Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
File: DjagX652BpH3DPtbT2JJlHq63oc.mft (raw, json)
Hash identifier: EemGbrOSPabE694R9mKtwSOVwT4x2t0FWIudGsxogdA=
Subject key identifier: 7F:FA:79:EA:86:84:6D:8F:B6:D9:01:78:D7:84:36:44:29:E1:A6:6C
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Certificate issuer: /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial: 019D2D056BE83CF3C894DE58E77D78E45F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
Manifest number: 1889
Signing time: Fri 27 Mar 2026 02:00:23 +0000
Manifest this update: Fri 27 Mar 2026 02:00:23 +0000
Manifest next update: Sat 28 Mar 2026 02:00:23 +0000
Files and hashes: 1: DjagX652BpH3DPtbT2JJlHq63oc.crl (hash: utL5vhgUeMGtX4RKE7yRUzgnC0KSaJi1He+g/sasfW8=)
2: _j5362r7qv_9JgdkjeZ2Dr4Qsuk.roa (hash: XaswjrTxz0kpjxbDPMGjQHSDzCAPii9RYq3exV8GmFk=)
3: aezv-rxn8SkJT7jOMF8hl_lwOeo.roa (hash: jv2UN7Qe0W1KSoZ0p/rqmZ5wT1beFaF7g2jYyXMocTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:05:6b:e8:3c:f3:c8:94:de:58:e7:7d:78:e4:5f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
Validity
Not Before: Mar 27 02:00:23 2026 GMT
Not After : Mar 28 02:00:23 2026 GMT
Subject: CN=7ffa79ea86846d8fb6d90178d784364429e1a66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a5:23:a4:99:dd:91:a6:7c:ab:fd:ca:71:70:
c9:b3:9c:32:c9:0d:e3:30:dd:7e:1c:6a:5d:21:4e:
5e:1e:89:42:17:6d:5c:39:f9:26:2c:a2:f7:7f:6c:
a8:7b:36:dd:3b:9f:7e:dd:ff:50:ba:d5:d0:80:05:
54:6d:9b:c0:14:d3:74:27:52:2e:c5:c3:05:12:98:
b4:d8:14:e1:29:61:44:7c:e9:3a:07:09:60:ca:c3:
8e:75:59:2b:fd:a2:63:72:53:65:3a:65:05:e6:d2:
8b:d4:01:86:a0:4e:39:85:ca:3f:e7:55:cc:45:9d:
a4:fb:fa:07:02:fa:68:f4:88:8c:4c:fe:ce:bd:a4:
bf:bf:c2:e8:03:e4:45:43:96:49:87:cf:0d:48:a0:
0e:d9:76:0e:c2:c8:97:97:2e:54:d9:bf:3b:f4:f5:
2d:94:0c:76:be:af:e9:20:7c:ae:88:b3:33:80:80:
2b:11:68:c1:e3:88:ad:fb:89:77:d5:ee:87:bc:8d:
6e:e9:bb:60:75:6d:72:30:20:85:5e:6a:72:32:54:
7d:38:3d:ae:78:d4:3a:20:0b:b1:23:57:e9:9d:8a:
3a:5b:a4:65:fa:84:12:1a:f6:b0:39:36:d0:41:de:
59:22:5d:8f:fc:72:7d:94:9c:7e:74:c3:e6:5a:85:
0d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FA:79:EA:86:84:6D:8F:B6:D9:01:78:D7:84:36:44:29:E1:A6:6C
X509v3 Authority Key Identifier:
keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b1:e0:8b:0c:e2:a2:05:d6:6f:d0:1d:66:9f:17:45:e5:53:
98:5c:1d:8a:f1:9a:92:b0:06:e8:88:33:80:ca:12:77:4c:bb:
fa:fd:21:6e:81:6f:85:c0:60:47:07:7a:0b:7e:c0:6b:2f:96:
a8:ca:d6:af:5e:25:c6:ab:51:a6:28:0e:13:60:4e:07:54:3a:
79:a8:24:c8:50:3f:25:26:03:6d:6b:16:70:dd:6d:36:b7:38:
7d:c0:10:4e:7f:c6:12:63:e2:45:49:b1:e3:36:8d:5d:e7:f5:
02:5e:32:03:f5:0c:34:d4:e1:b3:32:a4:07:16:52:60:58:9d:
11:10:b9:7f:67:5b:31:ff:cb:e8:f6:e3:65:83:f4:d3:04:f1:
39:99:17:52:96:ba:bc:2a:b9:1c:67:c2:a8:4f:fd:88:c6:7d:
49:16:46:fd:b3:c2:67:a7:72:ec:5d:24:79:b3:ab:92:ab:ee:
94:37:98:a2:8c:a3:3d:1f:1b:df:e3:70:37:a8:bb:58:86:28:
9f:6f:98:b9:83:b5:82:45:f8:3d:3d:86:e5:39:8b:ba:80:31:
b0:9b:05:31:63:50:ae:75:72:8e:8f:e4:bd:27:bc:2b:ab:ea:
87:23:90:48:30:b9:c3:68:28:c6:32:10:28:db:09:da:c4:92:
fe:80:d3:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0tBWvoPPPIlN5Y53145F+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMzZhMDVmYWU3NjA2OTFmNzBjZmI1YjRmNjI0OTk0N2Fi
YWRlODcwHhcNMjYwMzI3MDIwMDIzWhcNMjYwMzI4MDIwMDIzWjAzMTEwLwYDVQQD
Eyg3ZmZhNzllYTg2ODQ2ZDhmYjZkOTAxNzhkNzg0MzY0NDI5ZTFhNjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KUjpJndkaZ8q/3KcXDJs5wyyQ3j
MN1+HGpdIU5eHolCF21cOfkmLKL3f2yoezbdO59+3f9QutXQgAVUbZvAFNN0J1Iu
xcMFEpi02BThKWFEfOk6BwlgysOOdVkr/aJjclNlOmUF5tKL1AGGoE45hco/51XM
RZ2k+/oHAvpo9IiMTP7OvaS/v8LoA+RFQ5ZJh88NSKAO2XYOwsiXly5U2b879PUt
lAx2vq/pIHyuiLMzgIArEWjB44it+4l31e6HvI1u6btgdW1yMCCFXmpyMlR9OD2u
eNQ6IAuxI1fpnYo6W6Rl+oQSGvawOTbQQd5ZIl2P/HJ9lJx+dMPmWoUNFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/6eeqGhG2PttkBeNeENkQp4aZsMB8GA1UdIwQY
MBaAFA42oF+udgaR9wz7W09iSZR6ut6HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGphZ1g2NTJCcEgzRFB0YlQySkpsSHE2M29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MzVkMzctMzkxYS00YWEyLWFjODMt
MGIzNmFjOGUyM2M3LzEvRGphZ1g2NTJCcEgzRFB0YlQySkpsSHE2M29jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MzVkMzctMzkxYS00YWEyLWFjODMtMGIzNmFjOGUyM2M3
LzEvRGphZ1g2NTJCcEgzRFB0YlQySkpsSHE2M29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbHgiwzi
ogXWb9AdZp8XReVTmFwdivGakrAG6IgzgMoSd0y7+v0hboFvhcBgRwd6C37Aay+W
qMrWr14lxqtRpigOE2BOB1Q6eagkyFA/JSYDbWsWcN1tNrc4fcAQTn/GEmPiRUmx
4zaNXef1Al4yA/UMNNThszKkBxZSYFidERC5f2dbMf/L6PbjZYP00wTxOZkXUpa6
vCq5HGfCqE/9iMZ9SRZG/bPCZ6dy7F0kebOrkqvulDeYooyjPR8b3+NwN6i7WIYo
n2+YuYO1gkX4PT2G5TmLuoAxsJsFMWNQrnVyjo/kvSe8K6vqhyOQSDC5w2goxjIQ
KNsJ2sSS/oDTXg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:20:46 2026 by rpki-client