Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
File: dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft (raw, json)
Hash identifier: uRXapZNvGHEOYCBhxRhGVcIHxfl20LgCG/pPjdOWig8=
Subject key identifier: E4:86:D4:12:60:02:EF:12:80:3B:46:A5:30:A7:7C:2C:23:36:47:62
Authority key identifier: 74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9
Certificate issuer: /CN=749d8a4328930b938fa86018b1e447ee4d8da8f9
Certificate serial: 01A01B9CA16D8CC50D7C158E30C6DD309CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
Manifest number: 038A
Signing time: Wed 19 Aug 2026 20:00:44 +0000
Manifest this update: Wed 19 Aug 2026 20:00:44 +0000
Manifest next update: Thu 20 Aug 2026 20:00:44 +0000
Files and hashes: 1: 1-mmnoNOS11tga2Q29yD5BQAuFLE.roa (hash: GOq5nJwjD0VCVYVCda8zJe1uGhLFpPTQrRyVuZj7aM8=)
2: dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl (hash: GRlKRCJ5AN/pMH8X/E9NVlh1hKb68THMb5viOT+Em68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1b:9c:a1:6d:8c:c5:0d:7c:15:8e:30:c6:dd:30:9c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749d8a4328930b938fa86018b1e447ee4d8da8f9
Validity
Not Before: Aug 19 20:00:44 2026 GMT
Not After : Aug 20 20:00:44 2026 GMT
Subject: CN=e486d4126002ef12803b46a530a77c2c23364762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4f:c2:e2:cd:33:d4:8b:76:0e:fe:50:88:ef:
1b:cc:c5:15:1c:3d:68:f7:4f:a7:ca:f0:c4:24:f0:
fe:12:77:7a:58:85:96:2f:b7:4c:85:c2:44:b1:b2:
b6:00:cf:1b:0c:fd:7d:2a:04:cf:9c:b3:48:f3:8c:
4b:4a:37:19:b6:cd:aa:93:0a:f0:b0:9c:c7:3d:4b:
cb:d7:71:90:dd:f9:e2:eb:e1:11:b5:9f:cc:a7:a4:
63:bf:e6:41:85:f1:36:ff:c6:79:4a:e2:3d:5f:e8:
e6:d7:7d:4b:f9:22:f1:ef:64:fe:c2:6d:b7:1a:08:
ab:b5:fe:66:c2:95:8d:f2:8c:80:14:63:ab:c1:9d:
88:d0:1c:a0:c1:63:02:95:63:04:11:2c:a6:77:83:
1c:d0:1b:9a:bb:fd:af:a4:01:5b:8a:b3:68:d6:68:
03:d1:40:77:bd:1b:16:b1:0c:9e:8e:b4:8c:13:a6:
30:a0:ce:b9:d6:3a:c9:89:66:08:f0:8c:04:e4:33:
cf:21:8d:3a:22:2d:5a:d8:2a:19:66:65:f6:1c:3f:
29:fa:3c:86:75:68:ed:76:6c:62:9f:8f:72:b5:d4:
8e:50:ec:88:1c:9c:23:be:e3:c2:fa:7a:90:14:30:
3c:4e:24:b8:6e:e4:d2:bc:66:30:07:75:ef:92:bf:
46:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:86:D4:12:60:02:EF:12:80:3B:46:A5:30:A7:7C:2C:23:36:47:62
X509v3 Authority Key Identifier:
keyid:74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c2:00:b5:1b:be:40:1e:6d:2a:e4:07:75:34:63:3e:c4:5c:
8e:79:df:78:62:91:ab:1f:1c:c9:f6:01:fb:88:09:d1:fd:9d:
11:47:b2:8d:4a:a0:d1:6c:ea:0c:69:e2:f2:32:4b:d8:ce:f3:
3b:9b:86:cc:ce:5b:cd:ef:93:63:63:df:81:88:32:cd:b6:7b:
4e:15:03:49:95:8c:93:ed:64:a4:e2:ac:0d:b6:8c:ea:9c:1e:
60:6e:25:68:38:07:ee:4b:c4:f4:40:72:ec:a9:7c:af:8d:e4:
d1:93:07:61:5f:8c:3a:cd:48:58:bd:b4:57:a5:b2:3f:30:1b:
e9:91:f1:8a:7c:5b:04:fa:05:3d:4d:24:be:52:78:df:a5:7b:
bb:03:83:82:f2:06:43:89:1d:4c:5c:68:9d:20:23:19:2e:76:
56:76:cb:c8:6e:0e:28:c6:64:d5:63:90:d1:9c:84:36:99:c8:
94:67:7c:50:dc:83:7c:49:98:31:c9:6a:0f:93:09:b1:57:31:
f0:3a:86:36:2a:1b:d8:2a:ad:e1:10:10:9f:5a:a9:1a:98:f4:
83:7d:96:75:aa:3a:7b:21:5d:8c:e9:7e:f4:01:dc:3d:d6:e7:
c5:73:5b:e6:dd:14:87:7e:c3:e3:23:42:e5:40:3f:83:f1:32:
48:c2:40:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 03:07:44 2026 by rpki-client