Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
File: DJ8RVKmhXVqDqamBenJL_FOdtZY.mft (raw, json)
Hash identifier: /O2RaFxCf8qJHiCcTkPpiXfxLKEN+y8FUeYV71/5MJQ=
Subject key identifier: 1D:6D:F8:5C:5C:AE:88:EE:5D:8B:74:55:91:0C:4D:E0:CC:F0:74:86
Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
Certificate issuer: /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Certificate serial: 01A036A60C4E298EE9642727AD540BEC7412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
Manifest number: 1A1D
Signing time: Tue 25 Aug 2026 02:00:46 +0000
Manifest this update: Tue 25 Aug 2026 02:00:46 +0000
Manifest next update: Wed 26 Aug 2026 02:00:46 +0000
Files and hashes: 1: 4qZtNptb8ER3904DdA6MFe8pZsU.roa (hash: Lxa0NTdMnJxLEjdaVFMPjQXrKW0qd4O0NLrjMIPI/ME=)
2: DJ8RVKmhXVqDqamBenJL_FOdtZY.crl (hash: ZIpjH57P1ATUNn3Bz+Zrs3hPbP/TY7wOUXUlkQtXm+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:36:a6:0c:4e:29:8e:e9:64:27:27:ad:54:0b:ec:74:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Validity
Not Before: Aug 25 02:00:46 2026 GMT
Not After : Aug 26 02:00:46 2026 GMT
Subject: CN=1d6df85c5cae88ee5d8b7455910c4de0ccf07486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d0:a6:c7:13:0b:b7:04:e8:74:65:c9:84:bf:
39:bf:64:c3:8f:a6:93:d7:e3:b1:a1:96:12:d7:93:
cd:ab:05:5e:55:32:c6:c6:d5:76:6a:ab:0e:d5:13:
3e:1d:6b:ce:a5:30:ab:f4:86:ed:0a:c8:8f:82:7b:
12:a2:b4:5b:8e:83:c5:47:4e:f2:24:72:fa:56:59:
12:f1:0a:f5:5f:ca:1b:59:8d:da:35:c2:12:1f:cc:
73:27:3a:db:81:8f:9e:75:e1:75:b6:55:6a:17:93:
5f:41:cb:d0:42:49:0c:03:6f:4c:73:06:30:46:11:
4c:15:04:1b:86:64:3d:ba:8d:f3:85:e6:41:16:21:
ea:41:cf:7b:51:70:69:29:fb:f1:b5:98:40:f8:6b:
e8:7a:cc:55:09:a6:87:5c:b0:4c:e5:0d:43:70:d3:
9c:54:08:8d:8b:4b:b6:4d:f4:32:ac:2c:57:1a:cc:
31:4b:46:92:1d:f7:e8:ab:df:8b:4b:6b:0b:c4:ca:
31:f2:f5:b3:59:93:55:6f:59:b4:d1:5b:74:73:1d:
7b:82:5c:1b:f9:10:1e:4b:b0:14:58:b4:da:0e:b8:
8b:a2:a9:28:e2:bf:3f:74:69:50:72:c1:03:f6:75:
52:ac:ae:79:15:1d:05:b5:f5:4f:15:3d:41:19:66:
75:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6D:F8:5C:5C:AE:88:EE:5D:8B:74:55:91:0C:4D:E0:CC:F0:74:86
X509v3 Authority Key Identifier:
keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e4:f2:eb:b1:f0:bd:88:8b:ba:7f:1e:66:4a:a7:32:3c:af:
cb:98:9c:0a:16:80:e5:31:a3:bc:58:ac:cb:3d:57:e3:a0:bb:
69:eb:51:38:6a:6d:a1:7b:9e:8c:4f:0b:5e:17:37:75:02:1c:
35:e4:3f:ef:4f:02:ce:a5:21:79:a2:f4:56:8e:11:0d:d3:28:
a1:db:da:df:47:4f:c1:14:04:f6:eb:36:9d:3f:2a:8a:26:5c:
6c:18:db:f5:0b:27:53:de:ed:3c:a5:0d:6d:20:93:38:a3:47:
72:da:e1:b9:e8:59:bc:f8:80:45:09:5f:15:99:7e:bb:98:65:
f9:47:10:f4:ef:92:79:a8:13:3a:bd:d1:f0:5f:ff:da:77:9e:
d8:8c:62:2e:a2:28:3d:fb:8a:a3:09:3c:e5:ca:97:d4:a3:38:
56:1e:b6:66:28:b0:1a:e1:f5:09:cb:bb:63:e4:2a:59:a1:02:
c6:35:6c:d1:ff:96:e2:75:90:95:1d:6c:f4:61:0b:b2:3d:59:
e6:2e:da:85:76:66:fe:e3:24:04:63:d3:d4:38:ac:b4:e2:c6:
bb:a9:35:b2:a7:38:bf:08:fd:a6:a1:6a:24:39:8c:d8:19:28:
f5:34:19:b4:64:75:8e:4f:9f:e3:bf:89:f7:ec:94:c0:f1:32:
4e:83:c1:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA2pgxOKY7pZCcnrVQL7HQSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOWYxMTU0YTlhMTVkNWE4M2E5YTk4MTdhNzI0YmZjNTM5
ZGI1OTYwHhcNMjYwODI1MDIwMDQ2WhcNMjYwODI2MDIwMDQ2WjAzMTEwLwYDVQQD
EygxZDZkZjg1YzVjYWU4OGVlNWQ4Yjc0NTU5MTBjNGRlMGNjZjA3NDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdCmxxMLtwTodGXJhL85v2TDj6aT
1+OxoZYS15PNqwVeVTLGxtV2aqsO1RM+HWvOpTCr9IbtCsiPgnsSorRbjoPFR07y
JHL6VlkS8Qr1X8obWY3aNcISH8xzJzrbgY+edeF1tlVqF5NfQcvQQkkMA29McwYw
RhFMFQQbhmQ9uo3zheZBFiHqQc97UXBpKfvxtZhA+GvoesxVCaaHXLBM5Q1DcNOc
VAiNi0u2TfQyrCxXGswxS0aSHffoq9+LS2sLxMox8vWzWZNVb1m00Vt0cx17glwb
+RAeS7AUWLTaDriLoqko4r8/dGlQcsED9nVSrK55FR0FtfVPFT1BGWZ1iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1t+FxcrojuXYt0VZEMTeDM8HSGMB8GA1UdIwQY
MBaAFAyfEVSpoV1ag6mpgXpyS/xTnbWWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREo4UlZLbWhYVnFEcWFtQmVuSkxfRk9kdFpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMGQzZDctMWMzNS00N2NiLTg1MDQt
YjlkYmE2MzliMWIxLzEvREo4UlZLbWhYVnFEcWFtQmVuSkxfRk9kdFpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMGQzZDctMWMzNS00N2NiLTg1MDQtYjlkYmE2MzliMWIx
LzEvREo4UlZLbWhYVnFEcWFtQmVuSkxfRk9kdFpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+Ty67Hw
vYiLun8eZkqnMjyvy5icChaA5TGjvFisyz1X46C7aetROGptoXuejE8LXhc3dQIc
NeQ/708CzqUheaL0Vo4RDdMoodva30dPwRQE9us2nT8qiiZcbBjb9QsnU97tPKUN
bSCTOKNHctrhuehZvPiARQlfFZl+u5hl+UcQ9O+SeagTOr3R8F//2nee2IxiLqIo
PfuKowk85cqX1KM4Vh62ZiiwGuH1Ccu7Y+QqWaECxjVs0f+W4nWQlR1s9GELsj1Z
5i7ahXZm/uMkBGPT1DistOLGu6k1sqc4vwj9pqFqJDmM2Bko9TQZtGR1jk+f47+J
9+yUwPEyToPBZQ==
-----END CERTIFICATE-----
Generated at Tue Aug 25 05:42:52 2026 by rpki-client