Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
File: djizYCRf5EsXV6ael3oV4H-q9ps.mft (raw, json)
Hash identifier: M9cnEM7IGgi6sN9FjS6u32ITvA7Pkq5tiCn+W0s56Gw=
Subject key identifier: F0:5A:14:85:86:D7:F8:C2:F9:80:49:DD:FF:51:2C:A3:B1:9E:09:BC
Authority key identifier: 76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B
Certificate issuer: /CN=7638b360245fe44b1757a69e977a15e07faaf69b
Certificate serial: 019D37BFF1B00BBE71EB09B28B3184389922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
Manifest number: 03EA
Signing time: Sun 29 Mar 2026 04:00:19 +0000
Manifest this update: Sun 29 Mar 2026 04:00:19 +0000
Manifest next update: Mon 30 Mar 2026 04:00:19 +0000
Files and hashes: 1: b2NnwzgfLDbXtAxH9dtL0v2uNtk.roa (hash: KBKYmxla1nso+r4vvsx8/d03VCCVPfJjj4bfekYBlMo=)
2: djizYCRf5EsXV6ael3oV4H-q9ps.crl (hash: fdvulupOuaqP5DrhmabKfdgmddfAc1dmMJGU9M6sSmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f1:b0:0b:be:71:eb:09:b2:8b:31:84:38:99:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7638b360245fe44b1757a69e977a15e07faaf69b
Validity
Not Before: Mar 29 04:00:19 2026 GMT
Not After : Mar 30 04:00:19 2026 GMT
Subject: CN=f05a148586d7f8c2f98049ddff512ca3b19e09bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:6a:64:22:67:13:11:0e:7d:30:93:4b:8f:41:
2e:31:3f:43:f8:29:1b:ab:e7:09:fa:5d:2d:93:8d:
2b:7c:c5:b1:71:48:b8:ff:a2:c5:bd:4e:4d:64:64:
ac:21:61:46:05:8b:34:fa:f6:87:75:f8:e0:b0:38:
34:3b:cc:aa:75:99:b7:fb:15:34:2f:6b:72:6a:52:
78:e6:4a:ae:ed:a8:b4:51:14:f0:04:37:72:77:dd:
4f:a9:9f:83:fc:ea:7c:8a:81:c5:45:44:55:d8:7a:
00:80:cc:00:89:3d:9e:02:29:23:14:d0:17:b2:e4:
a8:88:03:96:5b:5e:ea:35:a6:32:b5:5b:68:e7:d0:
68:82:44:62:36:57:ee:c5:67:08:c6:a8:63:ee:8a:
3a:32:e0:f5:79:d2:f6:9d:79:7a:7a:99:0d:02:72:
6b:8b:77:30:dc:d7:74:be:55:d6:d4:a4:6d:21:c8:
fd:a1:cf:cb:d3:b4:f8:79:1d:a9:79:12:95:e0:af:
57:0f:cd:87:ba:69:29:d8:47:59:9a:93:e1:ae:3e:
ae:cc:e2:ae:98:81:95:ac:57:34:d1:eb:13:3f:1a:
7e:1a:fd:8d:91:f5:c2:1d:24:45:7b:7f:48:c4:da:
7b:2a:59:76:e9:8d:ee:90:01:55:7b:2f:03:66:d2:
49:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5A:14:85:86:D7:F8:C2:F9:80:49:DD:FF:51:2C:A3:B1:9E:09:BC
X509v3 Authority Key Identifier:
keyid:76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:03:b8:8e:ea:de:59:37:d8:d9:10:00:b8:78:ac:45:4e:09:
ce:84:d7:fe:bf:ce:bb:ec:6f:f6:45:0b:81:55:a7:8b:21:a4:
3e:28:f1:b7:47:f5:19:9c:bd:06:fd:10:f1:00:28:7b:67:f7:
fb:01:3e:4d:86:13:52:a2:60:f3:95:2a:cc:0f:d5:5c:55:0f:
73:d6:58:8b:2c:20:70:4c:ec:08:51:d2:7e:d1:66:17:97:ce:
76:98:d3:68:3b:5d:b0:fb:3d:7f:bf:f5:cf:f8:ca:7f:23:08:
25:cd:50:39:00:54:07:9b:8e:32:e2:44:58:8f:16:e1:2b:ee:
6a:65:d8:9f:d8:b7:b1:8d:1c:63:d8:54:66:1d:d0:71:20:b7:
5d:cf:66:6d:3d:4a:5c:72:45:8e:6d:9e:1e:f8:48:0e:5c:3f:
27:c0:13:c8:5e:c9:39:6e:83:64:11:34:ab:17:ed:25:1a:cb:
f4:60:ec:82:96:65:49:11:56:18:23:28:26:cf:10:20:ef:84:
30:72:7a:00:2d:85:8c:97:cc:04:29:42:8a:92:77:46:b4:90:
02:50:d2:69:16:67:16:2f:79:48:56:9f:cb:42:67:84:fb:50:
82:90:4a:f5:7c:40:84:2d:c8:a1:7e:15:2c:65:b1:32:aa:ba:
7f:a2:54:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:58 2026 by rpki-client