Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
File: DjGYqYJ97q-rHSe1U3lPRLkabAY.mft (raw, json)
Hash identifier: KoPNsMCCvurLkUTxeBkMnz8A23u5qSPP/vsybrZiWFo=
Subject key identifier: 0E:18:48:9E:08:59:25:4B:F6:28:4B:38:A6:F8:B2:3E:FA:92:F6:83
Authority key identifier: 0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06
Certificate issuer: /CN=0e3198a9827deeafab1d27b553794f44b91a6c06
Certificate serial: 019D386630505BDFBEA6EEE1E66D0F1E181E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:01:54 +0000
Manifest this update: Sun 29 Mar 2026 07:01:54 +0000
Manifest next update: Mon 30 Mar 2026 07:01:54 +0000
Files and hashes: 1: B4xegdrDQXwXhNKCpBtNtcsBfAc.roa (hash: YIcVaV+2+ISJm+vQERcn8J2nPw2M/lckYq1wjorX5fA=)
2: DjGYqYJ97q-rHSe1U3lPRLkabAY.crl (hash: rHmTiLVszdgrdhzY7sfOsgWMPgAqbYYws3Nmq0Z97yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:30:50:5b:df:be:a6:ee:e1:e6:6d:0f:1e:18:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3198a9827deeafab1d27b553794f44b91a6c06
Validity
Not Before: Mar 29 07:01:54 2026 GMT
Not After : Mar 30 07:01:54 2026 GMT
Subject: CN=0e18489e0859254bf6284b38a6f8b23efa92f683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c2:6a:22:a4:26:46:5c:01:3f:0b:86:d3:20:
61:09:33:1f:61:33:81:a8:60:e1:d4:82:09:7d:1d:
48:e6:8a:f3:7d:08:24:8b:d0:57:70:e6:3d:b5:7e:
1d:f4:46:95:46:15:ff:0e:5c:c3:a1:cc:95:a0:a0:
d3:9c:4e:66:7a:d5:06:29:61:37:51:54:c2:85:ac:
8e:b7:51:32:4f:33:c2:08:73:b6:63:0f:13:2c:2a:
1c:be:a2:3b:04:ce:42:e8:4b:47:d9:83:57:86:82:
bf:ad:93:b3:97:b8:d5:d4:6e:be:9e:d0:7b:eb:c1:
1d:4a:2f:21:33:77:b6:3d:77:40:55:3b:a8:27:27:
62:a4:c3:89:19:7f:3a:66:f4:d0:c2:0a:9c:4a:53:
6f:d9:56:81:3a:fc:e8:0c:42:77:82:d1:91:3b:6a:
1c:79:fe:57:8b:8a:9e:22:13:67:17:8d:40:4f:fb:
b4:9f:ad:1b:29:5a:03:f7:db:79:44:e0:c2:94:b1:
dd:3c:91:5b:c8:a7:c1:66:a7:cf:7a:f5:29:ee:45:
bf:2a:23:3e:11:fd:9d:6e:86:db:e8:b6:06:23:73:
15:48:f7:1a:6a:39:58:0c:ba:38:7b:b1:d2:05:1a:
0c:53:e2:ee:f7:d4:b7:65:c4:0e:ae:74:ba:19:f2:
2a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:18:48:9E:08:59:25:4B:F6:28:4B:38:A6:F8:B2:3E:FA:92:F6:83
X509v3 Authority Key Identifier:
keyid:0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:1a:16:d5:95:4b:91:89:e1:46:51:e2:70:d9:f0:03:2f:5d:
eb:23:68:06:6b:c3:77:c3:a7:b8:09:3f:ec:15:ae:c1:51:cb:
62:aa:fb:9a:dd:d1:d6:59:2a:2d:c3:f3:ab:2b:f5:ba:75:84:
f4:ff:3f:4c:7e:57:11:60:cd:9d:ec:a5:05:00:fa:fa:46:f8:
16:fd:f5:17:55:c6:ca:fc:cb:d8:cc:5b:6e:af:59:20:85:5a:
51:77:5f:48:a9:6c:f4:e7:4c:64:92:ba:df:22:e8:82:33:fc:
6b:8b:7d:0e:dd:fb:d7:a4:1b:f3:54:e9:30:7c:db:b6:ed:00:
a5:8a:f7:6a:e5:42:0c:31:8e:95:56:87:ef:a2:35:12:3a:1b:
2d:c5:30:0e:ec:17:87:f0:b3:cc:40:ca:ac:dc:fe:f2:3e:20:
47:61:12:1d:32:f2:30:06:08:90:71:cf:ca:7f:04:78:7d:59:
18:b0:1a:f1:f6:75:3f:36:b4:01:58:f3:a8:6c:ae:b7:b8:00:
d4:5e:a9:bc:fe:50:81:4a:d6:e7:77:8d:4a:33:5e:02:dc:39:
f7:0a:ee:1d:ed:c4:ec:52:3b:1c:b4:2e:1a:e0:37:32:48:30:
38:f9:92:96:24:85:22:65:a1:9e:15:cc:66:eb:c6:9b:80:21:
e7:6d:a7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:35 2026 by rpki-client