Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
File: Dj8xyerObwpezNuN8rAcc1FWhoY.mft (raw, json)
Hash identifier: cyRL60nThMIlbLL0ixp2OcEMcLYGlbO7RcoqjSf8XG8=
Subject key identifier: 9C:9A:9D:15:52:44:53:1F:80:C7:BA:72:F6:63:3E:4F:49:07:A4:7E
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 019EBF5A9AECBE9A8C4D9DD17AB67C863308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
Manifest number: 1925
Signing time: Sat 13 Jun 2026 05:00:46 +0000
Manifest this update: Sat 13 Jun 2026 05:00:46 +0000
Manifest next update: Sun 14 Jun 2026 05:00:46 +0000
Files and hashes: 1: C4F5FfMfgWqyacqGzJ3BIqWeq0I.roa (hash: AVJL10DYaSQMbWBrbtscpA6ZeIDEl5faz3P30tjrXbc=)
2: Dj8xyerObwpezNuN8rAcc1FWhoY.crl (hash: nqX8BzMb50OXEro6wDBXGNDyMkcZtxSWCoGyJ1zxpkg=)
3: H_7ICe9bA6bKL6KxaXlnbRtE9DQ.roa (hash: myn2XXBsyfDvjK8OtF68llJ02gjDW6IloTyqRTy6l4w=)
4: Hs51wq2_SIQJ1nds1uh8F6Dx3ik.roa (hash: qxptTNT2o/4UgSRP/kpcf65j1wxXKH/EWbmmjxAt01o=)
5: P36bForyKz3A1xYxUt5uRvnbjGo.roa (hash: CVAU2pcmHNPpR0Ea2g62GxYoWi/yJ4n8I1Gjfyzzm7o=)
6: kTAGdAP94XB_eZK0C7vAHDqzJI8.roa (hash: CuJkjxQNxfp3wO54mRyTZ1oYxOazwRwfQjI9X+1M5ho=)
7: r_euWEHWB_wzU16rSDnkg8NIiGM.roa (hash: 12QG/5iTtnjlTjpFN6Uc829CvAhr4LDM2fjYVha8AqA=)
8: uZHn0r02l2agjVRMRfZ3xICbMLw.roa (hash: YR/6cl0OhmlwCiQwg5TQ7bSWNguLPLl/GP2GOc23T+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:9a:ec:be:9a:8c:4d:9d:d1:7a:b6:7c:86:33:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Jun 13 05:00:46 2026 GMT
Not After : Jun 14 05:00:46 2026 GMT
Subject: CN=9c9a9d155244531f80c7ba72f6633e4f4907a47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:88:59:5e:9f:5e:48:fc:1d:27:98:39:26:
1e:26:88:49:bb:bd:28:c5:f7:35:b2:dd:fd:64:e0:
97:ea:fb:e6:0b:98:56:d0:b6:26:6e:07:01:cd:35:
50:82:0c:03:ab:46:2b:74:6d:17:2c:d1:f6:97:91:
41:7b:e6:98:c1:0a:24:ec:15:66:20:87:4f:fc:7a:
12:e0:a1:41:55:e2:cf:95:9f:be:91:56:a8:95:16:
cb:bb:46:4a:45:bc:eb:78:be:03:87:18:93:63:e8:
9c:f5:12:97:52:ce:37:72:d5:58:3c:da:4b:39:1d:
ae:ac:b4:93:b4:48:45:5c:21:7c:25:5c:73:02:73:
ce:51:da:f3:ed:b7:c8:be:28:8d:b8:86:7b:1a:dc:
22:90:a7:2b:cd:fc:7f:1c:17:2f:d4:8e:80:04:06:
44:60:f7:fb:a9:a2:27:c8:42:62:e4:7a:a9:43:66:
69:dc:24:d9:20:39:2e:cf:4b:ea:29:4a:9b:7b:2f:
22:76:94:27:30:21:cb:2a:c2:6e:fa:13:dc:ae:42:
e9:2d:4a:7a:db:54:2b:4c:18:f5:83:64:86:79:90:
d3:c4:85:b2:ea:58:8d:b6:ac:34:54:b3:5c:4d:18:
5b:39:ce:82:4e:c0:ff:2c:2b:ab:52:f0:58:8e:77:
a5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9A:9D:15:52:44:53:1F:80:C7:BA:72:F6:63:3E:4F:49:07:A4:7E
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:cc:24:71:54:44:a9:c6:da:73:d2:31:62:05:32:7d:9b:36:
fe:09:55:48:fd:b7:bb:11:1b:cd:d6:42:81:51:d9:1e:59:67:
b4:03:1c:1f:f9:68:84:53:1b:57:a2:9e:bb:7e:95:ed:68:b9:
be:27:d7:fe:23:a1:f1:b1:a9:8d:b3:0f:bd:9a:b9:ab:b6:c2:
42:15:22:1f:a6:80:ba:3c:e8:5a:cf:11:53:76:ff:74:ce:e8:
3d:60:f0:0d:a1:b3:7e:25:47:a7:b6:57:7c:ed:d9:dc:dc:88:
35:46:61:3d:ce:64:05:50:8b:64:22:04:c2:5f:9d:f0:f2:d6:
e3:6a:dd:6e:e3:bc:91:b2:63:71:3f:b3:86:d1:15:4b:6f:35:
c4:3f:84:5a:43:4f:88:db:42:7d:6b:50:46:5e:93:f1:f1:e0:
45:de:ce:f4:9c:c6:89:00:29:cb:35:b3:14:9a:0c:5d:bd:ab:
40:bd:cb:24:00:d1:85:66:b9:1f:1e:c9:3c:f9:64:ce:32:62:
bf:9d:8c:d3:2a:74:5e:3c:46:2e:d6:33:0c:cb:59:75:d0:db:
ef:c9:51:d2:bc:24:28:32:dd:bc:f3:07:f5:97:92:39:be:dd:
8b:21:6e:a9:bf:55:2e:83:da:21:f4:18:99:28:e8:11:6e:b8:
7e:6f:ab:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:40:58 2026 by rpki-client