Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
File: DJvBsU8NllP1FOwWd3G3dVmsY8w.mft (raw, json)
Hash identifier: bgK4H2NARFBdYhSTWwq9ApfotrT+/2zQoGblN3jeJZQ=
Subject key identifier: 62:CA:FE:AB:7F:F4:31:CC:70:7B:AE:CB:CD:51:D3:64:3D:9F:57:31
Authority key identifier: 0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
Certificate issuer: /CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Certificate serial: 019D3940DB5F1C4A36999BE065D51DD1933E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:00:44 +0000
Manifest this update: Sun 29 Mar 2026 11:00:44 +0000
Manifest next update: Mon 30 Mar 2026 11:00:44 +0000
Files and hashes: 1: DJvBsU8NllP1FOwWd3G3dVmsY8w.crl (hash: eCMucDMeNtHvDbgQK5fLUbzEz3qn1nOaAv+pCONKOZ0=)
2: USkUk1O_55dbtUL8NgX3D9MuJlk.roa (hash: l0RD4Yub4vls7PSxviu1JxH4TvO1gXOCiQ61YNO4X7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:db:5f:1c:4a:36:99:9b:e0:65:d5:1d:d1:93:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Validity
Not Before: Mar 29 11:00:44 2026 GMT
Not After : Mar 30 11:00:44 2026 GMT
Subject: CN=62cafeab7ff431cc707baecbcd51d3643d9f5731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:f7:be:ac:f5:60:b6:39:2d:33:c2:8e:8f:
73:c6:d7:83:90:ca:b2:53:bb:89:dc:2f:3f:d5:47:
18:ce:c4:4d:3f:f7:07:33:30:74:42:e6:64:a4:bd:
59:09:8a:80:29:b5:1a:ba:cd:87:37:91:ce:96:3a:
f7:f4:63:96:6e:db:b0:a3:c0:f9:6e:d9:10:e8:65:
79:f3:df:21:1c:be:78:d5:f3:66:d3:c8:9a:a6:36:
7b:aa:83:12:23:cf:4d:2f:6c:7a:d7:d0:0f:77:49:
3a:f8:5a:62:44:ba:1e:87:be:6e:09:27:15:9e:15:
a9:8f:8e:4a:95:cb:9d:6c:97:86:bf:11:1b:e9:ac:
d3:84:ba:50:5f:e5:f5:20:26:1a:2e:d0:7b:d6:1f:
e4:70:db:98:5a:e9:ef:6b:e9:2e:be:9b:0a:8b:d3:
88:03:32:17:21:de:ef:66:82:d1:8c:ba:01:7e:07:
41:9a:9e:65:31:a8:48:6a:c1:bb:c5:3a:5c:96:36:
ce:7b:ef:f0:66:e1:f7:44:d5:61:84:30:2e:e8:2c:
aa:b3:3c:b0:ef:df:e8:e9:2c:3b:ab:e8:69:b7:cc:
ec:69:03:8c:92:b3:2d:ef:f8:6c:62:d6:c8:c0:6e:
58:4f:39:9e:0c:33:2f:eb:2a:56:e9:35:b1:3c:7d:
a0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CA:FE:AB:7F:F4:31:CC:70:7B:AE:CB:CD:51:D3:64:3D:9F:57:31
X509v3 Authority Key Identifier:
keyid:0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:05:01:4e:13:23:40:3c:df:6c:47:d6:87:32:16:51:cc:1c:
57:a7:22:a8:2d:bc:b0:de:66:3a:ef:04:d0:59:58:2f:30:84:
05:8a:ea:62:c8:36:45:0a:87:a2:1b:3f:79:39:a6:97:db:36:
e9:ca:34:d7:2b:44:19:0f:e0:ec:9f:ac:0f:21:01:70:07:3f:
82:1a:b3:09:56:f8:fb:7f:d5:28:22:2d:a3:bf:25:a5:c3:0a:
0a:88:4e:e3:a7:37:5b:60:28:4d:37:31:c7:a2:5c:92:70:63:
39:3a:5b:b9:1a:e1:fa:9c:68:bf:02:69:c8:9d:ab:34:73:54:
08:d1:0b:01:48:20:19:ad:59:1d:36:5b:61:22:3e:c9:b7:7f:
c1:a3:b0:a4:6f:de:66:57:50:fd:df:e2:54:dd:59:df:31:80:
8a:ca:12:ee:fc:0b:70:fc:9c:19:ca:4c:46:cc:db:19:94:9a:
70:9f:96:60:44:7b:3d:bf:13:4a:8e:e4:b6:54:c8:ca:78:5d:
32:fe:42:eb:7a:11:39:f8:86:b6:4d:38:e3:e2:fe:5b:92:3c:
a4:6c:ba:68:16:e5:17:d4:5b:f3:17:5c:65:7d:7b:e4:2d:86:
d2:2a:eb:99:d2:01:38:b0:bc:9b:24:76:0b:21:27:88:3d:6b:
b7:70:ae:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:18 2026 by rpki-client