Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
File: DjagX652BpH3DPtbT2JJlHq63oc.mft (raw, json)
Hash identifier: WxpuEY2sa6REtB7fEFNPNhNSKiO0AYXjwPFf/RESlRw=
Subject key identifier: DA:DF:73:1C:A2:B6:8D:8C:DB:B6:A5:69:B4:8D:60:22:57:C5:B4:EC
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Certificate issuer: /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial: 019CABA1C3B62195ACA1749DC330715E9994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 23:00:31 +0000
Manifest this update: Sun 01 Mar 2026 23:00:31 +0000
Manifest next update: Mon 02 Mar 2026 23:00:31 +0000
Files and hashes: 1: DjagX652BpH3DPtbT2JJlHq63oc.crl (hash: sZFus0a3xfilC4Fizfvni+UB32iLdeemCF6ff5Tsnmg=)
2: _j5362r7qv_9JgdkjeZ2Dr4Qsuk.roa (hash: XaswjrTxz0kpjxbDPMGjQHSDzCAPii9RYq3exV8GmFk=)
3: aezv-rxn8SkJT7jOMF8hl_lwOeo.roa (hash: jv2UN7Qe0W1KSoZ0p/rqmZ5wT1beFaF7g2jYyXMocTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:c3:b6:21:95:ac:a1:74:9d:c3:30:71:5e:99:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
Validity
Not Before: Mar 1 23:00:31 2026 GMT
Not After : Mar 2 23:00:31 2026 GMT
Subject: CN=dadf731ca2b68d8cdbb6a569b48d602257c5b4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b0:55:4f:1e:57:e0:40:60:ae:22:44:19:14:
19:54:0d:35:b7:74:6c:f2:74:e3:b6:cb:fe:57:e9:
74:5c:09:19:a5:bd:36:1a:31:7d:ee:45:03:0d:c2:
ec:38:02:72:46:68:92:35:a7:a1:52:70:ce:79:b0:
ff:74:33:b8:cf:29:42:d8:7e:81:84:f4:21:65:5c:
09:3c:4a:bd:e7:6c:c7:c8:bf:ea:52:39:65:7b:5c:
b2:a9:f9:3b:53:a3:b2:28:5f:35:8e:14:d0:8c:42:
50:c2:b5:98:a9:f3:b6:f4:e1:45:87:29:b8:ac:62:
7e:0c:78:eb:2c:dc:4a:5d:8b:6d:55:4a:70:dd:c5:
bc:a8:11:25:0a:23:84:4b:6e:19:83:19:ab:26:b4:
55:9c:08:f3:bb:47:b4:54:c8:7d:49:69:18:83:26:
01:05:7d:16:d5:76:37:80:1b:a8:ee:ee:bf:ac:49:
17:22:7d:03:a8:87:19:31:ba:49:8c:cc:1c:85:27:
de:58:2c:4b:bd:ae:cd:20:18:0e:f5:28:fd:34:71:
08:d6:1a:b5:d9:68:72:f7:a2:2d:75:e6:76:93:f0:
20:88:43:a3:b2:3d:35:ef:58:da:12:37:fc:87:df:
87:d9:a4:51:5d:2c:30:c7:f9:69:7d:77:31:26:b7:
73:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DF:73:1C:A2:B6:8D:8C:DB:B6:A5:69:B4:8D:60:22:57:C5:B4:EC
X509v3 Authority Key Identifier:
keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:69:c4:e4:1c:0f:cf:4a:ba:ab:e9:5c:e8:71:d3:20:fd:87:
9b:97:14:0b:fa:eb:5d:f4:74:2e:a1:4a:6c:18:4e:64:4e:9c:
c5:83:11:51:f7:f4:a0:76:80:b0:ff:a2:54:c5:b5:0c:f3:78:
e7:e5:12:64:55:e6:07:54:e9:3b:df:17:8c:bf:35:3a:09:aa:
96:e4:5a:ba:53:b6:8c:2e:55:0a:25:02:6d:60:25:10:63:b1:
1c:3a:d4:02:89:cb:82:34:9c:75:e4:14:ac:af:6e:c9:89:69:
d1:ac:c9:ed:22:51:94:bb:d0:5a:96:20:a4:1c:f0:60:c1:bf:
b6:53:58:9b:20:13:ad:93:b0:02:cb:a5:d7:29:e5:4c:57:17:
4c:bf:14:15:29:1c:af:29:99:30:b2:d1:37:c2:7c:d4:27:7c:
b1:b9:f4:16:bd:3c:17:06:bb:22:df:ef:7c:e0:a8:f9:90:80:
8f:2c:ec:b3:d4:4f:2a:b9:80:80:c8:38:e9:9e:da:5f:60:86:
08:48:4f:ef:73:85:9c:8b:fb:f9:91:97:b8:a9:57:c1:f4:8e:
df:e0:2f:0e:1d:4c:e5:2e:d9:4b:f8:91:df:5e:8b:e0:9d:b3:
64:82:f4:40:5c:3c:b1:79:6b:de:4f:ea:df:18:84:fd:15:85:
c7:ac:f6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:11 2026 by rpki-client