Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
File: DJ8RVKmhXVqDqamBenJL_FOdtZY.mft (raw, json)
Hash identifier: pefarOLUfHBtTWrDNdqZWnTvAAX297LYVWjUznF4brw=
Subject key identifier: 8A:08:DC:62:FD:73:05:5B:71:24:46:33:DC:6E:88:D8:16:D7:E3:4F
Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
Certificate issuer: /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Certificate serial: 019FAB9A981ED7C43B13477D1287BB6A795D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 02:01:02 +0000
Manifest this update: Wed 29 Jul 2026 02:01:02 +0000
Manifest next update: Thu 30 Jul 2026 02:01:02 +0000
Files and hashes: 1: 4qZtNptb8ER3904DdA6MFe8pZsU.roa (hash: Lxa0NTdMnJxLEjdaVFMPjQXrKW0qd4O0NLrjMIPI/ME=)
2: DJ8RVKmhXVqDqamBenJL_FOdtZY.crl (hash: Hu67T3HAWrmqYGXOLrU/ZYLZNr0otDc7WYRZOgvuwUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:98:1e:d7:c4:3b:13:47:7d:12:87:bb:6a:79:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Validity
Not Before: Jul 29 02:01:02 2026 GMT
Not After : Jul 30 02:01:02 2026 GMT
Subject: CN=8a08dc62fd73055b71244633dc6e88d816d7e34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:17:38:21:2a:36:8c:98:ff:26:ac:02:16:
b3:81:69:93:f1:82:5f:bd:11:4e:74:97:8b:86:77:
29:8f:1e:bf:7c:a5:95:f0:24:ca:c7:7b:9d:67:7f:
c5:a3:bb:de:de:82:73:5b:6c:4e:81:30:71:35:f7:
ad:89:13:00:fc:29:67:25:23:50:af:73:21:da:0e:
23:e1:40:76:ed:78:21:f1:57:50:bb:a6:01:fb:a0:
c4:af:a8:d8:d3:93:d6:b9:78:b3:64:c2:f8:69:ec:
a4:62:93:02:2a:79:cf:3b:ac:43:36:b9:28:9e:74:
3a:7d:41:0a:6f:53:2f:be:0a:d4:13:ff:01:73:e8:
12:13:fb:f0:8c:1f:87:67:c6:09:9a:49:dd:8b:d7:
e7:41:49:40:40:a0:d7:3b:82:d9:73:b4:08:d5:98:
49:35:b4:8c:8d:e3:10:bb:e8:05:cd:63:d2:8d:34:
cb:50:6c:bc:c9:57:44:b0:78:b0:dd:fd:cf:07:ab:
b6:53:b9:10:3f:7a:19:49:54:aa:a0:68:1c:fe:f2:
33:2d:26:09:81:7f:26:f1:16:72:c8:99:b2:ff:2a:
0b:cb:a5:9a:e9:98:bd:30:6c:8c:12:05:97:3a:a5:
d4:11:e0:c8:9b:16:fd:46:4b:30:20:37:f6:dc:1d:
cf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:08:DC:62:FD:73:05:5B:71:24:46:33:DC:6E:88:D8:16:D7:E3:4F
X509v3 Authority Key Identifier:
keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:48:6f:dc:f7:52:67:23:24:8c:a5:92:97:69:da:2a:aa:4f:
b3:d6:b1:a1:af:7c:f2:d7:3c:bf:14:4a:ea:9f:83:7e:b2:51:
2d:2f:6e:26:21:0e:f7:0a:c2:a9:70:88:c0:83:c3:3f:7f:a5:
3e:ac:d2:a8:90:3c:a5:f2:46:f0:a9:e4:03:42:19:9e:1b:94:
bc:48:5e:d9:30:40:1c:2c:29:b5:a4:a2:36:85:1f:e8:6e:59:
d6:18:82:de:39:36:9c:bf:51:06:fc:16:96:44:a0:8a:5c:b1:
4b:50:6b:90:0e:7a:b3:62:21:49:91:4c:b9:0e:35:61:5e:fc:
91:95:69:e2:69:6d:70:b9:bd:94:bb:fd:1e:7e:41:d3:49:c2:
34:2d:d1:95:43:86:91:16:3b:56:94:d6:c7:96:a7:97:65:ac:
73:68:b2:95:dd:3e:5c:e9:93:14:01:e5:73:33:f3:bb:02:8b:
da:3e:f6:90:02:dd:60:63:b3:04:93:e6:44:a4:82:a3:0b:81:
36:2c:73:ef:38:3e:2e:80:4a:2b:38:dc:d1:35:12:52:39:47:
59:03:5d:0f:bb:43:37:09:6e:03:ce:a4:96:9d:5f:d2:4a:03:
88:f8:e1:09:e4:8d:94:87:be:f5:cd:e0:8b:af:e2:49:c7:33:
6d:9a:48:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:56:56 2026 by rpki-client