Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
File: DjagX652BpH3DPtbT2JJlHq63oc.mft (raw, json)
Hash identifier: 5hEkMf55pkeXjG6egn3V95a6IwywohuhZor3gF+K9uk=
Subject key identifier: B7:1D:4F:F3:FF:B2:60:E5:E6:6D:4B:DE:83:E6:2E:DF:4E:A3:EE:24
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Certificate issuer: /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial: 019DD087C95E48D52E91264F2CCA42958F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 20:00:52 +0000
Manifest this update: Mon 27 Apr 2026 20:00:52 +0000
Manifest next update: Tue 28 Apr 2026 20:00:52 +0000
Files and hashes: 1: DjagX652BpH3DPtbT2JJlHq63oc.crl (hash: FPHGp5IuqTWidkvHP7rX8+hS8UD2pKz+jgw5TtqB4yY=)
2: GBiCQBi8m4-enxXZqw25PlMWPLQ.roa (hash: gTvW1OlNiz8hjMHgTUjrVGo7tVYa1kNXNiD2T8nmxFU=)
3: _j5362r7qv_9JgdkjeZ2Dr4Qsuk.roa (hash: XaswjrTxz0kpjxbDPMGjQHSDzCAPii9RYq3exV8GmFk=)
4: aezv-rxn8SkJT7jOMF8hl_lwOeo.roa (hash: jv2UN7Qe0W1KSoZ0p/rqmZ5wT1beFaF7g2jYyXMocTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:c9:5e:48:d5:2e:91:26:4f:2c:ca:42:95:8f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
Validity
Not Before: Apr 27 20:00:52 2026 GMT
Not After : Apr 28 20:00:52 2026 GMT
Subject: CN=b71d4ff3ffb260e5e66d4bde83e62edf4ea3ee24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:d7:76:a2:43:da:21:00:64:81:bb:7c:d1:44:
56:de:d3:9d:33:4b:32:22:f8:3e:af:ef:7a:3f:23:
26:d8:08:e9:56:1e:f0:4c:1a:2f:01:04:58:5f:2b:
2c:01:cb:b6:c5:b7:15:f1:bd:7b:b4:4b:70:12:57:
e3:41:14:b9:bc:40:75:17:52:11:b9:95:9b:e2:f5:
d3:f9:b6:b5:0f:5e:fc:90:a4:13:05:53:92:b4:c9:
11:11:27:c9:fc:96:cb:ec:06:36:09:cb:93:0f:d4:
39:51:af:6f:16:bf:1e:a8:ad:bd:4b:97:5d:bd:d5:
68:5d:1f:94:08:10:fc:18:bf:7f:04:60:02:07:a3:
b4:35:1b:0c:84:f3:fd:5b:91:0e:89:5e:4c:4c:97:
e2:1a:f0:a7:50:0f:37:62:a1:a7:be:38:4d:b2:9a:
e9:b9:73:c2:2a:96:1b:94:8b:97:4b:d2:a2:8e:f1:
33:ec:60:f5:37:ed:19:ba:2c:91:6f:d1:d6:e4:26:
d3:35:10:1d:1b:33:8a:71:2c:a3:09:78:be:06:33:
1e:54:69:65:fa:fc:38:01:8a:66:cc:60:a5:f4:5b:
93:f2:83:b3:ae:de:71:cf:e0:62:47:68:c5:56:aa:
04:79:b8:69:76:79:c1:04:df:00:bf:c8:e2:e7:5f:
21:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1D:4F:F3:FF:B2:60:E5:E6:6D:4B:DE:83:E6:2E:DF:4E:A3:EE:24
X509v3 Authority Key Identifier:
keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:75:e4:fa:1a:fd:99:43:f2:10:39:b3:68:60:9d:de:45:eb:
1d:2a:d4:8b:c7:04:78:aa:02:5d:c0:4c:7f:c7:9a:be:00:30:
c3:4d:68:c5:af:82:db:8b:a6:87:2d:4b:0c:f8:4b:b4:c7:91:
bb:7c:c0:c8:6a:ca:2a:12:11:fa:ba:f3:7b:f5:2c:74:6f:f5:
c1:ab:8f:10:3c:9f:ef:18:0e:5b:a8:d7:c3:0b:b5:e4:0e:5f:
a9:84:86:e1:04:5f:81:1b:d1:83:0e:e2:7c:78:68:30:9a:59:
24:5c:ad:f8:e5:7c:3b:34:4a:39:c7:d6:71:c8:b9:1a:48:b4:
fc:88:b8:1c:7d:d2:6e:16:58:73:34:8b:97:71:bc:4f:15:1a:
22:b3:84:6f:0b:a5:24:03:15:8f:ea:34:2d:89:70:34:84:08:
3d:2b:a7:7b:c3:8c:5a:c0:49:9e:e2:e2:e5:e4:8d:9f:f7:e8:
f3:90:4e:a1:b8:5b:c4:a4:b6:58:b5:48:1f:34:2f:2c:ce:ca:
56:42:e7:83:75:82:81:69:ce:44:d5:1e:b4:4f:70:75:09:b4:
ae:38:88:d9:99:70:5c:7e:52:5c:ac:30:f1:55:60:2e:c1:b9:
79:b8:db:7c:b3:7c:d4:88:d1:52:8b:fd:5f:5d:cb:af:f0:e8:
d0:e8:92:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:44:56 2026 by rpki-client