Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
File: djNetjP3aUK76Z8Smh64ik1z_Hw.mft (raw, json)
Hash identifier: po6dVRmaVJQtwYeOhIP80uKUCNb5y6usTtFsbBb+dTU=
Subject key identifier: 2A:F5:73:F5:9B:D4:E9:84:6D:99:6C:00:B1:36:3F:D1:28:1E:7B:60
Authority key identifier: 76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
Certificate issuer: /CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Certificate serial: 019D265FD2769BA2DD02D729B0697A6B4BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:47 +0000
Manifest this update: Wed 25 Mar 2026 19:01:47 +0000
Manifest next update: Thu 26 Mar 2026 19:01:47 +0000
Files and hashes: 1: djNetjP3aUK76Z8Smh64ik1z_Hw.crl (hash: LytKujntONnn1R/XjkewaxcikDLCeG57UnBkiAKG5Zc=)
2: vc11EuHx6MJU_mO-zji1HAUTYuE.roa (hash: zhFF5QQjqlWRX/BGdtV5T8ItAEzBBJfA2vn8FYdOVvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:d2:76:9b:a2:dd:02:d7:29:b0:69:7a:6b:4b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Validity
Not Before: Mar 25 19:01:47 2026 GMT
Not After : Mar 26 19:01:47 2026 GMT
Subject: CN=2af573f59bd4e9846d996c00b1363fd1281e7b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:a6:0f:d9:05:be:bb:16:9a:46:04:80:67:
c0:d6:97:73:15:4a:84:1b:7d:39:9f:9c:cf:df:3e:
7b:a0:d3:51:13:3e:ee:b2:2c:c6:af:22:4f:1a:50:
aa:ad:87:41:48:af:d1:00:6a:fa:4f:82:46:79:44:
38:3e:9e:f7:84:0c:4a:03:2d:1e:fc:a5:86:5a:ce:
04:7f:1e:f8:51:e1:84:f3:4d:93:67:7b:db:22:96:
3b:9b:d5:d9:6a:9d:a4:50:10:71:4e:ec:d2:ef:46:
6e:8f:61:de:d2:37:6a:78:16:e3:f9:ec:7f:2f:61:
49:1f:47:9d:23:0e:83:7e:37:e0:24:16:bc:a3:96:
04:fa:8f:d7:9f:c5:e9:bc:81:7a:06:71:06:18:be:
7d:43:5d:db:a3:be:55:9b:8f:f9:a9:0a:4d:e6:eb:
2c:23:85:01:c7:66:31:6d:dc:d8:bf:c3:6b:9c:42:
d1:f3:94:7f:36:d6:8e:81:a1:8e:fc:16:f3:a1:13:
4b:62:e7:a8:1e:4e:ea:86:0a:e7:ac:28:7f:42:42:
dc:24:71:8e:b8:26:aa:3e:f9:eb:97:10:64:4a:c9:
d4:92:17:96:15:5e:01:b8:12:c4:e8:e3:6c:7c:0e:
7d:de:27:84:1c:cd:b3:c4:43:04:34:85:7c:73:4d:
cd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F5:73:F5:9B:D4:E9:84:6D:99:6C:00:B1:36:3F:D1:28:1E:7B:60
X509v3 Authority Key Identifier:
keyid:76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:5c:a6:d2:f3:ce:37:b6:58:3a:08:b1:fd:d0:41:d9:30:41:
eb:d4:c1:d3:13:31:88:f6:77:dc:61:ad:2b:53:fc:5d:49:ec:
33:23:5e:30:71:1a:08:5d:5f:e3:72:a3:ee:94:ab:59:76:0c:
7f:41:5a:0a:72:98:62:cc:71:30:34:51:23:d2:71:90:00:40:
96:e1:0b:d7:c9:b3:ac:55:2e:b9:f5:5e:de:03:70:e2:f9:a3:
ce:91:b7:37:72:16:c7:bc:9c:92:8d:2d:a1:8d:9c:fc:0a:3e:
ba:29:b4:53:60:55:43:c2:1b:a7:27:68:9e:ab:11:b9:87:10:
fa:be:3f:86:5a:13:c0:3f:e6:ba:04:a0:e5:b6:26:b7:b0:cd:
91:42:03:23:34:4a:44:1c:38:f4:96:6f:17:dd:6e:56:76:38:
a8:68:db:a2:40:d3:50:be:76:55:5f:d2:21:c7:74:7a:d7:89:
97:f4:c5:02:ce:4c:1f:19:5c:86:9b:53:74:76:42:28:cb:99:
cc:54:ce:e4:a5:9d:0a:cc:1a:08:23:9d:02:61:9f:a1:68:31:
08:3a:59:ee:8b:34:7e:43:0d:34:48:92:70:03:09:b3:d9:d2:
e1:16:46:db:ed:a1:6c:87:ac:c8:9d:55:97:b6:83:4d:02:fb:
7c:6d:6c:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX9J2m6LdAtcpsGl6a0vEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MzM1ZWI2MzNmNzY5NDJiYmU5OWYxMjlhMWViODhhNGQ3
M2ZjN2MwHhcNMjYwMzI1MTkwMTQ3WhcNMjYwMzI2MTkwMTQ3WjAzMTEwLwYDVQQD
EygyYWY1NzNmNTliZDRlOTg0NmQ5OTZjMDBiMTM2M2ZkMTI4MWU3YjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVmmD9kFvrsWmkYEgGfA1pdzFUqE
G305n5zP3z57oNNREz7usizGryJPGlCqrYdBSK/RAGr6T4JGeUQ4Pp73hAxKAy0e
/KWGWs4Efx74UeGE802TZ3vbIpY7m9XZap2kUBBxTuzS70Zuj2He0jdqeBbj+ex/
L2FJH0edIw6DfjfgJBa8o5YE+o/Xn8XpvIF6BnEGGL59Q13bo75Vm4/5qQpN5uss
I4UBx2YxbdzYv8NrnELR85R/NtaOgaGO/BbzoRNLYueoHk7qhgrnrCh/QkLcJHGO
uCaqPvnrlxBkSsnUkheWFV4BuBLE6ONsfA593ieEHM2zxEMENIV8c03NvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCr1c/Wb1OmEbZlsALE2P9EoHntgMB8GA1UdIwQY
MBaAFHYzXrYz92lCu+mfEpoeuIpNc/x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGpOZXRqUDNhVUs3Nlo4U21oNjRpazF6X0h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wODM4NWEtMWU4MS00MWYyLThiODUt
OWMyOTNmNzFhODBhLzEvZGpOZXRqUDNhVUs3Nlo4U21oNjRpazF6X0h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wODM4NWEtMWU4MS00MWYyLThiODUtOWMyOTNmNzFhODBh
LzEvZGpOZXRqUDNhVUs3Nlo4U21oNjRpazF6X0h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFym0vPO
N7ZYOgix/dBB2TBB69TB0xMxiPZ33GGtK1P8XUnsMyNeMHEaCF1f43Kj7pSrWXYM
f0FaCnKYYsxxMDRRI9JxkABAluEL18mzrFUuufVe3gNw4vmjzpG3N3IWx7ycko0t
oY2c/Ao+uim0U2BVQ8IbpydonqsRuYcQ+r4/hloTwD/mugSg5bYmt7DNkUIDIzRK
RBw49JZvF91uVnY4qGjbokDTUL52VV/SIcd0eteJl/TFAs5MHxlchptTdHZCKMuZ
zFTO5KWdCswaCCOdAmGfoWgxCDpZ7os0fkMNNEiScAMJs9nS4RZG2+2hbIesyJ1V
l7aDTQL7fG1ssw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:05 2026 by rpki-client