Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
File: dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json)
Hash identifier: oyzN6kL6ru/CkowKUbrcPAeCz/yhyuuL9M+mDGLT52Q=
Subject key identifier: CC:54:81:6A:3A:E4:3F:80:14:A9:1C:0F:05:6B:59:0D:EE:A1:5E:FD
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial: 019D99D082EDCD3C9EF58F63B5C1E4C4750B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
Manifest number: 1218
Signing time: Fri 17 Apr 2026 05:01:12 +0000
Manifest this update: Fri 17 Apr 2026 05:01:12 +0000
Manifest next update: Sat 18 Apr 2026 05:01:12 +0000
Files and hashes: 1: 1-8pYu0OrjC9qLQ6X0Vz4rzpi4xs.roa (hash: v8h+idHdPhaBswH4S1i+10SArJAwwzpb48HkIAMaMbM=)
2: RDZxalDBba-KXcD-MDsp1kF4DmQ.roa (hash: RfbDrqRTWuSJ+e1Z40xGqlEQmsc4zVr3kOeTExU0ca4=)
3: _I5ZyNzs_5Q4toW0cmKShzzyGvc.roa (hash: CAZwJiEdqc66XP0aQOYr0r6o81HABrE7ATqPwsQle/M=)
4: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: DX4AXWbpRHv2ad/3SEXGX/7Z/K80eekQHkkNLsHTwtk=)
5: iB4-Lv4Y5pfev06wgUUTf3MkuqE.asa (hash: v6oTaVMB32ysT0WuXZ0EG1XMy1UYjDtrDIPZoAi/1TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:82:ed:cd:3c:9e:f5:8f:63:b5:c1:e4:c4:75:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Validity
Not Before: Apr 17 05:01:12 2026 GMT
Not After : Apr 18 05:01:12 2026 GMT
Subject: CN=cc54816a3ae43f8014a91c0f056b590deea15efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:3e:64:98:34:2b:c9:78:20:9a:69:48:8b:
ac:c4:25:af:c2:44:aa:fc:15:fa:73:4e:c4:eb:ad:
f5:60:e0:52:d6:d1:67:d5:08:5a:e7:2c:c9:88:c5:
7b:fa:4f:0c:2b:54:5e:84:ff:6e:38:08:0c:36:4e:
c7:65:ed:ec:42:e7:c3:5c:e2:e7:f8:cf:57:1c:2d:
f3:7d:7b:7b:48:9d:41:82:b2:36:d8:fa:c6:5b:7f:
16:33:d9:fb:43:0e:f0:78:8e:44:a0:45:40:02:81:
3a:76:58:3c:14:21:78:45:47:7a:17:ea:d7:e6:12:
0c:38:f4:f1:e0:f0:0c:d2:c1:0e:58:1f:ee:38:03:
b4:67:52:b0:77:0b:e3:5b:93:6a:df:07:f6:5b:e3:
6f:cf:cf:6d:2b:25:86:5e:54:0a:79:a7:88:9d:09:
18:9c:01:1f:78:6a:0c:14:6b:d0:3b:5f:bf:73:06:
46:fe:cf:1a:84:80:07:79:79:7d:c2:c4:5d:ab:5c:
09:11:85:cc:7c:08:5d:f0:29:2f:ae:3a:04:8b:4b:
7e:9d:37:9d:a4:2f:e0:14:59:73:73:81:ac:38:e0:
2d:f6:59:65:af:2e:7a:df:64:5b:16:61:62:91:43:
ca:92:5c:58:88:c6:72:4a:9f:ff:ec:d1:8b:59:99:
5d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:54:81:6A:3A:E4:3F:80:14:A9:1C:0F:05:6B:59:0D:EE:A1:5E:FD
X509v3 Authority Key Identifier:
keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:76:1f:e6:57:96:49:b7:9c:10:7d:ed:a4:8b:3f:03:0c:6c:
41:eb:ba:18:3f:b5:a7:5a:32:6b:14:0c:5a:ed:04:17:96:24:
3f:0e:71:04:60:5c:c9:b3:7f:1b:ab:8e:52:34:e6:e0:fb:95:
b1:d4:c0:6e:46:e7:75:42:5c:19:65:2e:18:7d:47:bd:51:c7:
3d:82:7d:ce:d5:61:2f:9a:b0:7a:c7:dd:f5:13:13:ce:f6:96:
4d:78:e4:d1:6f:8d:ff:a0:bf:55:40:47:e0:b7:eb:f9:37:f1:
e7:90:55:55:b7:a6:55:5d:35:3a:a3:23:e4:73:57:bc:a6:c1:
ac:a4:10:87:4d:91:34:1f:a4:eb:15:52:27:a3:9f:fe:59:50:
0f:c9:e4:b2:22:5b:c6:55:46:7b:44:59:29:c1:e8:21:22:10:
56:f6:af:e7:00:e9:95:6c:70:b0:68:7f:6b:1d:5d:64:bb:98:
a1:2b:79:c5:a6:a7:dd:5c:d5:34:7f:57:0f:b1:ef:d6:ed:50:
c5:f2:63:b5:67:26:cc:15:62:43:33:a0:90:a0:36:e0:61:56:
db:a8:be:fc:2a:9a:b7:a5:f1:fb:b0:9c:ee:14:8b:c6:c8:b3:
c5:26:f7:32:7e:b9:e0:0e:b0:35:cd:81:86:be:b9:ab:9a:22:
6e:47:47:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0ILtzTye9Y9jtcHkxHULMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTBjZTZiNmY4Zjc1MGUwMzU4NGViYmQ3YmRhZDBmMTFm
YmUzMWMwHhcNMjYwNDE3MDUwMTEyWhcNMjYwNDE4MDUwMTEyWjAzMTEwLwYDVQQD
EyhjYzU0ODE2YTNhZTQzZjgwMTRhOTFjMGYwNTZiNTkwZGVlYTE1ZWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbM+ZJg0K8l4IJppSIusxCWvwkSq
/BX6c07E6631YOBS1tFn1Qha5yzJiMV7+k8MK1RehP9uOAgMNk7HZe3sQufDXOLn
+M9XHC3zfXt7SJ1BgrI22PrGW38WM9n7Qw7weI5EoEVAAoE6dlg8FCF4RUd6F+rX
5hIMOPTx4PAM0sEOWB/uOAO0Z1KwdwvjW5Nq3wf2W+Nvz89tKyWGXlQKeaeInQkY
nAEfeGoMFGvQO1+/cwZG/s8ahIAHeXl9wsRdq1wJEYXMfAhd8CkvrjoEi0t+nTed
pC/gFFlzc4GsOOAt9lllry5632RbFmFikUPKklxYiMZySp//7NGLWZldhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxUgWo65D+AFKkcDwVrWQ3uoV79MB8GA1UdIwQY
MBaAFHSQzmtvj3UOA1hOu9e9rQ8R++McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAt
YzQ5NmY5Y2FmYTgzLzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAtYzQ5NmY5Y2FmYTgz
LzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHYf5leW
SbecEH3tpIs/AwxsQeu6GD+1p1oyaxQMWu0EF5YkPw5xBGBcybN/G6uOUjTm4PuV
sdTAbkbndUJcGWUuGH1HvVHHPYJ9ztVhL5qwesfd9RMTzvaWTXjk0W+N/6C/VUBH
4Lfr+Tfx55BVVbemVV01OqMj5HNXvKbBrKQQh02RNB+k6xVSJ6Of/llQD8nksiJb
xlVGe0RZKcHoISIQVvav5wDplWxwsGh/ax1dZLuYoSt5xaan3VzVNH9XD7Hv1u1Q
xfJjtWcmzBViQzOgkKA24GFW26i+/Cqat6Xx+7Cc7hSLxsizxSb3Mn654A6wNc2B
hr65q5oibkdHSg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:54 2026 by rpki-client