Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/dj5fBqDfthYiD7Vh7AFPFPlqqNo.mft
File: dj5fBqDfthYiD7Vh7AFPFPlqqNo.mft (raw, json)
Hash identifier: 6wIsOD5pwADElPqtLPa/4HJBBvX5bMFiGTkXmtTBCeM=
Subject key identifier: 0C:3A:22:9B:ED:1F:FE:2E:5C:BE:1F:3D:3A:9A:FE:23:F5:CA:F2:11
Authority key identifier: 76:3E:5F:06:A0:DF:B6:16:22:0F:B5:61:EC:01:4F:14:F9:6A:A8:DA
Certificate issuer: /CN=763e5f06a0dfb616220fb561ec014f14f96aa8da
Certificate serial: 019D2B856D21A25B60B2D31CA9A516872F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dj5fBqDfthYiD7Vh7AFPFPlqqNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/dj5fBqDfthYiD7Vh7AFPFPlqqNo.mft
Manifest number: 01F1
Signing time: Thu 26 Mar 2026 19:00:57 +0000
Manifest this update: Thu 26 Mar 2026 19:00:57 +0000
Manifest next update: Fri 27 Mar 2026 19:00:57 +0000
Files and hashes: 1: dj5fBqDfthYiD7Vh7AFPFPlqqNo.crl (hash: sbGTM7k9viwL1xaqR3TmMGLyMCWJ0KN1PMOWmQ8YcCw=)
2: n9dePE-8doRmgAcLb-V1GxACf1A.roa (hash: ADESDsbFQ5ErCKCjAI0XJzAPyEqk8f5eIkgXjjScfiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/dj5fBqDfthYiD7Vh7AFPFPlqqNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/dj5fBqDfthYiD7Vh7AFPFPlqqNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dj5fBqDfthYiD7Vh7AFPFPlqqNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:6d:21:a2:5b:60:b2:d3:1c:a9:a5:16:87:2f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=763e5f06a0dfb616220fb561ec014f14f96aa8da
Validity
Not Before: Mar 26 19:00:57 2026 GMT
Not After : Mar 27 19:00:57 2026 GMT
Subject: CN=0c3a229bed1ffe2e5cbe1f3d3a9afe23f5caf211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:52:3b:3b:ca:45:96:31:d5:86:ac:3f:f6:8c:
27:b4:c5:8c:c1:a7:51:c4:76:ad:04:f7:cf:d9:95:
83:3c:95:00:a6:b2:10:64:f3:3e:67:fd:6b:63:fb:
8c:fb:76:3e:af:49:af:48:d4:94:01:67:d1:bc:b8:
bf:71:87:a8:8e:10:5c:3c:13:5b:83:26:29:f4:38:
b7:5a:43:be:b0:81:f1:29:8e:e0:72:74:90:26:48:
38:7e:4b:45:60:d6:9b:44:81:1f:61:11:7e:9f:4c:
e2:df:3d:1a:1e:52:5e:b1:2f:64:36:80:f1:4d:fd:
41:2b:f3:24:7c:54:b0:70:07:a3:6d:f2:61:21:ad:
d9:1e:78:ba:2d:93:89:f3:a2:95:f7:ec:6e:9d:8e:
07:35:19:5d:f6:4a:3c:6c:bf:1a:fd:ab:eb:bc:ae:
fb:83:ba:2c:f4:90:d2:0e:79:62:03:e6:de:1a:87:
04:5f:c1:79:cf:c3:f5:01:84:77:99:98:06:49:a9:
22:2a:2c:5a:81:bd:9a:39:b8:58:56:8a:fd:da:4f:
7e:96:bb:23:1b:2b:b6:2c:e0:3d:f2:72:ec:59:e7:
e9:c2:aa:26:79:dc:86:44:31:24:e5:04:6e:f1:d0:
53:ba:28:0b:af:97:60:41:58:86:c2:0b:18:e9:b4:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3A:22:9B:ED:1F:FE:2E:5C:BE:1F:3D:3A:9A:FE:23:F5:CA:F2:11
X509v3 Authority Key Identifier:
keyid:76:3E:5F:06:A0:DF:B6:16:22:0F:B5:61:EC:01:4F:14:F9:6A:A8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dj5fBqDfthYiD7Vh7AFPFPlqqNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/dj5fBqDfthYiD7Vh7AFPFPlqqNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/dj5fBqDfthYiD7Vh7AFPFPlqqNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:de:ec:90:39:0a:2d:33:3f:43:23:4e:7d:d3:37:47:f3:fb:
b2:64:5b:fc:76:6e:d1:2d:40:78:a9:5f:3a:ef:1a:f4:c9:57:
38:09:0d:4d:21:be:bf:01:0e:7c:78:e3:08:2f:c3:fd:3b:fd:
2d:7c:aa:09:e5:65:53:21:0c:d9:3f:45:2a:cb:29:fa:72:04:
e5:39:66:67:b2:1b:a6:5b:bd:eb:bb:12:b7:69:35:21:14:05:
32:79:96:a0:b3:41:2d:c7:a6:c6:95:55:44:fa:60:74:a1:52:
71:a6:a0:3f:75:04:34:2d:eb:db:0c:db:2b:4b:d3:73:30:4e:
aa:78:61:84:41:c8:69:ed:18:66:25:f1:7e:ec:c9:03:64:23:
d6:33:a3:1f:51:78:da:30:0f:97:16:c7:25:05:7b:2e:43:5e:
ae:b2:90:18:8a:b2:bb:aa:a0:76:9c:80:be:08:3e:af:23:97:
b8:da:19:d6:04:67:dc:02:27:d0:54:27:46:29:a5:0c:6c:41:
b7:31:e9:47:ed:7d:0b:36:14:db:fc:60:dc:23:7b:a0:14:44:
8a:9c:53:22:68:05:d2:70:d8:42:aa:3d:22:1d:99:ec:c9:03:
64:f9:9b:3a:ca:ef:45:a8:11:6a:78:d7:39:c3:87:56:2f:04:
98:7a:fe:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:34:58 2026 by rpki-client