Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File: Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier: O8dw6msWZazhWBk2IC+k1JZBHdu4uxZxmbngmXoNOz4=
Subject key identifier: C0:75:3B:AA:0E:F9:16:BE:F9:55:23:66:2F:3F:AB:07:B5:C3:A5:88
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 01A13E266EB5150935E5CCDC9D833ED6880E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 06:01:08 +0000
Manifest this update: Thu 15 Oct 2026 06:01:08 +0000
Manifest next update: Fri 16 Oct 2026 06:01:08 +0000
Files and hashes: 1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: PBMRSGA84RRWaK7q3mXVyZuWOJzLfrBGvrc9PJplbHk=)
2: Rn3_9vFVXU06CNsxoJF1MmOpw7M.roa (hash: xyFTVjGVyU+raorbvx64u0pXwIGXyRN5Lt5srPA+50U=)
3: f-ogC67M0j6pmdbRailAwDmYBsk.roa (hash: AiwIB7mPfTBWZfsnFMwdI5gkTn2LtdcdGevndgaf5SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:6e:b5:15:09:35:e5:cc:dc:9d:83:3e:d6:88:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Oct 15 06:01:08 2026 GMT
Not After : Oct 16 06:01:08 2026 GMT
Subject: CN=c0753baa0ef916bef95523662f3fab07b5c3a588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d5:aa:ad:a5:bc:4a:83:0c:b1:0f:0a:4d:e9:
40:0c:db:f2:23:99:b9:21:3d:3a:46:0f:c2:d0:46:
1f:7e:5a:69:e3:6e:6d:b6:ac:99:54:67:d9:7f:bc:
80:b3:05:fa:06:c5:aa:0c:dc:46:63:43:3e:96:69:
46:3c:e8:69:e4:6b:59:16:12:86:8d:72:b2:89:a3:
05:e2:9a:06:e0:2a:0d:f9:91:c2:15:0b:fb:68:77:
25:0a:e1:79:e7:d9:9b:50:60:e0:14:16:35:f7:a1:
f4:74:f3:23:8e:a2:4d:23:dc:4b:48:75:00:4e:ad:
9b:21:2e:91:d8:0b:d7:ec:af:9b:72:d0:b7:9f:8d:
75:38:4e:f7:9b:d8:1f:26:66:a4:0a:ab:cb:aa:ef:
4f:2e:80:a6:4e:d8:fd:13:f0:5b:e7:10:9c:08:ca:
a5:f5:93:04:36:47:21:c1:3e:1b:33:cd:7e:1a:30:
a8:ba:99:42:d6:4c:67:56:15:df:01:ed:bc:9d:24:
71:0d:7b:51:74:ec:e9:f5:99:9c:a4:66:66:01:5c:
61:52:a1:61:41:63:a9:7f:7f:eb:ad:5f:f0:77:af:
89:9e:e2:89:8b:f4:f3:5d:11:8a:d3:4a:53:c9:1d:
8a:d0:0e:cc:ce:28:54:b1:3e:0b:37:c0:69:eb:7f:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:75:3B:AA:0E:F9:16:BE:F9:55:23:66:2F:3F:AB:07:B5:C3:A5:88
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:df:97:08:82:26:25:e8:78:df:1f:84:04:9c:46:ff:77:f1:
1d:af:95:ee:71:77:9c:f0:91:6d:5f:23:cf:40:56:67:6e:33:
fd:7f:21:92:d0:90:8b:25:2e:3a:ea:39:a8:f0:bc:78:eb:c4:
ec:e6:a2:68:f3:96:61:ad:2f:e4:e5:44:b6:d3:5f:8e:76:da:
da:c7:de:bf:06:98:c9:30:d6:3c:94:c7:51:b8:eb:9c:2d:0c:
9e:bf:72:25:9e:6a:14:d5:c2:53:da:0b:09:9f:2e:72:11:4e:
9e:4f:05:45:84:f3:c2:bf:14:14:bb:af:ce:22:70:9a:41:b1:
44:58:1d:66:d8:7b:a2:92:8b:f5:81:15:51:11:a5:d5:d6:5e:
68:3f:ba:02:9a:90:9d:97:50:25:ca:a3:63:a0:4e:89:9f:53:
42:4d:13:f6:93:2a:c0:79:69:2c:bd:ac:4b:bb:54:85:b0:22:
96:63:91:47:d4:4c:81:e6:ca:c7:e5:26:5d:96:b8:18:ee:c0:
8b:2e:69:5f:f9:da:df:6f:4e:fe:53:65:4b:20:a0:94:bf:04:
f1:09:66:ea:b8:36:4e:71:a6:e5:4c:3f:3d:ee:5f:6b:df:99:
f3:b9:31:19:ea:20:54:dd:b2:d7:cf:3b:20:44:73:39:4b:a8:
7f:18:26:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:53 2026 by rpki-client