Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
File: dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json)
Hash identifier: 2QI9F9Zay9IsZWuxCV0MVl3wClSI8ugl1uyTGqZ4Wuw=
Subject key identifier: 5A:4E:4C:65:90:5F:E8:D3:CD:20:D2:EC:BD:3C:C6:0F:C9:B3:8E:BC
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial: 019DCFE2F25F42EC67B55B94C3E0119EF646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
Manifest number: 1234
Signing time: Mon 27 Apr 2026 17:00:49 +0000
Manifest this update: Mon 27 Apr 2026 17:00:49 +0000
Manifest next update: Tue 28 Apr 2026 17:00:49 +0000
Files and hashes: 1: 1-8pYu0OrjC9qLQ6X0Vz4rzpi4xs.roa (hash: v8h+idHdPhaBswH4S1i+10SArJAwwzpb48HkIAMaMbM=)
2: RDZxalDBba-KXcD-MDsp1kF4DmQ.roa (hash: RfbDrqRTWuSJ+e1Z40xGqlEQmsc4zVr3kOeTExU0ca4=)
3: _I5ZyNzs_5Q4toW0cmKShzzyGvc.roa (hash: CAZwJiEdqc66XP0aQOYr0r6o81HABrE7ATqPwsQle/M=)
4: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: Jfc+9gh3TKnzNhPHZw6i2uiOdJJyAmUUkogKcnulMW4=)
5: iB4-Lv4Y5pfev06wgUUTf3MkuqE.asa (hash: v6oTaVMB32ysT0WuXZ0EG1XMy1UYjDtrDIPZoAi/1TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e2:f2:5f:42:ec:67:b5:5b:94:c3:e0:11:9e:f6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Validity
Not Before: Apr 27 17:00:49 2026 GMT
Not After : Apr 28 17:00:49 2026 GMT
Subject: CN=5a4e4c65905fe8d3cd20d2ecbd3cc60fc9b38ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:be:8b:1c:b1:9c:aa:74:d6:38:1d:12:84:
e2:2b:05:bd:5d:dc:0d:1c:7d:69:7b:e8:b1:c2:8c:
2f:6c:22:11:ef:3d:bd:c3:57:2e:c7:eb:e2:65:96:
75:58:68:60:1f:52:60:2a:1f:f7:32:a2:1b:4a:ec:
2e:63:05:e2:2f:1b:a0:39:0f:43:c2:56:4d:6b:cb:
5d:56:f9:43:6a:09:7f:fe:c8:2e:68:e6:1c:bd:96:
01:f1:e4:64:dc:a1:01:e8:35:c9:7c:dc:3d:9b:dd:
56:06:a2:79:6c:d0:56:32:59:73:d5:f6:41:d8:33:
19:9a:8a:06:ee:59:24:cf:b4:3f:97:39:3f:fd:56:
ce:f8:f6:17:57:cd:6a:b0:a6:75:04:64:ec:a4:10:
a6:fa:ba:51:18:89:96:eb:09:67:bd:16:8b:d3:c7:
45:10:fc:6f:9f:84:e1:75:56:50:68:6a:e0:03:80:
ad:8e:9b:f5:16:c0:9c:00:25:de:46:20:ac:05:79:
00:82:f6:cd:4d:07:90:20:a7:dd:a3:96:c2:99:41:
49:df:b0:1e:85:2f:a4:12:eb:d5:4f:ef:c4:29:7a:
c6:ec:f2:3f:51:e8:3f:af:1a:0f:be:fb:ef:bc:41:
dd:fd:33:1d:44:23:ba:5c:76:9b:61:3d:79:67:f8:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4E:4C:65:90:5F:E8:D3:CD:20:D2:EC:BD:3C:C6:0F:C9:B3:8E:BC
X509v3 Authority Key Identifier:
keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e8:b9:39:13:94:68:90:82:36:15:70:65:03:79:55:34:a4:
5b:be:2e:b2:3f:b9:0d:17:04:06:9b:65:91:08:50:00:bd:38:
7b:a2:da:c7:a5:6a:9b:aa:9b:00:f0:1a:01:97:a0:69:4a:17:
2f:ad:0d:c4:5b:35:41:9d:98:e0:76:e7:0a:ff:8f:41:63:66:
b3:bc:89:0a:4d:9f:6f:a2:3a:9b:56:7f:04:d8:1e:eb:f7:ec:
78:c9:d4:31:eb:12:80:4b:f9:3c:82:ce:98:6e:53:7c:17:b2:
22:2f:c4:e0:d4:73:e2:e6:4c:5c:e7:c7:e1:5f:d6:c6:eb:e4:
68:dd:97:70:ec:ab:7a:76:10:4a:8e:86:a8:02:f1:f7:55:5b:
93:2a:b7:91:94:d7:94:6f:b6:45:08:01:2d:ef:a9:c2:e4:47:
53:3f:7e:43:79:0e:14:e2:13:58:1d:11:51:a7:13:20:2e:c5:
83:75:80:d4:ff:de:77:9f:14:b6:d5:a9:38:d4:d6:35:f0:c3:
ec:09:62:88:8d:1d:67:13:33:72:26:31:6e:15:e8:67:c4:83:
e7:e9:db:c9:dd:1f:d3:f0:c9:23:95:0c:7a:8b:96:83:70:99:
d9:c4:28:7a:55:7b:53:91:88:35:bf:f7:2d:2d:16:1e:4c:2b:
39:68:10:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3P4vJfQuxntVuUw+ARnvZGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTBjZTZiNmY4Zjc1MGUwMzU4NGViYmQ3YmRhZDBmMTFm
YmUzMWMwHhcNMjYwNDI3MTcwMDQ5WhcNMjYwNDI4MTcwMDQ5WjAzMTEwLwYDVQQD
Eyg1YTRlNGM2NTkwNWZlOGQzY2QyMGQyZWNiZDNjYzYwZmM5YjM4ZWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymC+ixyxnKp01jgdEoTiKwW9XdwN
HH1pe+ixwowvbCIR7z29w1cux+viZZZ1WGhgH1JgKh/3MqIbSuwuYwXiLxugOQ9D
wlZNa8tdVvlDagl//sguaOYcvZYB8eRk3KEB6DXJfNw9m91WBqJ5bNBWMllz1fZB
2DMZmooG7lkkz7Q/lzk//VbO+PYXV81qsKZ1BGTspBCm+rpRGImW6wlnvRaL08dF
EPxvn4ThdVZQaGrgA4Ctjpv1FsCcACXeRiCsBXkAgvbNTQeQIKfdo5bCmUFJ37Ae
hS+kEuvVT+/EKXrG7PI/Ueg/rxoPvvvvvEHd/TMdRCO6XHabYT15Z/ha4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpOTGWQX+jTzSDS7L08xg/Js468MB8GA1UdIwQY
MBaAFHSQzmtvj3UOA1hOu9e9rQ8R++McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAt
YzQ5NmY5Y2FmYTgzLzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAtYzQ5NmY5Y2FmYTgz
LzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOi5OROU
aJCCNhVwZQN5VTSkW74usj+5DRcEBptlkQhQAL04e6Lax6Vqm6qbAPAaAZegaUoX
L60NxFs1QZ2Y4HbnCv+PQWNms7yJCk2fb6I6m1Z/BNge6/fseMnUMesSgEv5PILO
mG5TfBeyIi/E4NRz4uZMXOfH4V/WxuvkaN2XcOyrenYQSo6GqALx91Vbkyq3kZTX
lG+2RQgBLe+pwuRHUz9+Q3kOFOITWB0RUacTIC7Fg3WA1P/ed58UttWpONTWNfDD
7AliiI0dZxMzciYxbhXoZ8SD5+nbyd0f0/DJI5UMeouWg3CZ2cQoelV7U5GINb/3
LS0WHkwrOWgQlg==
-----END CERTIFICATE-----
Generated at Tue Apr 28 03:23:03 2026 by rpki-client