Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
File: DjagX652BpH3DPtbT2JJlHq63oc.mft (raw, json)
Hash identifier: hV7Sjbp7whcoK4j814WlTndToPXBe8rLsou8POh/PGg=
Subject key identifier: 20:AF:A7:1C:6E:9F:E6:D8:1B:CB:C4:A1:F1:40:A4:76:C5:D4:33:72
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Certificate issuer: /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial: 019EB8456E7945680562C3C41D056F5CF39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 20:00:18 +0000
Manifest this update: Thu 11 Jun 2026 20:00:18 +0000
Manifest next update: Fri 12 Jun 2026 20:00:18 +0000
Files and hashes: 1: DjagX652BpH3DPtbT2JJlHq63oc.crl (hash: nbJXbVyy3TbwkJNfvZnRys6hNijRZt2ZoQtusb2wwdg=)
2: GBiCQBi8m4-enxXZqw25PlMWPLQ.roa (hash: gTvW1OlNiz8hjMHgTUjrVGo7tVYa1kNXNiD2T8nmxFU=)
3: _j5362r7qv_9JgdkjeZ2Dr4Qsuk.roa (hash: XaswjrTxz0kpjxbDPMGjQHSDzCAPii9RYq3exV8GmFk=)
4: aezv-rxn8SkJT7jOMF8hl_lwOeo.roa (hash: jv2UN7Qe0W1KSoZ0p/rqmZ5wT1beFaF7g2jYyXMocTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:6e:79:45:68:05:62:c3:c4:1d:05:6f:5c:f3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
Validity
Not Before: Jun 11 20:00:18 2026 GMT
Not After : Jun 12 20:00:18 2026 GMT
Subject: CN=20afa71c6e9fe6d81bcbc4a1f140a476c5d43372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ee:84:e5:de:28:c5:96:b8:c4:0d:7a:59:74:
b9:69:dd:f5:9b:68:4d:3f:e6:37:61:c5:8c:bf:eb:
f8:4b:fc:50:c2:b1:86:5d:00:97:02:a8:00:92:3e:
c9:c5:0b:67:34:0b:b7:e6:a5:9c:bf:ca:6f:a0:54:
f1:a4:18:b2:4e:34:2b:bd:6d:ba:dd:79:de:97:e9:
84:ff:cd:e2:4a:1a:73:ec:b9:4d:af:7a:ef:a7:3a:
46:04:97:e0:a1:3a:9a:9b:e7:3f:98:be:75:36:e1:
78:e2:2a:86:7a:19:82:44:d5:87:c7:d8:da:5a:5e:
21:32:b8:66:71:b9:65:e0:90:e9:8c:24:6b:23:6d:
20:eb:49:8c:14:eb:38:bb:76:70:b8:d4:4a:06:e1:
33:8e:f5:20:e7:be:22:c5:fe:f4:41:f6:2a:f9:fb:
39:c0:d7:e8:60:a9:4d:1b:35:23:87:88:c8:14:0c:
cb:7c:60:2c:fd:46:ea:59:95:9f:c7:34:88:ff:3b:
8b:a6:95:09:95:c1:13:d7:b9:51:94:b6:0c:cd:b5:
46:ef:db:d5:0a:04:d0:b7:8b:d0:40:13:d8:84:03:
73:69:a7:a2:07:3e:8d:99:3f:ea:14:3d:3c:c0:34:
f7:52:13:34:ff:08:74:b0:fb:6c:9b:ca:7a:23:9b:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AF:A7:1C:6E:9F:E6:D8:1B:CB:C4:A1:F1:40:A4:76:C5:D4:33:72
X509v3 Authority Key Identifier:
keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:4d:1c:ea:8a:b8:d6:5e:94:f5:a2:95:b2:15:ac:f5:ee:35:
c6:af:24:53:21:09:c2:9d:5b:e4:a9:af:a2:46:5a:71:9c:23:
40:0a:5c:7d:b3:9f:ea:7d:e2:2b:0e:a0:af:35:de:73:86:df:
80:37:76:3b:2a:8d:ad:91:02:0b:1b:0d:40:d9:77:a9:34:0c:
93:df:2f:c3:ed:99:a5:d0:3b:2e:7d:44:fc:30:09:77:f8:cf:
53:53:b4:6b:c4:87:5f:27:fb:df:f0:7d:ed:cb:ee:05:f5:71:
da:01:42:90:ed:52:47:ff:ab:49:0c:b2:cd:6a:12:58:ed:c9:
42:8d:e7:f9:35:97:ec:70:23:17:7e:1d:f2:c7:9a:d2:e8:bc:
44:c9:80:74:72:f9:75:f0:cf:7b:14:ba:5b:d6:4e:80:d4:bc:
25:b5:1e:34:8e:2d:65:d0:31:1c:80:05:35:19:d2:08:12:66:
91:13:d7:56:f7:04:02:c1:a1:a7:3f:99:0f:44:35:48:21:4f:
5a:c1:3d:24:0d:e4:e8:97:4b:b7:d6:39:38:ce:2c:a8:e5:2e:
81:58:91:04:1e:71:61:d6:40:a7:68:9d:09:d2:57:1c:a2:d6:
1f:a1:b8:1c:72:11:77:ce:0a:23:5b:4d:5a:07:d0:cf:41:73:
f5:9f:61:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:22:57 2026 by rpki-client