Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
File: djLJDvGdK9b2aKSCbi0NFWNelH0.mft (raw, json)
Hash identifier: feEyZtR/Cviwl+iNirQCIlq1gAsKZfaDizpXegQKk6w=
Subject key identifier: 8C:69:D4:8E:BB:AA:D8:CA:0E:FA:41:C9:62:D9:83:30:9A:A6:60:EA
Authority key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
Certificate issuer: /CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Certificate serial: 019EB8EAC03C001DF5A4A2F8215A4AF800DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
Manifest number: 1959
Signing time: Thu 11 Jun 2026 23:00:52 +0000
Manifest this update: Thu 11 Jun 2026 23:00:52 +0000
Manifest next update: Fri 12 Jun 2026 23:00:52 +0000
Files and hashes: 1: djLJDvGdK9b2aKSCbi0NFWNelH0.crl (hash: M0H+xThs11zW0VSGgY7bsxSu+ppOsuEZGiwYyBpP+jQ=)
2: wh_PCPds1RwG_9tgWaa95lJUo8U.roa (hash: EEiVZ8EA5GDTXxuFdvW1T5/BRNMZ0ByEGciAuKi2zOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:c0:3c:00:1d:f5:a4:a2:f8:21:5a:4a:f8:00:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Validity
Not Before: Jun 11 23:00:52 2026 GMT
Not After : Jun 12 23:00:52 2026 GMT
Subject: CN=8c69d48ebbaad8ca0efa41c962d983309aa660ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:91:34:1c:19:57:16:70:3a:67:97:09:dc:82:
81:2c:35:3d:93:9c:e7:da:56:b8:33:e4:44:b4:63:
79:3d:13:60:60:af:cf:24:c2:a5:7c:a0:69:80:ea:
2a:2f:74:46:16:a1:a3:3e:f2:83:d1:1c:0a:2c:e5:
57:09:7c:d8:50:67:5e:00:51:5f:5b:31:76:ea:f1:
7b:fa:a8:30:3a:75:c2:17:9d:52:a0:94:6d:bf:0f:
e5:98:7b:38:c2:99:b9:59:ec:73:b7:34:fa:c9:43:
26:da:59:c0:9e:90:0c:e2:e9:68:75:09:fe:fa:99:
22:d6:54:7a:72:d4:74:4e:7f:b9:45:07:75:a8:86:
85:f3:dc:59:55:11:0d:1b:8b:d4:9f:0a:12:13:6b:
49:89:61:c6:89:fa:f1:38:4c:29:e0:d8:66:9e:08:
09:b8:d4:04:f3:ba:70:15:b7:4b:c9:6d:c3:06:1f:
e6:f2:ee:05:7f:12:c9:d5:10:52:76:b9:b8:62:73:
4f:1a:6d:b8:52:53:8a:4f:f8:fc:9d:2f:06:49:5d:
03:f2:c3:fe:ca:df:44:73:8a:ec:25:fb:c3:4d:0d:
51:1f:58:54:de:f3:a1:a6:fb:99:35:a4:b0:a8:31:
53:9e:f3:ab:e4:e2:4e:fa:9d:59:d1:7a:5a:58:c8:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:69:D4:8E:BB:AA:D8:CA:0E:FA:41:C9:62:D9:83:30:9A:A6:60:EA
X509v3 Authority Key Identifier:
keyid:76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7f:77:87:1b:9c:db:17:d8:b6:6a:be:8a:b1:40:1b:db:41:
fb:28:46:bb:65:14:37:06:44:42:24:69:7b:7a:04:de:89:05:
dc:80:97:64:0e:1b:9a:9d:fc:9b:10:97:9d:41:cf:61:ae:1a:
42:36:f2:38:0b:5e:a4:38:ef:87:ba:f9:10:48:62:8a:5d:b8:
41:2d:95:1f:18:96:85:81:45:37:b8:23:ca:fe:d6:1d:35:e4:
f2:37:21:64:db:e5:07:7c:de:4f:5b:94:ab:19:cf:0d:40:9e:
72:24:e6:a9:ab:a9:98:e9:b9:32:90:17:99:2c:a3:ac:82:29:
1d:52:5e:85:fd:d9:d5:04:e8:2f:51:27:86:06:c0:0d:bd:b4:
ac:6b:c8:30:f2:12:39:c6:0a:76:0c:32:f7:a4:11:7f:b9:d5:
13:8f:0c:fb:26:5e:e3:8d:48:48:6f:f2:90:db:33:34:07:23:
35:00:2b:db:5f:05:a4:68:8e:e8:60:bb:0a:18:70:b9:a1:82:
ea:a8:9f:3f:a0:07:9f:cf:00:16:42:55:cd:15:c9:3e:ee:6a:
a3:27:25:06:39:b7:7b:49:3c:cb:41:cc:fa:81:1e:2b:91:02:
45:45:9c:ce:93:42:c5:0c:50:3a:b1:2f:b5:b2:e5:a4:33:d1:
02:7b:5d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:40:51 2026 by rpki-client