
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
File: djNetjP3aUK76Z8Smh64ik1z_Hw.mft (raw, json)
Hash identifier: 9SNlvAxYjvcrqsIyDLSWDQTddswQ5YmZ1WsxDmPc9DI=
Subject key identifier: AB:2F:BE:0E:AE:64:C3:71:D1:61:16:5C:5F:A5:FC:D4:54:5F:5A:4D
Authority key identifier: 76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
Certificate issuer: /CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Certificate serial: 019D39AEC2C6E5420CBEC6CCB526370A9FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 13:00:47 +0000
Manifest this update: Sun 29 Mar 2026 13:00:47 +0000
Manifest next update: Mon 30 Mar 2026 13:00:47 +0000
Files and hashes: 1: djNetjP3aUK76Z8Smh64ik1z_Hw.crl (hash: u3/z/yiZFPireepRhYJ+JiaWe+H2bsc/vj7ES9zYJL0=)
2: vc11EuHx6MJU_mO-zji1HAUTYuE.roa (hash: zhFF5QQjqlWRX/BGdtV5T8ItAEzBBJfA2vn8FYdOVvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:c2:c6:e5:42:0c:be:c6:cc:b5:26:37:0a:9f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Validity
Not Before: Mar 29 13:00:47 2026 GMT
Not After : Mar 30 13:00:47 2026 GMT
Subject: CN=ab2fbe0eae64c371d161165c5fa5fcd4545f5a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:94:d6:d2:15:6d:66:a7:14:6c:14:44:15:
bf:db:f1:9b:69:71:b9:ad:bd:c2:24:8b:4b:3c:be:
4c:9a:17:fb:3b:57:b3:e3:46:ad:cf:2a:92:61:d3:
72:96:73:5a:f6:f7:08:b9:71:d8:75:c0:5d:82:95:
db:87:ff:ed:c8:32:2c:63:34:3a:85:f4:2b:74:f4:
da:c0:20:47:50:89:c3:97:ba:de:bf:d6:38:77:05:
dd:f7:c2:c6:55:a3:e6:61:8d:d3:5e:a3:48:f2:66:
f8:c0:58:66:e3:5f:7e:ff:c6:25:3f:18:99:eb:fe:
b0:f9:3b:68:a0:3c:fe:76:72:85:28:bf:03:91:8a:
e5:73:41:67:52:52:df:7b:b1:a0:48:bf:6d:04:93:
7c:95:84:d9:51:58:0d:44:61:03:b3:16:64:26:52:
ae:cb:f9:cd:07:ed:b1:11:4a:79:6d:71:7b:95:03:
2d:d6:c9:6e:aa:9e:bb:5e:ae:8d:38:f8:66:63:55:
83:1a:62:b2:d1:26:05:c3:4b:40:bb:b3:6b:9a:de:
69:ea:5e:c6:7b:2d:2a:99:12:40:06:6e:64:40:eb:
e3:64:f3:37:7d:01:e7:ba:42:4d:08:5d:ee:05:45:
75:5a:97:e2:81:11:24:65:ae:a8:68:be:4f:01:ca:
8f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2F:BE:0E:AE:64:C3:71:D1:61:16:5C:5F:A5:FC:D4:54:5F:5A:4D
X509v3 Authority Key Identifier:
keyid:76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2b:c8:a8:d0:c6:65:dc:46:d3:7e:f2:db:e0:4a:36:36:5e:
75:29:e7:b9:42:58:00:ec:4c:82:64:bd:8a:73:fc:58:b7:04:
a6:82:e9:bd:1e:30:67:79:f9:89:ad:16:90:ea:62:53:ab:d0:
42:11:a2:6d:e6:31:8b:bc:a4:4e:7b:10:ea:bc:d7:b3:a7:97:
a5:91:39:22:11:5e:b4:c8:e6:3b:e4:93:df:d9:a3:57:14:ed:
bd:08:3a:9b:1a:13:99:f0:b0:29:50:c8:e9:f5:6f:11:47:2e:
48:53:5e:08:ae:a8:e8:0d:1b:07:34:ac:fa:6a:16:1e:7c:f0:
39:9d:4d:02:b0:fc:83:ee:70:15:3e:db:1a:ed:17:7a:cb:b3:
a6:71:a6:77:b9:80:a9:10:1f:61:af:31:bf:95:e1:6c:78:d2:
2d:ac:85:f6:4f:cc:bb:c4:1d:dc:22:43:97:1e:f2:71:57:61:
8b:fd:c3:36:5c:e0:7a:ad:fb:48:71:a5:ae:bc:6d:9f:a2:7d:
30:90:95:2c:3a:36:42:b0:42:c5:a3:42:d9:f7:25:4a:33:65:
0d:ba:33:0f:07:d4:17:9a:d7:66:ef:6d:22:f9:36:b4:34:50:
5c:0a:d5:94:85:f7:fa:8e:ec:26:eb:94:a4:a9:24:d1:7e:62:
61:35:ad:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:06:10 2026 by rpki-client