Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File: Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier: 41ytlF0Jm/ZkcptxfZNnZI3Ea4rR6mKjk3gIyI0FuGY=
Subject key identifier: 74:96:A7:EB:1C:22:49:CD:02:1D:9C:8D:9A:B9:08:5B:7E:A3:82:8C
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 019CADC77DA4861D6576C0C85B68FF3B1CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 09:00:57 +0000
Manifest this update: Mon 02 Mar 2026 09:00:57 +0000
Manifest next update: Tue 03 Mar 2026 09:00:57 +0000
Files and hashes: 1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: b0TlttYHoJqFO0OlC3wEJIbOIpEoCZm0KPJl4+rRPic=)
2: Rn3_9vFVXU06CNsxoJF1MmOpw7M.roa (hash: xyFTVjGVyU+raorbvx64u0pXwIGXyRN5Lt5srPA+50U=)
3: f-ogC67M0j6pmdbRailAwDmYBsk.roa (hash: AiwIB7mPfTBWZfsnFMwdI5gkTn2LtdcdGevndgaf5SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:7d:a4:86:1d:65:76:c0:c8:5b:68:ff:3b:1c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Mar 2 09:00:57 2026 GMT
Not After : Mar 3 09:00:57 2026 GMT
Subject: CN=7496a7eb1c2249cd021d9c8d9ab9085b7ea3828c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:e6:d1:f8:4b:fd:18:7b:15:71:47:22:d4:
a3:15:75:7b:22:80:4a:b3:66:17:c7:f9:f2:26:fe:
d3:c9:aa:2d:f0:1e:10:dc:6f:57:7e:aa:50:2e:b9:
fe:fc:96:52:79:7d:1f:44:5e:ed:79:31:a6:72:07:
6c:c3:26:d1:68:03:e7:0d:02:ee:36:6f:9c:fd:95:
8d:2b:8c:53:b6:9b:8b:42:8e:b5:5a:71:db:a9:2f:
f7:90:c2:98:e3:46:a2:a8:77:ac:2a:70:55:c2:da:
6a:de:86:7e:c8:75:77:f2:d4:78:c6:79:19:2c:ea:
11:ce:61:dd:d1:84:1e:79:aa:50:26:f7:7b:8b:b6:
35:2b:7b:09:e1:dc:3d:c8:f5:e1:a5:ad:cd:af:d9:
41:07:d7:64:fd:c7:f1:59:4d:89:14:b6:e4:af:1e:
bb:da:f9:a3:64:63:af:31:da:1a:66:8a:b9:69:fa:
76:b7:2f:51:c7:f3:33:97:25:41:a0:8e:00:c5:28:
df:4e:39:e8:75:3b:56:62:c7:18:8e:a4:5c:f0:9a:
48:58:1d:2b:cb:c8:bb:86:8e:4e:9b:cf:7d:10:12:
3f:63:0e:c4:6e:57:63:c8:f9:ce:4e:14:d4:40:9c:
00:42:d3:5c:07:fe:8e:22:03:cc:f8:91:c3:ec:73:
87:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:96:A7:EB:1C:22:49:CD:02:1D:9C:8D:9A:B9:08:5B:7E:A3:82:8C
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:58:6d:6d:b5:71:eb:fb:7f:9f:f0:53:be:5c:df:e1:e0:88:
43:9b:76:26:83:48:57:34:c6:f6:dd:76:78:0c:6f:d0:ef:81:
78:37:2b:15:ca:3b:3e:24:70:67:8d:02:22:19:dc:a7:79:fb:
1a:f7:00:5b:bb:e8:2d:a4:c8:70:9a:c6:e0:5d:19:fd:c2:ed:
76:9e:1c:93:92:c2:e9:ec:19:09:c8:24:e0:fd:74:82:28:32:
9c:e7:59:20:d2:a7:ad:57:04:d8:9d:59:22:1f:5b:62:de:a9:
ce:4e:a0:85:ac:27:68:4e:7a:57:90:bb:a5:3b:f6:c6:1b:22:
2e:36:5a:72:ee:00:0c:bc:08:c9:e0:2d:7b:54:d6:2d:20:59:
1b:00:78:b3:17:41:e3:66:62:da:e5:fa:fa:c7:ab:64:44:8a:
c6:05:69:1e:97:07:e2:96:87:7f:0e:f3:61:8d:30:39:ea:c0:
21:cc:15:e8:88:89:83:14:20:fb:11:21:3e:25:03:5d:1e:f9:
52:5d:6b:5c:3e:c0:f4:97:04:01:a6:c2:7e:08:48:8b:85:54:
d1:c5:38:6c:c2:23:4c:12:ea:e5:2e:71:b1:c6:34:b9:03:8e:
59:12:dc:bf:f3:cd:97:ad:a2:48:f4:7d:9c:7a:79:50:e5:42:
f6:fc:bd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:05 2026 by rpki-client