Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File: Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier: Qk05M9PC/Waa9exqfIidnDL/YI5kk9fQn+6ndQfukc0=
Subject key identifier: 6B:32:0F:A1:38:86:6E:64:D9:17:CD:1D:8C:17:C5:EA:B6:BF:69:58
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 019D34F6917317FB5755066799204C72F62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number: 188E
Signing time: Sat 28 Mar 2026 15:01:07 +0000
Manifest this update: Sat 28 Mar 2026 15:01:07 +0000
Manifest next update: Sun 29 Mar 2026 15:01:07 +0000
Files and hashes: 1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: MyaYz/37l09eEwwWOoGFIJQLmej/IeTEBjnOByi1D8I=)
2: Rn3_9vFVXU06CNsxoJF1MmOpw7M.roa (hash: xyFTVjGVyU+raorbvx64u0pXwIGXyRN5Lt5srPA+50U=)
3: f-ogC67M0j6pmdbRailAwDmYBsk.roa (hash: AiwIB7mPfTBWZfsnFMwdI5gkTn2LtdcdGevndgaf5SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:f6:91:73:17:fb:57:55:06:67:99:20:4c:72:f6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Mar 28 15:01:07 2026 GMT
Not After : Mar 29 15:01:07 2026 GMT
Subject: CN=6b320fa138866e64d917cd1d8c17c5eab6bf6958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:00:db:8f:2d:ef:5a:9f:19:b3:57:e2:7b:
e8:d9:bf:1b:d5:d2:c0:98:47:00:55:b6:52:00:12:
50:d2:2c:95:8a:ca:b1:a0:9b:33:ab:fb:38:51:73:
af:c8:65:36:1f:1e:e5:7b:a9:10:30:d8:cb:f7:4e:
a1:be:92:5b:00:5e:41:91:25:e4:8c:1a:b0:78:31:
19:d5:8d:5a:36:8d:5a:3f:b3:d4:7e:1c:68:28:38:
81:02:75:14:cb:d5:18:b6:df:94:25:e2:9c:02:ca:
8a:a5:ad:c1:4d:cd:f4:f5:dc:5f:7a:19:c5:47:f7:
e3:4e:b2:19:f7:96:a9:db:ea:d9:d8:d5:04:c3:26:
fa:2c:0b:22:08:47:97:ee:b4:a9:f2:d5:35:bd:39:
9d:f1:1f:2a:68:58:8c:27:51:c3:fd:11:8c:32:37:
fa:60:1d:9b:76:46:35:98:9d:88:df:f8:ee:49:1b:
5d:5f:9f:44:8a:04:18:4d:ed:f1:c6:28:5b:f2:92:
eb:22:ab:3d:c7:8d:88:5f:df:bd:c9:8e:76:05:e9:
11:2a:d0:3c:ea:71:f1:c3:dc:46:8f:05:83:62:32:
f6:c4:48:14:57:ed:4b:0c:6c:45:a8:4e:03:f1:03:
cc:bc:cb:b4:9c:da:77:e0:37:b0:4f:3d:26:28:fd:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:32:0F:A1:38:86:6E:64:D9:17:CD:1D:8C:17:C5:EA:B6:BF:69:58
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:86:c0:81:28:88:d2:84:fe:c3:5a:65:7c:c3:40:1c:3d:94:
ae:ad:5d:9f:1c:c8:99:8a:46:26:ad:b5:89:b5:1e:26:ae:03:
08:f1:55:fd:a6:88:20:54:2d:0d:46:9a:d8:cc:2b:77:ac:03:
43:71:fb:bc:4c:65:ec:b2:20:d3:cd:35:4b:f8:00:db:2c:9d:
4a:da:41:26:e9:a5:fd:5b:da:5a:2b:71:28:14:f9:7e:cd:36:
b8:95:f2:31:c0:33:cc:74:fc:74:35:0b:32:71:c4:9d:42:4a:
59:e2:01:aa:c7:73:3f:59:b2:1f:f7:bd:57:3b:af:38:17:c2:
ba:5e:ac:fa:fe:6a:6c:6c:52:f3:33:db:5d:15:44:c0:01:ca:
75:06:1f:6f:66:3d:fb:ee:7d:6f:fc:09:e0:c2:e5:5a:af:34:
80:95:0a:50:dc:15:44:3e:94:75:01:3e:9b:71:89:f2:eb:c7:
e3:80:89:1f:7c:6e:7f:47:7d:75:59:6a:e5:46:72:01:7d:9b:
fc:df:74:9b:db:3f:42:ac:9e:7c:8f:ea:59:ee:5e:5b:1b:45:
34:a7:67:fb:d8:62:47:2c:4b:0d:b4:7e:50:4b:6b:23:3a:20:
17:06:a9:29:c5:7e:2a:44:de:19:16:f3:83:b7:18:c8:a1:f1:
89:bc:2f:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ009pFzF/tXVQZnmSBMcvYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlM2M5ZWUxYmUzMzA4ZmQ2YmQ0YTdjN2FjMmI5ZDkxMDA4
OWI3NzkwHhcNMjYwMzI4MTUwMTA3WhcNMjYwMzI5MTUwMTA3WjAzMTEwLwYDVQQD
Eyg2YjMyMGZhMTM4ODY2ZTY0ZDkxN2NkMWQ4YzE3YzVlYWI2YmY2OTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWkA248t71qfGbNX4nvo2b8b1dLA
mEcAVbZSABJQ0iyVisqxoJszq/s4UXOvyGU2Hx7le6kQMNjL906hvpJbAF5BkSXk
jBqweDEZ1Y1aNo1aP7PUfhxoKDiBAnUUy9UYtt+UJeKcAsqKpa3BTc309dxfehnF
R/fjTrIZ95ap2+rZ2NUEwyb6LAsiCEeX7rSp8tU1vTmd8R8qaFiMJ1HD/RGMMjf6
YB2bdkY1mJ2I3/juSRtdX59EigQYTe3xxihb8pLrIqs9x42IX9+9yY52BekRKtA8
6nHxw9xGjwWDYjL2xEgUV+1LDGxFqE4D8QPMvMu0nNp34DewTz0mKP2u+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsyD6E4hm5k2RfNHYwXxeq2v2lYMB8GA1UdIwQY
MBaAFA48nuG+Mwj9a9Snx6wrnZEAibd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGp5ZTRiNHpDUDFyMUtmSHJDdWRrUUNKdDNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9jYWEyZGEtNWViYy00NWNiLWI4ZmUt
MDhmM2U4OTA3YzQyLzEvRGp5ZTRiNHpDUDFyMUtmSHJDdWRrUUNKdDNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9jYWEyZGEtNWViYy00NWNiLWI4ZmUtMDhmM2U4OTA3YzQy
LzEvRGp5ZTRiNHpDUDFyMUtmSHJDdWRrUUNKdDNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYbAgSiI
0oT+w1plfMNAHD2Urq1dnxzImYpGJq21ibUeJq4DCPFV/aaIIFQtDUaa2Mwrd6wD
Q3H7vExl7LIg0801S/gA2yydStpBJuml/VvaWitxKBT5fs02uJXyMcAzzHT8dDUL
MnHEnUJKWeIBqsdzP1myH/e9VzuvOBfCul6s+v5qbGxS8zPbXRVEwAHKdQYfb2Y9
++59b/wJ4MLlWq80gJUKUNwVRD6UdQE+m3GJ8uvH44CJH3xuf0d9dVlq5UZyAX2b
/N90m9s/QqyefI/qWe5eWxtFNKdn+9hiRyxLDbR+UEtrIzogFwapKcV+KkTeGRbz
g7cYyKHxibwvQw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 21:46:27 2026 by rpki-client