Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
File: DJ8RVKmhXVqDqamBenJL_FOdtZY.mft (raw, json)
Hash identifier: shKXMG1Ll8oAMcnoTCjIjXIWfNYdpGfHtiYBUqaK4fo=
Subject key identifier: 65:10:AA:CD:54:8D:2D:BB:6C:FF:94:1E:33:55:99:70:9D:E4:92:7D
Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
Certificate issuer: /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Certificate serial: 019E1FB5AA2DE5EDEE8E750080502461536E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 05:00:59 +0000
Manifest this update: Wed 13 May 2026 05:00:59 +0000
Manifest next update: Thu 14 May 2026 05:00:59 +0000
Files and hashes: 1: 4qZtNptb8ER3904DdA6MFe8pZsU.roa (hash: Lxa0NTdMnJxLEjdaVFMPjQXrKW0qd4O0NLrjMIPI/ME=)
2: DJ8RVKmhXVqDqamBenJL_FOdtZY.crl (hash: yV772/WHr76XL9cgj7gb8TJqrCqgrqpHYH/O2jhP1Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:aa:2d:e5:ed:ee:8e:75:00:80:50:24:61:53:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Validity
Not Before: May 13 05:00:59 2026 GMT
Not After : May 14 05:00:59 2026 GMT
Subject: CN=6510aacd548d2dbb6cff941e335599709de4927d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e9:04:d1:ee:0b:ce:a9:03:69:d1:4e:85:eb:
97:50:e6:e3:fa:1b:c6:d9:85:fb:4a:23:2d:65:33:
cb:98:57:00:28:43:ad:36:ab:63:b2:f2:f3:7b:9a:
1f:62:72:fb:37:29:4f:cf:a0:1d:d5:35:88:70:f8:
00:3b:91:10:a7:a9:84:d7:0e:3b:ad:a9:67:76:e3:
17:8c:25:41:a9:bf:ef:92:37:49:35:3a:a3:bc:d0:
22:2b:f0:dc:90:58:9e:d7:ef:9d:9e:02:4d:2c:1c:
bd:46:33:53:42:3b:a2:fe:c7:c1:2c:ae:c8:b4:e0:
05:7d:5a:f8:4c:0e:8f:23:db:97:30:b4:c0:c7:9d:
43:04:ce:e0:b3:a2:4b:63:51:a2:89:e9:3b:7e:4c:
d5:08:5e:b0:f2:d2:c8:30:ba:d5:55:75:83:47:fc:
1b:59:a3:ef:3a:56:d4:b2:ba:bb:05:9a:8d:81:48:
79:2b:9a:34:30:4e:d3:e4:66:c9:4f:09:2c:3d:14:
4f:83:65:dd:f0:9a:9f:69:fe:8f:43:ef:b5:05:36:
63:c5:92:d9:dd:cd:b1:84:e6:81:11:b4:7c:2b:bc:
40:c2:dc:63:e0:37:2a:d9:20:77:f5:a3:09:2c:61:
90:aa:e6:d5:1c:cc:80:76:f5:aa:74:2f:f0:9c:30:
cd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:10:AA:CD:54:8D:2D:BB:6C:FF:94:1E:33:55:99:70:9D:E4:92:7D
X509v3 Authority Key Identifier:
keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e6:a8:27:69:e3:c2:8c:ea:8e:04:b3:26:13:2d:0e:3c:69:
f3:67:d7:7b:97:7f:99:a5:39:e5:c2:06:4e:54:35:83:cd:15:
f2:33:f2:d1:82:ea:1c:ac:96:38:32:ff:64:74:3c:d1:c8:b1:
38:0c:72:dc:fb:de:df:b3:00:78:b2:25:78:33:33:aa:e4:b1:
4a:d5:64:a9:f1:ad:53:c7:19:82:d9:c0:60:c3:3b:90:59:bb:
cc:9c:ed:61:3e:c4:25:fe:93:bd:cc:8d:1d:02:47:c9:9b:09:
c7:63:2c:ee:2b:d0:a7:c1:5d:28:9d:2e:21:2b:61:77:3a:bb:
2d:cd:e7:3e:89:b6:8a:02:60:a4:0f:fa:03:b3:39:1d:7f:9e:
9f:8a:26:a7:fb:4c:22:46:62:a3:eb:01:17:d7:c8:e3:75:31:
61:c3:84:cb:a0:41:6e:ec:11:6c:f6:c6:df:9e:e6:d8:ef:19:
5b:7c:e3:c7:00:5e:70:40:ca:ab:62:6e:48:ad:21:57:7a:fe:
62:20:a1:47:d1:11:58:08:97:d8:cc:d9:62:2c:57:1d:d2:5d:
9d:9d:59:1d:f0:85:e7:db:76:0c:9e:86:fd:53:56:2f:d9:54:
e3:82:b7:3b:12:4a:79:10:7c:ad:21:f6:41:2a:ef:98:fe:12:
ef:f3:e3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:01:17 2026 by rpki-client