Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File: Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier: BGWgSEH6J2WILj+XJHVZH0c4lBVfPpLRWa2WU9Klt3M=
Subject key identifier: BD:DA:05:31:71:AF:1D:BA:4B:D5:86:77:97:F8:48:8D:A0:D1:BA:04
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 01A0D7CD4A688E584991CF1FF17C98F44D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 09:02:30 +0000
Manifest this update: Fri 25 Sep 2026 09:02:30 +0000
Manifest next update: Sat 26 Sep 2026 09:02:30 +0000
Files and hashes: 1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: I0Dsh94ljbTPIeKLMP3kHD0Mf+IQgug7x47q6MsqX+w=)
2: Rn3_9vFVXU06CNsxoJF1MmOpw7M.roa (hash: xyFTVjGVyU+raorbvx64u0pXwIGXyRN5Lt5srPA+50U=)
3: f-ogC67M0j6pmdbRailAwDmYBsk.roa (hash: AiwIB7mPfTBWZfsnFMwdI5gkTn2LtdcdGevndgaf5SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cd:4a:68:8e:58:49:91:cf:1f:f1:7c:98:f4:4d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Sep 25 09:02:30 2026 GMT
Not After : Sep 26 09:02:30 2026 GMT
Subject: CN=bdda053171af1dba4bd5867797f8488da0d1ba04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:ac:74:19:17:c7:b0:c0:45:a2:69:9e:3b:
8a:d5:df:5c:12:36:41:53:95:9e:b1:ab:c5:4a:67:
1a:ca:9f:d5:40:f9:ec:5e:2b:a0:8f:09:38:94:66:
d8:5f:dd:6e:11:a6:90:ed:68:0c:81:eb:d7:c1:9a:
f1:5a:2e:47:33:4e:ce:60:93:63:71:a4:3b:75:4c:
41:6d:21:fa:a7:83:f5:bb:c1:41:ce:c9:bd:a7:59:
72:b6:3f:c4:4f:df:ab:f7:30:e9:dc:02:55:10:6e:
8f:40:b8:08:dd:21:90:71:a3:f3:1f:41:1b:5f:7b:
46:34:4a:06:1c:f4:d5:fd:5e:2b:ec:a0:aa:53:a0:
e3:7d:6b:b4:d8:57:36:48:49:6e:a2:cd:6d:66:ee:
8d:a5:a6:12:e0:fd:6b:0c:e3:3d:37:93:a1:3e:e7:
bb:c2:0b:cb:a8:c3:65:59:8b:52:03:69:92:05:d7:
0c:41:06:0d:06:20:32:37:65:c9:ec:e3:85:4a:88:
69:98:1b:11:50:24:46:7d:2e:dc:65:57:d5:32:2e:
18:5c:57:9d:bc:08:57:ce:de:56:7d:68:2c:8b:28:
bc:fc:57:d1:47:1d:9d:a0:3a:9d:e5:43:c7:fc:37:
c0:3e:83:59:d2:26:98:86:26:e2:aa:ac:f0:96:33:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DA:05:31:71:AF:1D:BA:4B:D5:86:77:97:F8:48:8D:A0:D1:BA:04
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6e:b2:a2:f3:c8:ee:49:d4:69:c8:f1:29:3c:9a:1f:cc:a2:
65:83:27:27:c9:3e:a8:c1:9e:8a:e0:b0:7e:67:a5:bd:b3:c2:
cc:50:f5:d3:50:23:b6:b8:49:f6:e6:d5:ec:f5:bd:58:9d:6a:
88:87:4b:95:17:22:2c:08:c8:f6:af:81:50:2f:3a:99:39:0a:
d1:a6:eb:83:e2:86:33:54:b1:b9:c9:8d:58:0e:02:84:f7:e5:
21:6d:2c:c3:56:6a:4b:8c:b6:ff:d0:5a:f6:02:eb:42:e0:9d:
c5:8d:21:27:53:86:a0:2a:e8:e8:35:c5:ff:0f:12:19:13:62:
5e:6b:25:b0:7c:a7:90:30:74:87:3f:42:c3:bc:14:70:b4:75:
1d:19:7b:3b:a5:f3:cd:32:19:6f:98:ec:86:a5:b2:9e:e8:ac:
80:66:84:35:3c:e6:4f:8d:d6:9d:d9:67:a9:11:4f:96:53:fa:
34:5c:ba:5f:88:55:46:20:4d:3b:d7:5a:3a:6a:e7:0a:e3:78:
32:d5:da:1a:ba:44:f3:2e:64:2b:95:c6:21:01:d3:db:50:33:
71:8d:b7:bf:ee:ae:e5:a9:ab:1b:b7:36:4b:60:61:03:b3:4f:
64:a8:15:e5:01:52:2e:01:56:f4:68:b8:ab:43:63:46:f6:0d:
e8:38:1a:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXzUpojlhJkc8f8XyY9E0qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlM2M5ZWUxYmUzMzA4ZmQ2YmQ0YTdjN2FjMmI5ZDkxMDA4
OWI3NzkwHhcNMjYwOTI1MDkwMjMwWhcNMjYwOTI2MDkwMjMwWjAzMTEwLwYDVQQD
EyhiZGRhMDUzMTcxYWYxZGJhNGJkNTg2Nzc5N2Y4NDg4ZGEwZDFiYTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6+sdBkXx7DARaJpnjuK1d9cEjZB
U5WesavFSmcayp/VQPnsXiugjwk4lGbYX91uEaaQ7WgMgevXwZrxWi5HM07OYJNj
caQ7dUxBbSH6p4P1u8FBzsm9p1lytj/ET9+r9zDp3AJVEG6PQLgI3SGQcaPzH0Eb
X3tGNEoGHPTV/V4r7KCqU6DjfWu02Fc2SEluos1tZu6NpaYS4P1rDOM9N5OhPue7
wgvLqMNlWYtSA2mSBdcMQQYNBiAyN2XJ7OOFSohpmBsRUCRGfS7cZVfVMi4YXFed
vAhXzt5WfWgsiyi8/FfRRx2doDqd5UPH/DfAPoNZ0iaYhibiqqzwljMniQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3aBTFxrx26S9WGd5f4SI2g0boEMB8GA1UdIwQY
MBaAFA48nuG+Mwj9a9Snx6wrnZEAibd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGp5ZTRiNHpDUDFyMUtmSHJDdWRrUUNKdDNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9jYWEyZGEtNWViYy00NWNiLWI4ZmUt
MDhmM2U4OTA3YzQyLzEvRGp5ZTRiNHpDUDFyMUtmSHJDdWRrUUNKdDNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9jYWEyZGEtNWViYy00NWNiLWI4ZmUtMDhmM2U4OTA3YzQy
LzEvRGp5ZTRiNHpDUDFyMUtmSHJDdWRrUUNKdDNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT26yovPI
7knUacjxKTyaH8yiZYMnJ8k+qMGeiuCwfmelvbPCzFD101AjtrhJ9ubV7PW9WJ1q
iIdLlRciLAjI9q+BUC86mTkK0abrg+KGM1SxucmNWA4ChPflIW0sw1ZqS4y2/9Ba
9gLrQuCdxY0hJ1OGoCro6DXF/w8SGRNiXmslsHynkDB0hz9Cw7wUcLR1HRl7O6Xz
zTIZb5jshqWynuisgGaENTzmT43WndlnqRFPllP6NFy6X4hVRiBNO9daOmrnCuN4
MtXaGrpE8y5kK5XGIQHT21AzcY23v+6u5amrG7c2S2BhA7NPZKgV5QFSLgFW9Gi4
q0NjRvYN6DgaWA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:11:52 2026 by rpki-client