Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
File: Dj8xyerObwpezNuN8rAcc1FWhoY.mft (raw, json)
Hash identifier: PEtoEaSlp638/p8FT4PW2WsB1z5duANzW5UD5JL2NQk=
Subject key identifier: C3:B4:14:00:6B:CE:83:5B:CE:55:99:EE:6E:CF:85:A4:A7:75:A0:26
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 019D265F472D7D1AE41A7ED24BACE43D16A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
Manifest number: 1848
Signing time: Wed 25 Mar 2026 19:01:11 +0000
Manifest this update: Wed 25 Mar 2026 19:01:11 +0000
Manifest next update: Thu 26 Mar 2026 19:01:11 +0000
Files and hashes: 1: 1Cbhm5Q8SrrKYeIFm9FmDpjDPv0.roa (hash: rNP5Ce/7PFqUSX09ZQDZG/krcOVkd/Q/rMGkvkaBBMQ=)
2: Dj8xyerObwpezNuN8rAcc1FWhoY.crl (hash: 25pj+8jsjFNgTQDSpv1ZWkH/kiflDfz/fTJ177+WUYU=)
3: P36bForyKz3A1xYxUt5uRvnbjGo.roa (hash: CVAU2pcmHNPpR0Ea2g62GxYoWi/yJ4n8I1Gjfyzzm7o=)
4: ZHGn3_tg-Mfmy7H9B_1aaqTZHgs.roa (hash: kp5fhsXFebs7/vXxko2b9o0UIBd+QGOAQRgsqBOjvQA=)
5: cCqdc17ji2M1kOGak_A4zF45rAA.roa (hash: auodaeobsnLWwDrzWV8MjYZOmLS6kqoqYz3PcxCEus4=)
6: kTAGdAP94XB_eZK0C7vAHDqzJI8.roa (hash: CuJkjxQNxfp3wO54mRyTZ1oYxOazwRwfQjI9X+1M5ho=)
7: uZHn0r02l2agjVRMRfZ3xICbMLw.roa (hash: YR/6cl0OhmlwCiQwg5TQ7bSWNguLPLl/GP2GOc23T+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:47:2d:7d:1a:e4:1a:7e:d2:4b:ac:e4:3d:16:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Mar 25 19:01:11 2026 GMT
Not After : Mar 26 19:01:11 2026 GMT
Subject: CN=c3b414006bce835bce5599ee6ecf85a4a775a026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4c:44:95:45:7a:07:fc:c9:02:7d:82:41:5b:
2a:16:8a:b3:03:30:da:a4:a9:f1:11:ea:bf:fe:7d:
e2:5d:b1:87:da:e7:25:52:11:7e:79:5c:47:2e:db:
c9:84:18:35:87:da:4b:f2:06:a5:8f:f8:f6:45:79:
fc:4d:d9:b7:c4:34:25:76:69:85:58:32:d6:c1:62:
c6:92:af:32:79:51:7a:dc:b1:ce:3e:14:9b:27:76:
4c:47:99:10:22:d5:ff:5f:5a:df:9d:7e:ab:c8:bf:
54:78:e7:e3:c2:c1:cc:fa:27:51:45:a5:6d:9a:05:
2b:ba:cf:2b:27:a6:82:ef:3e:b2:78:7f:5e:26:9b:
63:47:6f:bf:cc:b5:22:40:7f:9c:d4:ef:d9:99:68:
dd:d0:d8:3c:79:60:80:8c:f3:2b:da:6d:ac:0d:0e:
73:2e:64:fa:ce:42:75:64:ec:4d:9c:e0:21:2c:a0:
55:b2:97:cd:98:b3:3a:17:59:0e:79:15:5d:d8:0c:
71:7c:98:91:d1:92:4f:a8:27:b0:95:5b:72:0c:7d:
8d:c5:58:c4:15:71:29:c6:a4:e4:09:d8:56:60:48:
be:fc:97:5a:ca:7f:38:bd:71:a7:39:e1:a7:26:0d:
d2:2d:f2:be:f5:d8:d4:97:0f:9e:41:73:12:da:b8:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B4:14:00:6B:CE:83:5B:CE:55:99:EE:6E:CF:85:A4:A7:75:A0:26
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4f:21:98:c7:7f:35:48:b2:65:70:52:3a:8e:39:6d:0b:94:
b3:86:9f:f0:75:36:ab:ad:70:c1:9b:21:95:ef:1d:22:88:0a:
d1:43:bb:05:9b:d2:10:04:e7:11:bb:29:65:6f:e2:2d:ed:d6:
c9:97:14:f8:64:c5:0c:02:13:b1:38:14:94:7e:09:33:9e:d8:
a3:95:2d:41:3b:be:e7:ca:c3:41:53:11:71:07:25:46:cb:c2:
ff:eb:46:f0:94:57:af:e6:5b:32:0a:c9:e1:c9:fd:02:a1:cf:
4f:97:d9:8c:bb:60:89:5e:e3:67:7a:c5:93:3b:ff:62:09:8f:
42:63:22:07:d4:bf:53:75:c9:49:11:bc:7b:b6:71:f1:c5:e9:
d8:9e:76:3a:85:cb:03:ae:da:08:1a:2f:66:8c:91:6b:0c:64:
60:c6:1a:43:ea:93:26:d6:0c:0e:31:99:6c:bd:e9:06:66:a7:
b0:87:0a:30:26:25:04:a2:9b:29:40:ad:15:42:8d:ad:06:b9:
5e:fe:3c:42:1e:b7:29:be:db:97:95:7d:dd:48:82:bd:87:ee:
15:4e:58:96:eb:e6:72:4f:4d:e7:96:e1:82:61:d2:12:79:18:
96:3e:f8:9a:c3:99:78:5f:05:be:4e:20:01:de:85:4a:09:c1:
ee:cf:21:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:16:09 2026 by rpki-client