Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
File: Dj8xyerObwpezNuN8rAcc1FWhoY.mft (raw, json)
Hash identifier: MpM2PNmcfJ3Iv77OYGaSziJ0YsbwuzPxn5ejpP74bVM=
Subject key identifier: AE:12:95:4E:F5:43:2D:83:8B:81:4D:D2:37:C0:21:EF:51:EE:C7:22
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 019D977380858F48C8BCF9F6C75A9EA2D0F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
Manifest number: 1885
Signing time: Thu 16 Apr 2026 18:00:22 +0000
Manifest this update: Thu 16 Apr 2026 18:00:22 +0000
Manifest next update: Fri 17 Apr 2026 18:00:22 +0000
Files and hashes: 1: Dj8xyerObwpezNuN8rAcc1FWhoY.crl (hash: XlWFhEmNyEykPVqdrwgcjXKfsiFQFKyKNnvvuBbPES4=)
2: GVcJ3gxbuHAN1M8bXhkm0XurzJ4.roa (hash: LnAw2l35gI/vboxpJzukCZYmF3HPcjn5rKUGuplOWYs=)
3: P36bForyKz3A1xYxUt5uRvnbjGo.roa (hash: CVAU2pcmHNPpR0Ea2g62GxYoWi/yJ4n8I1Gjfyzzm7o=)
4: cCqdc17ji2M1kOGak_A4zF45rAA.roa (hash: auodaeobsnLWwDrzWV8MjYZOmLS6kqoqYz3PcxCEus4=)
5: kTAGdAP94XB_eZK0C7vAHDqzJI8.roa (hash: CuJkjxQNxfp3wO54mRyTZ1oYxOazwRwfQjI9X+1M5ho=)
6: oveUA1uBv2ehHsokfHtBlO5t1OM.roa (hash: qHYZMnXE/ptQNsblCotL5I56Q3u2k4i1sIRc61QdOc4=)
7: uZHn0r02l2agjVRMRfZ3xICbMLw.roa (hash: YR/6cl0OhmlwCiQwg5TQ7bSWNguLPLl/GP2GOc23T+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:73:80:85:8f:48:c8:bc:f9:f6:c7:5a:9e:a2:d0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Apr 16 18:00:22 2026 GMT
Not After : Apr 17 18:00:22 2026 GMT
Subject: CN=ae12954ef5432d838b814dd237c021ef51eec722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:39:90:6e:47:95:0c:21:88:ea:17:71:73:77:
81:86:3f:31:7a:6b:2d:83:c4:e2:5a:c4:a1:16:26:
9e:a1:0e:b3:05:de:8d:52:36:e4:df:fe:71:49:c5:
40:74:4a:15:b1:b1:50:9d:ce:35:30:3f:e3:b6:41:
f7:75:7e:49:dc:d1:18:b0:29:a6:ee:27:9e:ce:d4:
ba:6d:d8:9a:0d:16:3f:fa:bc:70:b5:f5:87:34:1f:
28:91:65:18:cc:9f:bf:7f:d6:ec:bc:0f:cf:74:0e:
b8:44:23:69:31:f7:e5:9d:2d:04:48:06:13:53:5c:
f0:a4:09:1e:7d:a2:63:40:2e:81:97:f5:de:f3:29:
d9:d9:d0:40:20:ea:da:f5:2b:cb:d7:c4:eb:5b:93:
06:ba:f4:0c:26:96:ac:d0:d9:28:e8:90:7b:a0:3f:
4a:25:89:de:25:27:ac:d6:16:d9:92:d0:75:69:b5:
7a:28:de:b9:5e:58:46:b8:2e:a5:d9:c9:18:16:ad:
47:a9:a9:9b:d3:86:04:db:03:7c:b5:77:f5:49:a2:
67:38:43:47:06:7e:6b:cf:64:63:13:9b:07:f7:d9:
6d:d4:dc:4e:3b:e3:ac:d2:90:20:b5:07:a1:bc:0d:
4a:74:11:b9:bb:06:b2:3a:0e:ae:d5:85:19:d4:19:
d4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:12:95:4E:F5:43:2D:83:8B:81:4D:D2:37:C0:21:EF:51:EE:C7:22
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ae:f1:ef:4e:9b:66:4a:1f:97:81:b5:fd:3a:80:96:71:45:
d5:64:6d:0e:12:ce:7f:50:2e:bd:e8:c8:3a:ba:a3:07:60:66:
3f:47:3e:52:7b:22:63:d6:c7:7d:2f:9f:9d:d6:a8:44:65:fe:
34:ac:86:31:33:5f:0b:ac:55:cd:bf:e5:27:8a:15:37:59:48:
c7:92:f7:f6:38:8d:4d:cb:df:68:66:d8:74:5f:06:35:7a:a8:
32:99:ab:63:7d:ee:8c:1a:a1:bc:97:12:81:0d:8a:48:6d:f5:
e5:c1:ea:13:f0:7d:e2:1b:08:a7:1c:bf:60:25:46:d7:a1:56:
c5:51:7d:9f:54:e3:3f:20:38:10:44:66:da:b6:07:b9:86:4a:
8d:c4:cf:1c:b6:f4:9f:10:6e:df:82:ed:e3:e4:83:1f:1e:c7:
6b:6c:43:2f:85:73:ad:f2:37:fc:25:d5:5d:f8:a1:cc:ff:52:
d6:c4:af:76:38:63:bf:8d:28:5c:29:ea:99:42:0b:53:28:ca:
1a:92:8d:ed:26:99:57:d2:48:46:58:ff:71:1b:1f:26:e6:3a:
49:e6:d3:8e:4a:0d:3b:d5:a4:b3:f4:86:cf:87:92:99:d7:02:
ec:2f:35:80:49:44:1e:a4:86:90:a4:39:d7:1a:62:55:d8:80:
32:f5:4c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:55:51 2026 by rpki-client