Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
File: DJvBsU8NllP1FOwWd3G3dVmsY8w.mft (raw, json)
Hash identifier: DJ7Nu4cpeFEmReNtddOL3buWLTnFlsWmXwX8QOQ13s4=
Subject key identifier: B1:6D:97:71:7E:C2:2D:83:36:59:DC:15:DF:77:2F:3A:AD:6B:12:68
Authority key identifier: 0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
Certificate issuer: /CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Certificate serial: 019D27DFA380A93F7925FEED684C63A59BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:00 +0000
Manifest this update: Thu 26 Mar 2026 02:01:00 +0000
Manifest next update: Fri 27 Mar 2026 02:01:00 +0000
Files and hashes: 1: DJvBsU8NllP1FOwWd3G3dVmsY8w.crl (hash: 58qxmHeR7Bq74zQm4qvIubV9Tzl+Q7N7Dfnjy2/HzCA=)
2: USkUk1O_55dbtUL8NgX3D9MuJlk.roa (hash: l0RD4Yub4vls7PSxviu1JxH4TvO1gXOCiQ61YNO4X7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:a3:80:a9:3f:79:25:fe:ed:68:4c:63:a5:9b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Validity
Not Before: Mar 26 02:01:00 2026 GMT
Not After : Mar 27 02:01:00 2026 GMT
Subject: CN=b16d97717ec22d833659dc15df772f3aad6b1268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:fa:31:27:6a:77:ae:73:7d:b9:d3:f1:73:
81:ed:19:33:74:40:6c:e0:c5:21:dd:f3:9e:86:bd:
ac:2f:a0:9b:24:9b:9d:dc:eb:38:38:ad:91:8c:d3:
f6:85:5d:60:39:f3:62:f3:fe:dd:48:7b:e8:a9:2d:
45:d2:2c:6c:32:4a:6c:b9:81:87:f8:a4:a3:c0:5a:
7b:c1:c5:d5:be:55:84:35:f0:20:8a:97:60:9c:1f:
a6:16:e8:50:f9:43:bc:ac:94:04:ef:4d:dd:86:56:
7d:6c:08:ea:17:98:b4:5d:35:8a:5b:53:2b:ce:25:
ab:b5:30:67:b8:2b:d6:f6:fe:6f:9e:bf:d9:07:60:
de:2e:76:7d:f6:e3:ee:73:94:36:3c:5b:38:08:ae:
97:8f:a8:94:05:6c:00:e9:05:8b:64:f5:1e:13:88:
1a:e6:00:43:27:cb:d5:ba:06:50:7e:a9:1c:e9:0f:
62:3e:d5:b9:8a:7e:88:c3:0b:7e:bd:b2:06:b8:52:
60:5f:18:c8:5d:ad:1b:40:99:c0:40:65:d0:0a:47:
30:ec:0d:bf:a1:fc:cb:10:a4:db:81:a9:a3:1e:bc:
55:76:d6:3b:c7:d8:de:48:7b:06:f8:6c:11:0c:c0:
d1:bb:f6:d5:93:99:0a:5a:5a:90:8c:aa:74:bc:64:
d7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6D:97:71:7E:C2:2D:83:36:59:DC:15:DF:77:2F:3A:AD:6B:12:68
X509v3 Authority Key Identifier:
keyid:0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:28:01:c2:96:f3:5c:df:9d:9b:ca:98:dc:05:66:f9:2f:27:
84:51:0e:16:88:0c:67:23:fa:d8:32:09:c9:43:71:75:20:c2:
1d:f0:8f:3f:ce:72:ca:8d:67:0b:ac:b9:b3:2c:d0:a1:49:03:
4b:cb:0f:36:47:71:0f:97:6c:6f:dc:e7:85:be:82:e0:4c:59:
9d:67:cf:ce:6f:3d:af:e0:df:72:dc:7b:62:de:8b:12:5c:10:
66:ad:96:85:29:3f:aa:ea:40:30:d6:76:93:db:fe:5e:b5:83:
f8:ae:ee:15:3a:51:bf:1e:62:49:f4:7a:e4:50:80:96:3c:ea:
46:e8:80:dd:9e:0f:ea:84:d7:2f:aa:04:b6:02:c9:03:55:77:
df:ec:78:08:65:f6:76:9b:7c:46:5e:c1:b2:39:23:52:9b:69:
bb:18:e3:ca:a0:ef:54:f3:03:1a:4c:c7:5c:f0:04:c5:7f:65:
cb:65:83:ec:59:a8:a4:98:40:04:a0:6f:9e:c1:0c:a9:99:09:
85:d1:a4:59:6d:be:67:57:f1:f3:cc:1b:88:ab:6c:fa:f0:6d:
5c:a9:86:34:e4:01:cf:01:88:dd:e7:b1:87:d3:24:2e:d1:e0:
09:dc:ed:b6:60:91:9b:26:a3:ee:1f:bc:0e:a9:24:90:d2:6f:
84:72:38:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:23 2026 by rpki-client