Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
File: djLJDvGdK9b2aKSCbi0NFWNelH0.mft (raw, json)
Hash identifier: 2Btcf7IXGvIeTtyKSmhtzni3MfrL/cpacC0OaEcIn9o=
Subject key identifier: F2:C5:31:C7:C9:95:C8:02:1D:04:99:63:8F:D4:A5:51:77:19:02:8C
Authority key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
Certificate issuer: /CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Certificate serial: 019D273ACF85BEBBAB42D866119022397653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 23:00:58 +0000
Manifest this update: Wed 25 Mar 2026 23:00:58 +0000
Manifest next update: Thu 26 Mar 2026 23:00:58 +0000
Files and hashes: 1: djLJDvGdK9b2aKSCbi0NFWNelH0.crl (hash: 7tQX5L2KoxBX/vaMI+c92PD7GWY9fDWrUmO19q2I3kc=)
2: wh_PCPds1RwG_9tgWaa95lJUo8U.roa (hash: EEiVZ8EA5GDTXxuFdvW1T5/BRNMZ0ByEGciAuKi2zOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:cf:85:be:bb:ab:42:d8:66:11:90:22:39:76:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Validity
Not Before: Mar 25 23:00:58 2026 GMT
Not After : Mar 26 23:00:58 2026 GMT
Subject: CN=f2c531c7c995c8021d0499638fd4a5517719028c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c1:7e:81:c7:a9:64:a3:4f:91:3a:ce:5f:89:
81:0d:80:04:19:e5:ba:29:b2:e1:7e:18:55:4d:81:
60:a0:fc:97:64:20:f3:06:54:41:03:30:e4:85:65:
08:27:ba:db:b9:98:ee:a0:14:fd:41:89:bd:a3:27:
cd:2a:82:17:17:89:1c:39:df:d0:12:d5:20:b1:e1:
20:25:f1:df:05:bc:49:93:9e:3b:6f:5c:a0:5d:36:
58:00:50:08:0f:9e:df:a5:76:a4:65:7e:62:4e:6b:
ff:31:1d:b6:15:f8:40:98:83:08:18:f0:f8:79:6b:
bf:44:d5:a3:6f:c8:6c:6d:48:a3:af:e8:56:18:50:
a9:fb:03:0b:49:67:4b:3b:1b:31:ea:c3:24:af:f4:
a4:a4:ec:1a:0e:92:a7:4e:c7:62:b3:84:36:c3:22:
25:2a:04:37:7d:85:8b:ef:cc:9a:87:c3:eb:5e:a2:
da:dc:fb:37:98:9d:12:f5:a0:22:71:80:23:14:9d:
91:d4:d5:23:3b:5b:8e:79:3c:4c:fb:a7:9e:5d:20:
b2:78:2f:e3:fb:c3:57:1f:5d:ee:e6:97:8f:a9:68:
9b:d6:ad:c8:af:14:c7:43:8f:21:ac:91:4a:6a:47:
06:db:63:25:89:38:dc:98:a4:7f:48:61:1e:22:42:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C5:31:C7:C9:95:C8:02:1D:04:99:63:8F:D4:A5:51:77:19:02:8C
X509v3 Authority Key Identifier:
keyid:76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:96:4e:8d:17:d6:e0:37:d3:5b:ca:79:c5:70:ac:04:07:db:
d7:a2:ef:7f:fe:c0:da:8f:f2:03:1f:96:69:e3:6c:f0:04:18:
47:fa:a9:cd:c0:cc:b5:3a:de:8b:f8:3d:53:79:b2:2c:99:54:
cb:13:98:e4:4b:e3:ad:ed:7b:f9:23:a7:b2:a0:1e:57:af:fa:
c9:30:4e:54:55:cf:5d:c9:88:53:98:20:8f:55:4b:a4:2c:b0:
a1:75:90:a0:41:f0:5b:c6:75:3d:cd:b2:e9:7e:f1:5c:26:02:
81:26:15:8f:10:e4:ba:6c:33:e4:67:6b:63:c4:20:22:ac:d2:
c5:61:67:9d:a2:56:5d:97:27:ad:cf:fe:5f:ea:cc:0b:1c:54:
aa:1a:01:fd:c3:2e:84:f2:3b:79:e5:b4:de:ad:da:5e:17:ba:
f5:28:fc:78:58:c7:12:eb:69:2c:63:49:4e:10:27:8b:38:d8:
a4:a1:35:a5:eb:4b:11:77:74:a9:c2:50:c8:61:cd:61:21:05:
c5:f6:6c:b7:16:86:80:f7:44:d9:40:80:1f:37:41:82:14:95:
d3:ca:34:3c:05:8c:76:3c:3a:e2:a6:6e:a0:b0:42:a9:3c:98:
9b:6b:98:07:ba:31:c0:6f:cf:38:f2:7a:bf:ad:19:5e:fb:4b:
c0:c9:02:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:32:21 2026 by rpki-client