Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
File: DjagX652BpH3DPtbT2JJlHq63oc.mft (raw, json)
Hash identifier: ZmOIsbC5lCMt2huLHz+OQbIm7s3lcwLOvhHKgEg11IQ=
Subject key identifier: 0F:DA:24:F7:DA:9D:A8:A3:0F:F7:AF:16:B5:7F:DC:0B:CB:CE:48:16
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Certificate issuer: /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial: 01A0C58E34A33005B4922EB6CD7730A52BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 20:00:26 +0000
Manifest this update: Mon 21 Sep 2026 20:00:26 +0000
Manifest next update: Tue 22 Sep 2026 20:00:26 +0000
Files and hashes: 1: DjagX652BpH3DPtbT2JJlHq63oc.crl (hash: o9EVohcgiy0lvCfDaELxIp2cNaeDNVPu6K0St+QdSpA=)
2: GBiCQBi8m4-enxXZqw25PlMWPLQ.roa (hash: gTvW1OlNiz8hjMHgTUjrVGo7tVYa1kNXNiD2T8nmxFU=)
3: _j5362r7qv_9JgdkjeZ2Dr4Qsuk.roa (hash: XaswjrTxz0kpjxbDPMGjQHSDzCAPii9RYq3exV8GmFk=)
4: aezv-rxn8SkJT7jOMF8hl_lwOeo.roa (hash: jv2UN7Qe0W1KSoZ0p/rqmZ5wT1beFaF7g2jYyXMocTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:34:a3:30:05:b4:92:2e:b6:cd:77:30:a5:2b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
Validity
Not Before: Sep 21 20:00:26 2026 GMT
Not After : Sep 22 20:00:26 2026 GMT
Subject: CN=0fda24f7da9da8a30ff7af16b57fdc0bcbce4816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:76:b4:66:ed:1f:90:56:9e:a0:6d:2d:4d:
40:dc:ba:0b:6b:28:8b:eb:2c:72:c1:36:78:a1:66:
4c:94:9e:ac:a6:4e:de:0a:34:35:85:31:4d:d8:52:
4b:c9:c3:14:78:8c:88:03:06:09:73:11:54:17:d6:
9e:2f:89:64:63:49:bf:2c:14:a1:30:56:f7:f9:50:
16:0e:12:4d:31:de:6d:86:5c:56:6d:0f:c8:66:81:
f8:ba:f4:61:a3:e5:71:05:c0:68:b4:7e:b2:1b:3d:
ab:6c:87:54:ad:dd:4a:de:1d:c3:33:23:a5:90:a1:
b3:f9:c7:66:f4:6f:f6:2a:05:51:54:18:c5:5b:99:
64:61:3b:d2:da:cd:ec:83:1f:56:8d:88:44:c0:d0:
e6:63:53:fd:c6:b0:91:03:da:99:22:01:e1:70:4f:
b1:b7:1d:b2:a7:7b:25:20:4f:26:ec:b7:18:cc:07:
99:60:fa:c0:23:12:26:3e:58:de:8f:18:a8:20:20:
10:e6:a9:ff:7a:fb:7b:d1:58:27:81:45:6e:a8:80:
99:7a:c3:34:d5:a3:04:42:9d:5c:12:f6:d7:98:ca:
4d:b7:72:88:a9:13:f9:c3:5f:8f:95:4b:5f:44:55:
75:6e:d3:f8:85:88:9f:d7:d4:4a:5a:04:72:de:0c:
3f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DA:24:F7:DA:9D:A8:A3:0F:F7:AF:16:B5:7F:DC:0B:CB:CE:48:16
X509v3 Authority Key Identifier:
keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ad:79:95:ea:25:55:8b:8b:80:e4:36:01:d0:34:d0:21:80:
ba:c6:89:de:6d:57:10:71:b1:d2:ea:46:d3:37:83:b7:4b:53:
ad:da:2f:05:e0:82:02:1c:2a:69:d0:dc:ea:ca:2c:9c:80:d6:
13:fc:88:3d:be:b1:ca:3e:2c:cb:05:9d:1c:ec:8d:bf:da:64:
88:d6:ba:2c:25:8f:11:ee:2c:b6:f0:75:72:81:6d:01:4c:6f:
70:0d:00:bb:e0:3a:0c:72:c8:a5:53:e3:5f:8d:16:83:9d:52:
a7:ed:25:9f:e7:ab:4b:e7:f4:8a:7c:b0:6d:f7:70:da:bd:08:
71:15:f0:f0:1e:7a:8f:58:cc:f6:1f:4a:f5:86:9a:fa:e1:cc:
30:da:ab:23:da:ee:e8:eb:e4:d0:e9:25:12:86:45:06:b3:ec:
a8:08:f5:92:d0:e5:1a:b2:15:ec:01:01:ca:8b:e9:a4:ea:c4:
be:e8:4f:a3:db:11:3c:0e:43:72:29:40:79:45:bd:17:70:ee:
b6:bf:9e:e5:fc:88:07:57:70:02:76:5c:b8:40:a4:33:20:64:
6d:a1:c3:1b:07:83:9a:58:de:97:28:ec:f1:a7:c9:d2:41:01:
0a:17:6f:bb:e3:d2:49:fa:90:e1:57:2d:04:03:ff:25:dd:7d:
43:eb:31:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:23:21 2026 by rpki-client