Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
File: DjagX652BpH3DPtbT2JJlHq63oc.mft (raw, json)
Hash identifier: syIrF04ptiUW3npliCV/mQoJ8CjBq1VOhoXuVIvjBdo=
Subject key identifier: 5E:E5:98:EB:6D:B4:83:17:8E:B6:FC:E4:61:EA:1B:2A:0F:58:EA:69
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Certificate issuer: /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial: 019D2B170758357F7D908DF51BC5911B4E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 17:00:22 +0000
Manifest this update: Thu 26 Mar 2026 17:00:22 +0000
Manifest next update: Fri 27 Mar 2026 17:00:22 +0000
Files and hashes: 1: DjagX652BpH3DPtbT2JJlHq63oc.crl (hash: VZxhm1cKbFhkqMEdsvIr5/vZCrp1kuNTV7LOz/OfT+4=)
2: _j5362r7qv_9JgdkjeZ2Dr4Qsuk.roa (hash: XaswjrTxz0kpjxbDPMGjQHSDzCAPii9RYq3exV8GmFk=)
3: aezv-rxn8SkJT7jOMF8hl_lwOeo.roa (hash: jv2UN7Qe0W1KSoZ0p/rqmZ5wT1beFaF7g2jYyXMocTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:07:58:35:7f:7d:90:8d:f5:1b:c5:91:1b:4e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
Validity
Not Before: Mar 26 17:00:22 2026 GMT
Not After : Mar 27 17:00:22 2026 GMT
Subject: CN=5ee598eb6db483178eb6fce461ea1b2a0f58ea69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8d:3b:a4:2b:1b:45:b9:25:3a:b1:56:c6:49:
20:f4:a9:ec:82:a1:ab:4a:4d:d8:3b:b5:70:07:0e:
ac:dd:6e:2b:3c:93:92:1f:25:9e:da:cb:1f:79:4e:
8d:a9:44:69:20:89:cb:c8:da:60:f2:1b:e0:3a:6a:
39:98:a5:70:b2:90:d0:29:76:1f:7f:96:3e:9c:6b:
fa:58:19:34:ea:b5:61:23:b2:85:46:24:b4:34:65:
a7:8a:ca:fe:ac:87:3c:53:39:2e:12:10:c4:a8:ca:
bc:12:17:fc:50:0e:aa:e7:5c:15:25:9c:16:0b:3c:
73:db:bc:df:ed:e4:5f:ac:60:78:76:97:d2:38:c5:
e6:b2:57:dd:6f:fe:61:8e:41:2f:aa:00:ca:6f:89:
78:ea:6b:1e:1b:35:55:2d:bc:58:52:d7:f0:2d:01:
69:ce:03:67:93:ff:85:d1:97:a2:8b:2f:74:ab:6f:
aa:7d:58:9a:bc:10:38:c3:78:80:27:23:4e:06:ba:
4e:2d:5e:4a:37:a0:15:f6:a7:b7:a9:97:3a:5b:fa:
46:20:d7:be:ea:f1:36:3d:a3:3e:10:85:f7:08:d5:
65:dc:a9:a8:86:5b:e3:df:07:a8:39:9c:7b:03:18:
a2:ba:ec:b5:53:fb:45:64:16:14:93:66:e6:50:1e:
0e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E5:98:EB:6D:B4:83:17:8E:B6:FC:E4:61:EA:1B:2A:0F:58:EA:69
X509v3 Authority Key Identifier:
keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:39:a9:c8:df:0b:c7:2e:e6:ef:20:94:d1:1d:f4:a0:91:85:
eb:14:da:52:5a:df:1e:67:14:7a:76:7d:9e:55:78:e5:46:f4:
61:f4:b1:07:73:33:bd:13:e3:47:c6:fc:49:c5:22:1e:21:51:
24:3c:2a:c4:f1:f7:66:1d:a1:f7:a5:e9:6f:f8:aa:a4:04:e3:
0d:0b:44:28:bd:64:dd:6a:aa:95:ea:2a:d1:5a:8f:5c:11:2e:
85:c8:6d:fe:38:70:01:fd:08:bb:16:e0:7a:63:30:39:b8:f1:
d4:cd:7f:a0:09:7a:b5:6c:6f:6b:39:82:54:f6:b6:55:4a:e6:
a5:d1:c5:77:b2:52:9d:d2:0e:ba:29:9d:82:27:96:98:99:b4:
e8:d9:84:88:1c:12:35:11:99:d2:be:77:d9:2f:95:32:8f:fb:
8f:bc:1a:43:c4:70:74:1a:52:5e:7c:7d:b3:68:6a:ec:73:fc:
95:80:b5:0e:7b:a8:37:9e:0f:cf:cb:15:68:b6:c4:52:5b:b5:
17:10:f6:da:fa:ce:d0:a8:3d:67:df:da:76:aa:b3:09:bc:14:
8b:e7:91:d3:b4:1d:6c:e0:42:e9:2b:2c:c1:ea:b9:d5:ef:06:
41:5c:f7:95:c5:d7:d8:c2:00:9f:d1:6c:dd:8c:ed:d6:11:ae:
64:5a:c1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:26:43 2026 by rpki-client