Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
File: DjagX652BpH3DPtbT2JJlHq63oc.mft (raw, json)
Hash identifier: 9DP2qipQKcOX8HTn+qw30SahNOIPULjKMXQiPZmLLTo=
Subject key identifier: 47:FB:23:9A:E3:51:1D:FB:DA:15:0E:CF:CF:98:30:8B:57:F8:BE:2C
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Certificate issuer: /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial: 019CE591159A21D2EEBD4FCD08EFD0ABD514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
Manifest number: 1864
Signing time: Fri 13 Mar 2026 05:00:16 +0000
Manifest this update: Fri 13 Mar 2026 05:00:16 +0000
Manifest next update: Sat 14 Mar 2026 05:00:16 +0000
Files and hashes: 1: DjagX652BpH3DPtbT2JJlHq63oc.crl (hash: ASyCemLhaxDuNSne2q0NgmNyMUPc6pRaD/EetHMOfjQ=)
2: _j5362r7qv_9JgdkjeZ2Dr4Qsuk.roa (hash: XaswjrTxz0kpjxbDPMGjQHSDzCAPii9RYq3exV8GmFk=)
3: aezv-rxn8SkJT7jOMF8hl_lwOeo.roa (hash: jv2UN7Qe0W1KSoZ0p/rqmZ5wT1beFaF7g2jYyXMocTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:15:9a:21:d2:ee:bd:4f:cd:08:ef:d0:ab:d5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
Validity
Not Before: Mar 13 05:00:16 2026 GMT
Not After : Mar 14 05:00:16 2026 GMT
Subject: CN=47fb239ae3511dfbda150ecfcf98308b57f8be2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:81:6b:0e:3e:01:fe:8a:44:80:17:db:24:
12:fd:bc:6a:d1:28:cf:ca:cd:69:66:71:67:39:2e:
e0:4e:e2:17:9b:7a:54:b8:ea:20:be:5d:5b:44:f3:
8c:7a:47:13:03:dc:4c:a7:31:aa:20:3e:ef:34:29:
4f:24:00:df:21:b7:8d:9e:6e:04:e9:bd:80:c9:05:
c1:5d:0b:07:18:b0:ce:89:c8:f9:26:f1:25:1a:c6:
01:06:ee:59:b2:c3:77:f1:35:58:38:af:93:83:6f:
4d:6a:a1:b8:69:fa:24:67:68:fd:07:30:d6:f7:e4:
2d:a6:c1:0c:72:36:ac:57:fd:5e:e3:02:43:1e:cb:
d5:1b:14:8a:37:6c:c5:8d:77:97:37:0a:94:ef:4f:
ec:53:fa:64:92:66:9a:b1:a3:4c:8e:32:19:e3:11:
80:8e:ad:79:5a:be:7d:db:9b:fb:a1:bc:9a:7d:56:
6f:e5:52:60:66:b6:5c:14:3d:04:e1:4f:00:5a:47:
ee:9e:6f:e0:b2:d4:11:3a:1c:4d:be:a7:22:f1:b1:
75:2c:75:0d:cc:4c:d0:53:85:b7:ea:6a:e5:90:38:
9b:da:33:b8:f8:4b:fb:d4:e1:4d:8f:68:a7:50:79:
69:14:2d:6d:48:b2:95:1e:05:20:56:38:66:d9:38:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FB:23:9A:E3:51:1D:FB:DA:15:0E:CF:CF:98:30:8B:57:F8:BE:2C
X509v3 Authority Key Identifier:
keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:fa:9f:79:7d:84:2c:42:1f:a8:3e:b3:a0:fc:13:84:68:e4:
fd:87:0d:c4:cf:c9:37:f3:df:17:8c:fd:53:16:0c:f0:8e:fa:
19:c0:77:bf:fd:d3:d9:5a:9a:e4:21:12:16:11:73:65:88:54:
f3:97:56:30:58:0f:ca:b6:ee:30:20:57:b2:42:d4:49:4b:9c:
7e:65:7d:fc:04:f5:a1:f0:93:0b:fc:45:7a:d5:1c:1e:59:4f:
f0:b4:9b:8f:46:3b:15:0c:7d:9e:a9:2d:31:88:f1:31:15:b0:
cc:ac:e5:ae:9b:45:8c:27:8d:43:49:eb:6e:d5:60:94:63:55:
2b:a7:51:c0:17:61:77:b7:30:89:a8:89:85:a6:77:4c:78:c7:
14:ab:15:5d:f4:93:4c:a2:a5:2d:83:13:bf:74:96:6f:24:81:
c3:3b:0f:90:4c:ee:21:fd:a6:8f:9c:de:57:e8:e4:e0:52:35:
13:7e:bd:ca:7c:31:f5:22:fb:a6:d0:ff:56:29:b1:d9:85:62:
78:1c:fa:28:70:8e:c2:09:fc:a2:d7:c2:fb:29:fd:fe:50:52:
72:5f:36:b3:7e:74:ad:68:37:1a:02:a6:ba:32:7b:d5:d5:e1:
47:1a:a4:93:2e:d4:88:0a:2c:8f:28:ce:02:ca:d9:fc:85:1b:
8b:3c:50:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlkRWaIdLuvU/NCO/Qq9UUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMzZhMDVmYWU3NjA2OTFmNzBjZmI1YjRmNjI0OTk0N2Fi
YWRlODcwHhcNMjYwMzEzMDUwMDE2WhcNMjYwMzE0MDUwMDE2WjAzMTEwLwYDVQQD
Eyg0N2ZiMjM5YWUzNTExZGZiZGExNTBlY2ZjZjk4MzA4YjU3ZjhiZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9aBaw4+Af6KRIAX2yQS/bxq0SjP
ys1pZnFnOS7gTuIXm3pUuOogvl1bRPOMekcTA9xMpzGqID7vNClPJADfIbeNnm4E
6b2AyQXBXQsHGLDOicj5JvElGsYBBu5ZssN38TVYOK+Tg29NaqG4afokZ2j9BzDW
9+QtpsEMcjasV/1e4wJDHsvVGxSKN2zFjXeXNwqU70/sU/pkkmaasaNMjjIZ4xGA
jq15Wr5925v7obyafVZv5VJgZrZcFD0E4U8AWkfunm/gstQROhxNvqci8bF1LHUN
zEzQU4W36mrlkDib2jO4+Ev71OFNj2inUHlpFC1tSLKVHgUgVjhm2Ti2LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEf7I5rjUR372hUOz8+YMItX+L4sMB8GA1UdIwQY
MBaAFA42oF+udgaR9wz7W09iSZR6ut6HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGphZ1g2NTJCcEgzRFB0YlQySkpsSHE2M29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MzVkMzctMzkxYS00YWEyLWFjODMt
MGIzNmFjOGUyM2M3LzEvRGphZ1g2NTJCcEgzRFB0YlQySkpsSHE2M29jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MzVkMzctMzkxYS00YWEyLWFjODMtMGIzNmFjOGUyM2M3
LzEvRGphZ1g2NTJCcEgzRFB0YlQySkpsSHE2M29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvqfeX2E
LEIfqD6zoPwThGjk/YcNxM/JN/PfF4z9UxYM8I76GcB3v/3T2Vqa5CESFhFzZYhU
85dWMFgPyrbuMCBXskLUSUucfmV9/AT1ofCTC/xFetUcHllP8LSbj0Y7FQx9nqkt
MYjxMRWwzKzlrptFjCeNQ0nrbtVglGNVK6dRwBdhd7cwiaiJhaZ3THjHFKsVXfST
TKKlLYMTv3SWbySBwzsPkEzuIf2mj5zeV+jk4FI1E369ynwx9SL7ptD/Vimx2YVi
eBz6KHCOwgn8otfC+yn9/lBScl82s350rWg3GgKmujJ71dXhRxqkky7UiAosjyjO
AsrZ/IUbizxQDQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 13:19:35 2026 by rpki-client