Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File: Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier: dmaLpnpr+3HsAfi+BHdGlBTlpHWydZTAPSSvsW8TVVE=
Subject key identifier: 17:D4:24:8D:23:50:5B:7B:DA:7C:77:7B:33:E4:1C:37:C7:1E:9B:21
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 01A0C47B75384214A67752897FAA6B0FFFE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 15:00:20 +0000
Manifest this update: Mon 21 Sep 2026 15:00:20 +0000
Manifest next update: Tue 22 Sep 2026 15:00:20 +0000
Files and hashes: 1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: hgj2CmNGJ8WDdrlvcqAVpNczp/1wahecmtSMa/pU4Yc=)
2: Rn3_9vFVXU06CNsxoJF1MmOpw7M.roa (hash: xyFTVjGVyU+raorbvx64u0pXwIGXyRN5Lt5srPA+50U=)
3: f-ogC67M0j6pmdbRailAwDmYBsk.roa (hash: AiwIB7mPfTBWZfsnFMwdI5gkTn2LtdcdGevndgaf5SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:75:38:42:14:a6:77:52:89:7f:aa:6b:0f:ff:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Sep 21 15:00:20 2026 GMT
Not After : Sep 22 15:00:20 2026 GMT
Subject: CN=17d4248d23505b7bda7c777b33e41c37c71e9b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:33:18:f4:cd:4f:2b:ba:b2:58:68:37:ee:
fe:46:c6:c8:0b:68:cf:57:24:a3:df:37:82:ba:28:
63:e4:66:70:5b:d3:2d:49:96:fb:ae:55:7f:87:6e:
0b:77:97:6a:02:12:4f:ae:3b:10:c2:67:37:30:25:
d1:b7:e7:23:e0:b1:e9:48:36:7f:2c:8c:92:bc:58:
95:53:8c:2c:ed:6a:19:8e:19:c9:59:f5:b3:00:2d:
ae:5c:8f:47:ac:be:9f:65:e0:54:43:c0:a2:f8:a0:
37:d9:99:60:3a:81:eb:f1:f4:0e:04:f5:3b:13:d3:
6b:5b:d3:8a:71:70:28:d9:37:54:51:16:75:4e:4b:
d7:ef:a8:34:79:10:71:42:8b:08:ba:61:6f:13:50:
63:9f:e5:44:46:40:60:6a:23:72:6c:01:e9:59:46:
e0:bd:5c:15:ce:59:db:5a:c2:84:c7:ad:a3:c2:ae:
40:ca:e7:d1:b4:19:0c:d2:e2:03:11:42:9d:df:41:
9e:06:79:ff:fe:1f:e0:31:e1:8d:41:2a:3c:9f:77:
c0:07:08:5d:25:1e:47:ec:a8:ed:e2:51:c7:53:ab:
66:a9:25:7e:aa:7d:2e:a3:48:71:b9:2b:6f:ad:c6:
6f:17:bb:06:77:a5:c1:f7:33:08:4e:06:b3:c1:a1:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D4:24:8D:23:50:5B:7B:DA:7C:77:7B:33:E4:1C:37:C7:1E:9B:21
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:26:d8:ae:d1:d0:dc:73:26:0e:f6:58:2d:b2:43:6f:11:34:
4f:ba:8b:82:25:44:72:c8:5e:b7:01:be:24:af:fd:25:78:84:
50:5a:0c:9e:9f:fd:be:8a:e2:24:ed:35:be:00:6e:d8:20:ce:
ba:bd:83:72:04:2b:ac:c8:39:eb:c1:2f:3c:ff:54:23:57:39:
82:05:8c:25:32:e9:52:19:b1:14:be:8e:67:eb:47:48:8c:2f:
34:cd:40:28:a8:56:fe:60:9d:56:6e:5d:41:f7:e9:e9:f1:59:
00:0d:ba:e5:fd:e8:dd:f9:63:8d:99:ab:14:f5:ef:1f:c7:8d:
b6:54:53:ce:f3:34:c4:1b:19:91:a8:ad:45:fe:75:cf:a8:06:
bd:9c:8c:70:c2:f6:8f:2c:59:13:a8:b4:04:91:17:0e:cc:c5:
b2:f6:a5:d6:8c:12:dc:68:80:1b:ae:57:69:ce:47:1f:fc:57:
cf:63:45:bf:2e:0a:c1:4f:37:70:a5:f7:ae:81:c8:83:17:ea:
1a:77:ef:3b:b4:f4:3e:60:44:b3:08:81:b5:32:e7:5e:87:aa:
aa:2f:23:89:6a:cd:2a:67:8e:9d:b4:e3:cf:f6:bc:93:20:75:
e4:96:0b:45:de:09:09:18:dc:fd:c9:e5:54:cf:81:12:b1:79:
48:f2:dc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:23:22 2026 by rpki-client