Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
File: dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json)
Hash identifier: VsAcuibUz01bQZHwWLkCTXBF6H1bmbo7hHGh/t3R1PQ=
Subject key identifier: D0:FB:44:78:F2:A7:AA:B2:97:B7:67:72:DF:6E:B3:86:38:4C:B0:68
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial: 019CE6A42084AA27C168FA7432F08C26EBE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
Manifest number: 11BA
Signing time: Fri 13 Mar 2026 10:00:41 +0000
Manifest this update: Fri 13 Mar 2026 10:00:41 +0000
Manifest next update: Sat 14 Mar 2026 10:00:41 +0000
Files and hashes: 1: 1-8pYu0OrjC9qLQ6X0Vz4rzpi4xs.roa (hash: v8h+idHdPhaBswH4S1i+10SArJAwwzpb48HkIAMaMbM=)
2: RDZxalDBba-KXcD-MDsp1kF4DmQ.roa (hash: RfbDrqRTWuSJ+e1Z40xGqlEQmsc4zVr3kOeTExU0ca4=)
3: _I5ZyNzs_5Q4toW0cmKShzzyGvc.roa (hash: CAZwJiEdqc66XP0aQOYr0r6o81HABrE7ATqPwsQle/M=)
4: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: tK4Om4SfLqoTalJZD7tZ7jeqH4mpwfGcK5LZndehd4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:20:84:aa:27:c1:68:fa:74:32:f0:8c:26:eb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Validity
Not Before: Mar 13 10:00:41 2026 GMT
Not After : Mar 14 10:00:41 2026 GMT
Subject: CN=d0fb4478f2a7aab297b76772df6eb386384cb068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d0:99:66:58:e2:c4:f4:48:8e:d2:85:d3:2b:
d2:d6:64:66:ea:f3:a8:b3:f2:33:5c:36:30:74:b7:
0c:d3:a6:5d:92:f5:20:cb:82:9b:5a:90:f7:0b:a3:
4b:b8:be:64:5e:3e:d0:f7:b3:92:50:e2:7e:75:ec:
29:2f:05:e9:46:75:a3:d6:e3:b7:43:49:f9:0d:4e:
d9:69:ae:28:eb:61:85:9a:41:02:55:fc:64:cb:f8:
b4:37:35:36:a1:4f:54:e6:93:a5:da:86:f5:66:67:
7b:f4:cf:aa:c9:6a:52:48:1e:ff:95:ff:f2:47:72:
3b:f4:8c:0f:33:4b:5d:e8:71:64:dd:34:b0:fd:4a:
48:aa:63:9f:3b:1a:5b:45:45:ec:d9:e6:36:2e:48:
f1:d0:3e:80:a0:3c:93:f1:cc:ff:f8:dd:e6:d9:a7:
86:44:03:dc:09:e5:2b:86:3e:0e:1f:31:30:c3:98:
09:44:ae:d5:c2:9b:84:3e:c4:02:b9:12:bc:5a:59:
77:71:3e:b6:f2:c1:4e:e2:57:1e:33:43:14:64:94:
ad:9e:0d:6e:5c:3a:46:3f:eb:11:fb:c8:70:98:b1:
07:9d:35:e1:29:bb:e8:69:ac:60:7d:9b:c2:d0:3b:
58:c7:cc:86:a2:c8:9f:00:b6:89:0e:ba:7c:15:45:
54:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FB:44:78:F2:A7:AA:B2:97:B7:67:72:DF:6E:B3:86:38:4C:B0:68
X509v3 Authority Key Identifier:
keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:5b:42:aa:dc:0e:b0:a4:55:06:7f:97:f3:f5:ab:0d:27:7a:
af:65:45:e0:0e:97:b7:3f:13:70:eb:a3:e9:4f:2c:7d:aa:6e:
b0:9e:e0:66:37:83:62:72:43:2e:58:07:43:49:0d:a5:47:21:
25:14:9d:a1:2a:02:0d:65:e7:0c:79:03:5f:6f:66:37:20:d0:
42:2b:22:74:b7:61:3d:84:e4:68:46:cd:03:2d:a0:9e:cc:fc:
6d:4b:4d:f1:41:de:2a:58:0b:89:0a:77:1e:7d:8c:e8:d4:18:
e3:3a:7e:64:62:93:03:59:d6:7a:a2:19:6b:ef:70:bb:17:10:
f0:48:e1:24:aa:f1:49:b6:cf:9e:1d:59:5c:87:f3:b6:1e:a7:
4f:a6:64:e7:63:ff:20:71:ae:ab:2a:8e:ac:32:62:3f:98:f8:
b2:d3:0d:41:61:aa:62:d6:ff:c0:2f:20:34:59:56:88:28:5b:
1b:fa:31:77:19:32:a7:24:d3:07:27:ba:f9:8a:b4:2d:e4:19:
0d:94:1a:03:7d:a5:b7:00:5f:c4:a4:71:47:0c:e6:1b:00:a0:
1a:59:a1:d9:1a:c1:2b:c4:38:be:6c:d8:b0:b4:2a:8e:78:56:
bd:e1:14:26:5b:35:38:0d:ef:39:c1:08:db:e4:8c:0d:01:98:
87:46:26:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:09:37 2026 by rpki-client