Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
File: DJpALskLW0dezJv0scZrI4ITIU4.mft (raw, json)
Hash identifier: SqTFUH9pVwu3Tp8XQkiJemi7StsW25O1E7lTTTZFSgA=
Subject key identifier: 43:0E:40:A1:0F:7B:E5:06:F5:A1:4B:C4:59:5A:17:2D:0C:63:05:40
Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
Certificate issuer: /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Certificate serial: 019D2704BC4AC9EAD29F832A75800EF28DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:01:54 +0000
Manifest this update: Wed 25 Mar 2026 22:01:54 +0000
Manifest next update: Thu 26 Mar 2026 22:01:54 +0000
Files and hashes: 1: DJpALskLW0dezJv0scZrI4ITIU4.crl (hash: iIIIU8UOLj4kEcecnU6gRqwB3EuQXn+Z/PQHz3o1qVc=)
2: Q_aD8H2Bg8D8Fk8p2Skkp_ucG04.roa (hash: szSEbM4DLAElR41izkoZqU673B1zp52SKgEtUZLpn2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:bc:4a:c9:ea:d2:9f:83:2a:75:80:0e:f2:8d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Validity
Not Before: Mar 25 22:01:54 2026 GMT
Not After : Mar 26 22:01:54 2026 GMT
Subject: CN=430e40a10f7be506f5a14bc4595a172d0c630540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:15:60:41:b2:2f:4a:42:d2:f9:ee:3c:26:bf:
a8:38:2d:17:26:6c:d1:1a:32:09:16:19:85:03:c8:
bb:af:87:a7:f0:e2:ae:3a:42:a8:81:98:62:0d:3d:
7a:2f:27:bc:58:c4:8d:b6:a6:78:d2:25:f8:9c:f9:
20:b8:e2:1c:12:83:b0:b2:71:37:7e:32:c3:9e:4a:
26:d7:94:08:d7:99:91:fc:8a:1e:fa:c7:f2:ad:a9:
56:2d:b1:af:3c:4f:bd:7a:64:76:80:7b:99:81:d1:
61:5c:28:f2:0f:80:6e:40:f2:76:6b:6c:36:75:0d:
f8:2f:76:d0:eb:b9:06:b2:51:f4:5a:eb:5b:3a:0f:
ce:09:6e:12:46:d6:fa:09:81:4b:3d:3c:0b:10:cc:
7f:b0:54:07:31:27:fc:ce:94:d1:95:02:77:cf:13:
18:c3:4b:a4:7a:83:47:e2:b3:a0:39:a5:29:04:61:
82:16:11:0f:b6:d4:7f:18:a4:d7:b0:6b:f0:27:54:
79:18:88:af:35:5f:f0:9d:5c:ce:9d:eb:9e:cd:3f:
a0:68:8e:be:15:41:a5:16:85:d7:7c:2a:75:bb:f7:
66:16:fa:9f:0e:4e:af:83:22:b7:41:41:08:3b:c7:
af:c7:46:e8:b6:c1:fd:e1:06:f8:45:e4:c3:d1:51:
6c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0E:40:A1:0F:7B:E5:06:F5:A1:4B:C4:59:5A:17:2D:0C:63:05:40
X509v3 Authority Key Identifier:
keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0c:93:18:f9:25:b7:b7:95:a9:29:92:f4:bd:6d:80:8f:9c:
ee:0a:db:3f:77:fb:82:04:59:5f:1f:be:55:42:ee:1c:5a:a8:
87:5a:24:49:13:7e:c7:ad:a9:72:2d:43:07:29:dd:3a:c7:4b:
a7:0f:b2:11:99:1c:40:34:1b:e2:76:00:df:14:7d:af:05:a5:
8e:9b:07:74:56:10:c2:ac:76:ae:ae:1d:fc:40:b9:7d:79:9d:
09:39:4a:9d:b4:49:94:ed:74:25:20:70:77:f0:19:70:f0:41:
d6:7c:b9:20:d9:5a:d2:81:0f:bf:cb:83:03:ce:6d:45:05:0b:
58:c8:57:71:a2:8d:f6:20:f5:c8:c2:dd:17:f9:d2:f1:c2:b2:
32:20:e2:74:cd:dc:3c:dd:3f:68:94:d0:26:7f:8d:c9:3a:89:
4f:b3:85:79:e6:87:2e:90:9a:28:7c:5d:ce:67:20:57:89:42:
d3:15:40:15:09:fd:72:8c:92:0b:0c:6a:4a:fc:7f:04:f9:25:
d6:47:a6:1b:36:05:df:09:3f:b4:95:30:f7:78:fc:7e:e5:06:
09:8e:ce:f8:f5:20:0b:30:39:95:eb:b8:a0:25:74:79:2e:19:
1e:ab:14:7d:77:e6:cf:21:ea:04:28:b0:2e:dc:7c:ba:cd:e8:
b8:fc:a0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:51 2026 by rpki-client