Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File: Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier: nhfL5nqaiC7Zs0fw2xvWSVBNbwt6pVug0pKCVbrKk0g=
Subject key identifier: 13:53:6C:E6:6E:7A:7B:31:A2:60:E5:A7:6A:48:63:4B:FE:D3:B9:7D
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 01A0016FA542CFD7974BAE3C0627CDFA5399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 18:01:29 +0000
Manifest this update: Fri 14 Aug 2026 18:01:29 +0000
Manifest next update: Sat 15 Aug 2026 18:01:29 +0000
Files and hashes: 1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: pV7e58XjqHH/NE2/Vjk1WiKwkrjr/5CjW0TBnTY1zc0=)
2: Rn3_9vFVXU06CNsxoJF1MmOpw7M.roa (hash: xyFTVjGVyU+raorbvx64u0pXwIGXyRN5Lt5srPA+50U=)
3: f-ogC67M0j6pmdbRailAwDmYBsk.roa (hash: AiwIB7mPfTBWZfsnFMwdI5gkTn2LtdcdGevndgaf5SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:a5:42:cf:d7:97:4b:ae:3c:06:27:cd:fa:53:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Aug 14 18:01:29 2026 GMT
Not After : Aug 15 18:01:29 2026 GMT
Subject: CN=13536ce66e7a7b31a260e5a76a48634bfed3b97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:92:b8:79:b8:20:85:be:a1:82:c5:b2:ea:69:
15:14:14:01:42:fe:54:cf:2c:2a:94:c4:5e:8d:0e:
35:0f:91:26:82:7d:da:5b:36:1d:28:12:4f:60:dc:
2e:77:c9:84:0b:ef:c1:23:e2:f2:46:0f:eb:84:ff:
87:d3:2b:44:90:97:59:bd:56:21:7f:bf:f9:7b:17:
af:bd:82:22:56:f1:78:72:ed:22:04:dc:a0:82:c7:
c1:ff:f5:e7:98:f8:73:ac:dd:62:57:23:be:61:ce:
4e:b3:28:57:30:5c:c8:c0:6e:d2:42:91:46:a7:d2:
f3:97:30:2b:0c:db:66:fc:c4:e3:9e:1f:59:94:e3:
3a:e3:bf:c2:31:cd:ab:2f:f0:f8:51:a2:bd:82:cf:
45:57:e6:02:e9:f7:93:c3:8d:33:92:bf:c5:ca:95:
14:4d:9a:7b:e8:67:0b:f2:73:9b:2e:0e:60:be:e1:
79:f1:19:4e:a4:62:fb:de:8f:34:9e:74:83:09:17:
0f:f3:18:c8:0d:5c:50:03:10:be:92:e3:5c:5a:8d:
d0:b9:55:61:10:19:a8:9b:38:eb:3c:62:fc:97:75:
39:42:66:b3:4c:b0:f0:9c:14:3b:8f:da:e8:20:1e:
aa:e0:ed:c1:d6:64:f7:e2:f2:94:65:af:6d:41:8b:
6e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:53:6C:E6:6E:7A:7B:31:A2:60:E5:A7:6A:48:63:4B:FE:D3:B9:7D
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:43:16:06:50:e4:1b:a5:cb:eb:9f:aa:dc:87:f5:92:4f:b2:
8c:51:eb:ab:13:3e:b5:57:86:b1:6a:c5:7e:1d:9f:03:cc:6d:
6d:07:77:59:74:11:ef:f6:a3:fa:85:87:0e:4c:98:97:5e:e2:
7d:84:f4:ad:7f:2b:fa:88:7c:df:f2:05:12:55:ab:5f:e3:98:
da:44:a2:29:1c:f7:10:8c:ab:e1:be:f7:a9:e3:e2:27:cd:f1:
03:a9:1b:a3:aa:a2:ab:c3:d0:f0:08:d8:12:43:87:73:38:7e:
27:f7:1c:7b:78:6e:ae:3a:b5:ed:32:e5:91:66:51:b3:ef:b0:
d4:70:ff:ed:02:86:bb:fe:3d:b5:5d:41:19:11:53:f0:05:14:
68:a8:c4:ee:df:37:fd:a7:07:94:b3:f3:48:9f:4b:19:55:81:
5b:ae:0c:ce:78:40:c8:93:74:40:4c:2f:ea:27:64:43:25:cd:
ac:91:b3:5d:b9:45:55:98:2c:fc:a3:52:65:7f:61:8e:c6:a8:
c6:31:d9:10:2e:54:b7:fb:25:a6:f3:f0:0a:0d:6e:01:0e:24:
70:f4:8d:6d:12:8b:33:dc:0c:ec:e5:97:66:5f:d4:d2:e4:4b:
0a:d3:50:83:ec:0c:5a:01:b6:bf:89:f1:17:84:88:e1:aa:57:
fd:64:90:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:03 2026 by rpki-client