Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
File: dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json)
Hash identifier: QGqGRVARa2FDEc7UtD1F5LW9hJ2UFiE5d6K4wFeSKOM=
Subject key identifier: EC:E2:D0:6A:B8:10:93:6C:C4:E1:47:04:3F:0F:DB:F0:13:16:06:C2
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial: 019CAAC671925AC28A4E2300BE095370EFD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
Manifest number: 119B
Signing time: Sun 01 Mar 2026 19:00:57 +0000
Manifest this update: Sun 01 Mar 2026 19:00:57 +0000
Manifest next update: Mon 02 Mar 2026 19:00:57 +0000
Files and hashes: 1: 1-8pYu0OrjC9qLQ6X0Vz4rzpi4xs.roa (hash: v8h+idHdPhaBswH4S1i+10SArJAwwzpb48HkIAMaMbM=)
2: RDZxalDBba-KXcD-MDsp1kF4DmQ.roa (hash: RfbDrqRTWuSJ+e1Z40xGqlEQmsc4zVr3kOeTExU0ca4=)
3: _I5ZyNzs_5Q4toW0cmKShzzyGvc.roa (hash: CAZwJiEdqc66XP0aQOYr0r6o81HABrE7ATqPwsQle/M=)
4: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: 6SWGXgIG38fbheGMzQQ7gqVNHw4WWjEzToYFD4rQLt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:71:92:5a:c2:8a:4e:23:00:be:09:53:70:ef:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Validity
Not Before: Mar 1 19:00:57 2026 GMT
Not After : Mar 2 19:00:57 2026 GMT
Subject: CN=ece2d06ab810936cc4e147043f0fdbf0131606c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:0e:0c:cf:9d:2f:28:0f:53:01:7f:e9:d9:
6d:46:cd:d9:13:7d:92:bc:84:c5:97:b4:1b:49:f7:
2d:be:7b:ad:a1:c0:5b:67:10:7c:02:5b:0d:f4:99:
86:30:05:94:82:da:79:4b:1f:3b:7c:78:a5:00:27:
16:d3:18:89:8c:a6:83:13:77:40:8f:5f:f6:ec:cf:
8b:9d:9f:3a:08:d5:5a:fe:62:11:de:17:14:2d:7b:
6d:91:65:5d:72:05:d1:fe:82:96:d2:f0:75:46:9a:
ef:6b:c2:9e:45:21:08:bf:ee:a2:43:ac:2d:a0:8e:
c9:19:5b:dc:63:d8:83:59:cb:09:34:24:18:2a:dc:
09:0c:d9:b6:f1:a4:8f:1a:85:c0:8c:98:e0:4b:65:
e5:15:d1:7f:4c:56:9b:8c:0d:13:22:65:8b:1f:7a:
87:04:27:46:e0:58:56:82:2c:4a:85:0b:70:fd:8b:
38:7f:c3:72:62:03:37:ab:53:28:dc:ac:ad:b1:dd:
dd:21:38:2e:0d:1a:4b:86:89:c4:d0:c9:93:b5:3b:
9f:53:ec:dc:b6:61:32:fc:f7:26:2b:db:15:7f:75:
7b:52:23:e1:f5:5e:d7:56:c3:c7:71:a9:00:80:86:
a8:b0:e3:dc:2c:90:ab:5b:74:83:99:9a:e2:9b:81:
c2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E2:D0:6A:B8:10:93:6C:C4:E1:47:04:3F:0F:DB:F0:13:16:06:C2
X509v3 Authority Key Identifier:
keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:bb:93:1d:c5:6b:ac:54:42:5d:a1:68:51:af:88:a4:a3:f2:
31:e8:0e:5d:fc:69:8a:bd:e2:98:05:ee:a1:7f:4d:8a:f1:a1:
40:56:29:88:0f:2c:10:47:0a:3a:03:08:86:f2:f4:3e:97:e3:
fc:bc:89:f2:89:52:b2:ee:f8:df:dc:5f:7b:6e:f0:9f:a1:b7:
7b:e1:80:0c:df:b9:d6:7a:5f:91:d2:32:ad:22:14:ff:7c:11:
84:1c:67:5e:e4:e4:c2:08:dc:0c:9e:c8:2a:ed:f2:d7:47:2f:
3a:35:5a:bd:c4:76:84:23:94:11:cb:a1:10:5e:e0:51:af:51:
f5:c9:19:bf:5d:fa:ec:0d:6c:97:8b:b2:ba:2d:9a:05:b0:e9:
aa:8f:1b:23:b9:87:2c:27:45:b3:af:3a:c2:47:fe:e7:20:76:
67:af:f0:1d:23:8f:72:88:40:fc:bb:ff:8e:50:e6:5e:37:d5:
9e:a4:ac:af:17:91:52:f1:c5:b4:30:72:92:df:db:ec:0d:34:
03:57:bd:a2:1b:2e:d7:09:b8:84:d6:3e:70:3e:b9:15:73:6f:
d7:81:78:d0:69:09:aa:72:79:b0:79:eb:47:89:5f:8a:52:2c:
d6:be:74:85:34:02:3c:b2:95:8b:e0:f1:5d:ee:98:db:8c:6f:
f7:92:e8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:38 2026 by rpki-client