Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File: Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier: 8zruRAwg9NT6K9+/9J0HoeNCeMzFomrI3RYwphD7ZqQ=
Subject key identifier: CD:C5:BA:E2:E4:1E:40:10:61:9B:F4:A0:E8:8C:79:31:D8:72:55:8C
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 019D9961DDA4DDA5BAEA10071807BBA7831A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:00:20 +0000
Manifest this update: Fri 17 Apr 2026 03:00:20 +0000
Manifest next update: Sat 18 Apr 2026 03:00:20 +0000
Files and hashes: 1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: 3GstPVx4zEdRtEhUfjnSRTvKd7s8dmCZqNtoFODEVBg=)
2: Rn3_9vFVXU06CNsxoJF1MmOpw7M.roa (hash: xyFTVjGVyU+raorbvx64u0pXwIGXyRN5Lt5srPA+50U=)
3: f-ogC67M0j6pmdbRailAwDmYBsk.roa (hash: AiwIB7mPfTBWZfsnFMwdI5gkTn2LtdcdGevndgaf5SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:dd:a4:dd:a5:ba:ea:10:07:18:07:bb:a7:83:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Apr 17 03:00:20 2026 GMT
Not After : Apr 18 03:00:20 2026 GMT
Subject: CN=cdc5bae2e41e4010619bf4a0e88c7931d872558c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:11:b5:e7:bf:55:94:dc:a5:4c:c6:1e:07:
d1:24:27:54:a7:4b:9a:b2:db:bc:41:01:1f:27:1d:
98:91:ca:9b:08:3f:64:85:66:80:80:3a:45:7d:fc:
79:22:77:54:c3:1d:6f:b8:b7:03:58:e3:57:29:7f:
3c:3f:63:88:8e:9d:97:f7:cb:a2:08:1b:72:8f:9b:
4e:9f:f9:f1:29:e7:5d:9c:cf:ca:e9:0e:55:3a:e7:
d9:b3:be:c9:6b:8d:b5:28:f1:41:90:79:b2:56:45:
63:54:b7:36:f3:b7:65:4a:94:94:dc:a0:c2:84:e6:
44:f8:bc:16:78:72:26:19:d9:dc:33:b5:ed:eb:34:
dd:7a:6b:6a:06:93:0b:95:1a:da:d2:42:fa:de:f6:
d8:6e:b3:37:49:81:d8:42:58:a9:96:5c:87:65:56:
8c:33:ad:ac:1e:ed:17:99:ab:69:df:a6:e7:b8:36:
8b:18:2a:1b:63:14:0a:a3:ba:ba:a1:c1:c4:26:63:
f4:c5:b0:f8:4f:4d:cb:fa:f2:c3:02:fe:93:df:38:
38:43:ea:25:e9:11:34:b0:63:d4:da:fa:aa:61:c9:
00:5c:47:01:00:8f:8e:46:bf:a1:22:e1:e0:d4:72:
ce:24:24:d9:a3:41:9a:4a:68:42:47:b7:63:0c:e8:
36:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C5:BA:E2:E4:1E:40:10:61:9B:F4:A0:E8:8C:79:31:D8:72:55:8C
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ba:bc:d6:cb:20:8d:c1:38:b1:46:a9:de:71:88:fc:b9:97:
7b:51:4c:88:8b:c6:52:57:14:9b:70:70:02:92:7e:ad:2a:86:
8e:62:79:82:77:a2:6a:b0:b4:bd:b2:7b:a2:5a:76:6e:d9:20:
52:07:5a:41:e8:27:21:45:dd:81:e4:e0:a2:80:77:6e:d3:d2:
07:ec:88:69:77:7a:a4:d5:38:98:6d:95:62:30:f2:62:d5:02:
a1:1f:b0:2f:d5:e3:c7:56:89:e3:7a:dd:d3:e5:22:f7:18:11:
b7:eb:59:96:2a:5d:5d:5f:e1:c8:24:a2:1d:ef:c8:1c:cb:28:
a7:d5:07:ac:85:38:a0:36:22:01:c1:53:cf:d3:7d:7b:c4:a8:
7e:72:b8:07:01:9f:c7:e6:14:e5:f8:6a:94:45:e6:12:37:21:
cf:07:25:7b:1d:9f:da:65:fd:3d:0e:a4:9c:ad:c2:25:e3:e4:
8f:19:4a:27:ef:b6:50:22:e9:f5:51:6d:13:a3:1b:9b:e3:ba:
7c:8f:e9:b0:17:bd:74:b7:e7:b0:31:66:66:9a:1b:71:7c:34:
41:d1:47:a9:5c:2a:9f:70:f7:94:a3:a6:fd:89:ea:e2:a3:67:
c6:79:f4:78:f8:29:10:68:5f:e7:18:41:cc:74:d3:f6:d7:56:
96:c3:7a:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYd2k3aW66hAHGAe7p4MaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlM2M5ZWUxYmUzMzA4ZmQ2YmQ0YTdjN2FjMmI5ZDkxMDA4
OWI3NzkwHhcNMjYwNDE3MDMwMDIwWhcNMjYwNDE4MDMwMDIwWjAzMTEwLwYDVQQD
EyhjZGM1YmFlMmU0MWU0MDEwNjE5YmY0YTBlODhjNzkzMWQ4NzI1NThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstARtee/VZTcpUzGHgfRJCdUp0ua
stu8QQEfJx2YkcqbCD9khWaAgDpFffx5IndUwx1vuLcDWONXKX88P2OIjp2X98ui
CBtyj5tOn/nxKeddnM/K6Q5VOufZs77Ja421KPFBkHmyVkVjVLc287dlSpSU3KDC
hOZE+LwWeHImGdncM7Xt6zTdemtqBpMLlRra0kL63vbYbrM3SYHYQlipllyHZVaM
M62sHu0Xmatp36bnuDaLGCobYxQKo7q6ocHEJmP0xbD4T03L+vLDAv6T3zg4Q+ol
6RE0sGPU2vqqYckAXEcBAI+ORr+hIuHg1HLOJCTZo0GaSmhCR7djDOg2nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3FuuLkHkAQYZv0oOiMeTHYclWMMB8GA1UdIwQY
MBaAFA48nuG+Mwj9a9Snx6wrnZEAibd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGp5ZTRiNHpDUDFyMUtmSHJDdWRrUUNKdDNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9jYWEyZGEtNWViYy00NWNiLWI4ZmUt
MDhmM2U4OTA3YzQyLzEvRGp5ZTRiNHpDUDFyMUtmSHJDdWRrUUNKdDNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9jYWEyZGEtNWViYy00NWNiLWI4ZmUtMDhmM2U4OTA3YzQy
LzEvRGp5ZTRiNHpDUDFyMUtmSHJDdWRrUUNKdDNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7q81ssg
jcE4sUap3nGI/LmXe1FMiIvGUlcUm3BwApJ+rSqGjmJ5gneiarC0vbJ7olp2btkg
UgdaQegnIUXdgeTgooB3btPSB+yIaXd6pNU4mG2VYjDyYtUCoR+wL9Xjx1aJ43rd
0+Ui9xgRt+tZlipdXV/hyCSiHe/IHMsop9UHrIU4oDYiAcFTz9N9e8SofnK4BwGf
x+YU5fhqlEXmEjchzwclex2f2mX9PQ6knK3CJePkjxlKJ++2UCLp9VFtE6Mbm+O6
fI/psBe9dLfnsDFmZpobcXw0QdFHqVwqn3D3lKOm/Ynq4qNnxnn0ePgpEGhf5xhB
zHTT9tdWlsN69g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:57 2026 by rpki-client