aF0xDhJ1tCvGer6axAHRBlixM=
Subject key identifier: 6B:39:64:BD:50:0D:49:C8:09:70:B1:1C:2A:2C:7B:1F:D5:64:45:99
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 019F17C33AE46F4E324F95A144DED6D0EC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 09:01:38 +0000
Manifest this update: Tue 30 Jun 2026 09:01:38 +0000
Manifest next update: Wed 01 Jul 2026 09:01:38 +0000
Files and hashes: 1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: RMchULjuBfhJLJndlIDFTXXLNvyqpjdh8vDswyKmMHU=)
2: Rn3_9vFVXU06CNsxoJF1MmOpw7M.roa (hash: xyFTVjGVyU+raorbvx64u0pXwIGXyRN5Lt5srPA+50U=)
3: f-ogC67M0j6pmdbRailAwDmYBsk.roa (hash: AiwIB7mPfTBWZfsnFMwdI5gkTn2LtdcdGevndgaf5SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:3a:e4:6f:4e:32:4f:95:a1:44:de:d6:d0:ec:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Jun 30 09:01:38 2026 GMT
Not After : Jul 1 09:01:38 2026 GMT
Subject: CN=6b3964bd500d49c80970b11c2a2c7b1fd5644599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:37:46:40:2e:3d:90:20:61:b0:84:11:0f:
f4:d5:4c:b5:82:27:09:9f:56:0d:cb:04:b7:11:56:
c2:c1:0e:a6:0e:0c:0c:a4:d8:35:8a:07:dc:b0:b6:
7a:05:a7:39:e2:c5:c6:83:62:72:95:5c:34:d0:00:
b8:32:3b:9f:a4:5f:fd:48:ab:d7:62:26:8b:14:3b:
86:9b:b5:82:10:e9:86:22:29:18:8f:7e:7e:20:98:
cc:3d:26:95:b0:22:c5:78:0a:75:79:cf:1e:0c:05:
89:7e:d6:38:9a:97:f4:31:62:2c:82:69:85:8e:06:
6d:2e:03:d1:48:21:0e:e3:f1:21:da:8c:cb:2f:df:
f9:28:65:08:dd:7e:73:43:15:54:d6:f7:8d:bd:67:
83:75:0c:a8:a8:67:a5:1f:8c:b2:79:0e:bf:5a:01:
8d:07:aa:01:e7:4f:1b:f7:a9:df:1f:2d:b4:35:79:
0d:6f:ae:ae:ef:ec:80:99:1f:9a:f5:60:1c:fe:60:
65:79:cd:38:8e:4c:25:06:f2:14:4c:e7:3b:3b:2f:
0c:c7:e2:42:98:41:73:f4:65:2b:71:8c:42:a4:23:
41:f7:73:86:be:eb:9e:b8:21:ae:00:02:d5:89:87:
c6:99:73:89:75:98:b4:16:6d:68:d8:29:7d:00:59:
b5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:39:64:BD:50:0D:49:C8:09:70:B1:1C:2A:2C:7B:1F:D5:64:45:99
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2f:01:cb:c5:5e:4a:e5:1d:24:12:f2:bc:92:1c:05:6a:d4:
7e:e3:89:28:2c:8f:63:09:80:c3:de:56:5c:77:6a:7f:2e:76:
50:6c:9e:62:71:9e:84:0d:cf:30:19:e8:6b:5b:9a:5f:c1:b5:
11:91:c5:58:1c:ed:04:e8:56:0d:b5:05:e7:7d:cd:f5:04:df:
7d:47:28:31:0b:f6:e7:91:50:d7:25:f9:ff:bb:ae:a8:ff:f1:
47:eb:2b:fa:a4:e1:41:35:07:2b:42:86:0b:0f:cd:4b:27:05:
dd:c7:f1:f9:49:d9:5c:9d:f1:c5:c7:80:e5:d8:6e:6b:e9:74:
12:74:f7:c2:6c:aa:0d:b1:aa:c4:79:60:16:ab:53:91:dd:12:
fc:a8:8c:a3:17:34:dc:d7:26:af:3d:3a:02:ec:bd:c5:d8:17:
7a:6e:c5:10:0f:13:a5:e4:b8:f0:e1:05:eb:32:dc:64:8d:4d:
14:2f:22:f0:2c:32:c7:d6:78:0d:06:05:4d:81:58:e4:fa:4e:
b7:54:eb:4c:27:f6:bb:f6:f9:74:1a:e7:05:ba:7d:58:58:1a:
b0:e9:55:09:1d:55:24:76:f3:25:a7:53:24:66:3f:9a:e9:be:
a5:4e:74:fc:79:d3:a5:4c:5c:3c:d8:08:ac:12:20:3c:d5:03:
83:df:36:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:34:21 2026 by rpki-client