Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
File: DJ8RVKmhXVqDqamBenJL_FOdtZY.mft (raw, json)
Hash identifier: bRtKu3jrhFY4mTuFdJgXBPUA9fSvGZqQ5/x3jG2LC9I=
Subject key identifier: 3E:E1:C2:41:FD:CD:38:D4:CD:96:6A:C4:B9:61:DF:97:B1:9B:ED:3C
Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
Certificate issuer: /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Certificate serial: 019D37F7AA1D49BFC9450EA17BCA393BA176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:01:10 +0000
Manifest this update: Sun 29 Mar 2026 05:01:10 +0000
Manifest next update: Mon 30 Mar 2026 05:01:10 +0000
Files and hashes: 1: 4qZtNptb8ER3904DdA6MFe8pZsU.roa (hash: Lxa0NTdMnJxLEjdaVFMPjQXrKW0qd4O0NLrjMIPI/ME=)
2: DJ8RVKmhXVqDqamBenJL_FOdtZY.crl (hash: 3xuAv7Rtw9VCMK/zBEyRh8Sz1YySFTcCeiv0syX/kjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:aa:1d:49:bf:c9:45:0e:a1:7b:ca:39:3b:a1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Validity
Not Before: Mar 29 05:01:10 2026 GMT
Not After : Mar 30 05:01:10 2026 GMT
Subject: CN=3ee1c241fdcd38d4cd966ac4b961df97b19bed3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:5c:28:6d:74:cb:67:5e:2f:f9:34:e6:32:
7a:98:68:0f:43:3e:c3:bc:96:cc:7e:79:c6:cf:a4:
77:6e:4d:13:84:18:0f:65:68:a7:e5:b2:f0:11:83:
40:3c:82:27:ff:05:0c:c1:e8:b7:62:b8:48:33:85:
b6:6d:bb:bf:3b:ce:15:6a:a7:a4:d2:b8:4a:d3:d2:
7c:58:28:33:2e:61:57:74:5e:f8:f3:51:5d:e1:4f:
17:4d:50:db:b4:7b:b0:41:bb:14:33:a1:3d:56:b0:
be:d9:cf:7e:8e:ba:8f:7c:4e:22:aa:be:d3:b9:49:
6a:5a:59:d9:ad:8a:b9:38:8e:e1:28:1c:cd:5e:86:
22:60:ef:9f:30:ec:10:0f:8d:17:bc:7a:c9:39:55:
c6:7d:e1:23:ab:97:3f:25:8b:9d:54:c6:87:a1:4c:
bb:ce:06:be:5e:b9:c1:2a:63:f5:f1:86:9f:bf:2c:
b0:f2:5f:a7:6f:eb:d5:0b:2f:45:06:23:7b:14:a4:
c9:04:55:b4:72:d1:34:27:29:f4:2e:9a:4b:b9:eb:
54:7f:22:c8:12:a2:5e:d1:74:de:1b:e2:7b:b0:44:
34:09:0f:d1:b4:f7:86:4a:56:76:1b:a9:d2:fc:09:
f5:7b:e5:44:b9:61:e0:a5:26:b8:bd:c9:4c:b0:e6:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E1:C2:41:FD:CD:38:D4:CD:96:6A:C4:B9:61:DF:97:B1:9B:ED:3C
X509v3 Authority Key Identifier:
keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7b:f3:35:34:37:48:4f:4c:e7:e8:b7:bd:15:6f:44:f1:3c:
51:8f:10:4e:88:89:c9:02:9f:03:cf:02:24:2f:fe:47:20:f0:
bb:b8:cc:1f:42:11:c3:ef:b3:34:77:ba:46:b1:5c:4f:53:f7:
b2:8f:2b:8d:41:41:1a:b7:1e:4f:12:18:b2:7f:e7:c1:ad:80:
e3:11:fb:7e:2e:69:0e:e6:17:6e:82:97:c5:ba:cf:16:85:58:
0f:30:93:92:fe:26:7b:0d:64:19:dc:e9:14:f5:f6:ff:3b:00:
e7:02:68:a9:86:99:3c:3e:51:85:53:24:59:9b:45:86:e1:88:
72:55:18:33:b3:03:8f:c3:54:a4:33:53:bb:9c:a2:f4:38:91:
1d:85:ae:f2:bf:bf:df:97:8c:f4:a4:44:8b:34:c9:7b:5a:5d:
dd:34:e7:c1:0c:68:22:14:14:5b:b4:d4:b1:7e:46:b5:eb:c2:
f1:75:e3:d5:90:31:58:bd:fc:8e:43:c1:1f:5c:ea:c5:dc:c9:
75:be:f1:7e:0b:28:57:3f:d8:47:cc:52:06:7c:28:e8:55:6c:
28:c8:5f:65:24:99:99:79:68:5f:df:6c:9f:12:9d:d1:8e:3f:
0f:3a:ec:8a:f0:1e:4a:87:5d:53:8f:cc:38:f0:c4:45:a8:1f:
58:a8:20:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:11 2026 by rpki-client