Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
File: Dj8xyerObwpezNuN8rAcc1FWhoY.mft (raw, json)
Hash identifier: 7NXFeAomUvDtQda/ee207STwqAkHp6Wk6QxR/I6ewjo=
Subject key identifier: E5:D5:27:38:6F:F6:EB:22:B4:4F:DB:8E:F0:44:BC:84:59:15:B6:68
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 019F9211B85C67AF59028903B64AF4A8A287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
Manifest number: 1993
Signing time: Fri 24 Jul 2026 03:01:02 +0000
Manifest this update: Fri 24 Jul 2026 03:01:02 +0000
Manifest next update: Sat 25 Jul 2026 03:01:02 +0000
Files and hashes: 1: Dj8xyerObwpezNuN8rAcc1FWhoY.crl (hash: /Kxpajyws0/Hn8O8XtJk0pA1zIKN+RnYbTmOLDyvTVs=)
2: H_7ICe9bA6bKL6KxaXlnbRtE9DQ.roa (hash: myn2XXBsyfDvjK8OtF68llJ02gjDW6IloTyqRTy6l4w=)
3: Hs51wq2_SIQJ1nds1uh8F6Dx3ik.roa (hash: qxptTNT2o/4UgSRP/kpcf65j1wxXKH/EWbmmjxAt01o=)
4: N2OatwOOlKKioT0NRltvF2MW-2A.roa (hash: AtT0Hq5M6f320Q4NS840MNR01KALlUtkbsCAVvpe4jQ=)
5: P36bForyKz3A1xYxUt5uRvnbjGo.roa (hash: CVAU2pcmHNPpR0Ea2g62GxYoWi/yJ4n8I1Gjfyzzm7o=)
6: dQBVu3zWk3nAHNSG6Exad3J7mlM.roa (hash: mGD/nKh2PI3t3mqHrxwywCF6Z+wlDVg8jDBZNwnvzDo=)
7: kTAGdAP94XB_eZK0C7vAHDqzJI8.roa (hash: CuJkjxQNxfp3wO54mRyTZ1oYxOazwRwfQjI9X+1M5ho=)
8: r_euWEHWB_wzU16rSDnkg8NIiGM.roa (hash: 12QG/5iTtnjlTjpFN6Uc829CvAhr4LDM2fjYVha8AqA=)
9: uZHn0r02l2agjVRMRfZ3xICbMLw.roa (hash: YR/6cl0OhmlwCiQwg5TQ7bSWNguLPLl/GP2GOc23T+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:b8:5c:67:af:59:02:89:03:b6:4a:f4:a8:a2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Jul 24 03:01:02 2026 GMT
Not After : Jul 25 03:01:02 2026 GMT
Subject: CN=e5d527386ff6eb22b44fdb8ef044bc845915b668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:83:f1:e0:47:38:94:c3:ec:03:bb:8d:4e:
1d:59:fb:0b:a0:87:c0:46:4c:dc:9f:78:96:a2:67:
11:87:57:99:b9:01:09:37:c6:cf:a4:dd:70:ad:52:
79:9b:bc:4d:e3:3b:27:ec:51:ad:b7:73:81:83:27:
7d:91:e1:56:aa:68:01:9e:bc:6f:8e:a8:6b:51:45:
91:23:1a:10:51:b1:84:32:06:a8:b2:0e:0d:39:55:
05:9c:2b:da:87:4c:0d:e8:23:4a:00:0e:20:1d:98:
1a:3e:02:37:74:70:ed:a2:e6:66:32:98:ae:95:d7:
21:60:0f:5c:2e:b1:8e:b2:6e:31:c7:26:6b:57:85:
19:56:d3:23:55:7d:2e:2d:57:9d:2e:f2:bd:0e:8f:
53:85:c9:7b:4c:e7:4a:d3:ff:e3:51:ee:37:5e:67:
d8:d5:b0:d6:e5:97:d7:6e:84:44:0d:ab:cc:ff:f3:
83:f5:ad:a6:7b:fe:4e:ad:52:bd:d1:2f:fb:96:37:
e2:7a:d1:6d:77:52:c4:89:43:74:a1:c4:4c:f6:d5:
4b:35:ef:d5:bf:f3:9c:7c:19:2b:25:e2:3b:81:fc:
55:fb:d7:03:4b:a0:a7:49:07:03:83:59:a5:27:7f:
37:ff:c7:71:2c:14:77:00:c3:1f:63:e8:21:ea:5a:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D5:27:38:6F:F6:EB:22:B4:4F:DB:8E:F0:44:BC:84:59:15:B6:68
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:43:14:f2:b4:82:55:a8:ac:d0:0e:ca:5e:a6:c9:1c:38:9e:
e7:c6:e5:4f:12:00:1d:c9:3d:c6:cc:c6:57:1a:02:65:35:a3:
22:83:e7:46:8f:05:7a:26:42:b4:e4:af:17:e0:55:e9:8d:55:
9a:37:86:46:d3:b5:6f:74:de:e8:aa:ac:e2:71:2e:07:37:e5:
1e:5b:24:9b:7a:c8:74:d8:7e:00:44:f7:f2:ce:36:6a:47:fe:
d2:c6:41:ab:66:14:18:40:bd:c0:fe:9f:37:0f:2f:c5:a2:38:
c6:dc:ea:79:c0:86:c7:e3:86:10:5a:1a:59:5d:d1:af:c2:c8:
fe:d8:b4:c1:20:9a:38:75:ae:08:73:c9:b1:79:2d:d9:13:fe:
1b:82:12:13:bf:bc:64:3e:6c:16:6a:4e:6c:71:9f:73:a9:43:
32:08:ac:b2:af:aa:0d:e5:c7:93:10:08:18:48:ed:99:e0:c2:
81:ad:43:50:bc:5e:a0:46:51:2a:17:f6:b0:85:85:20:11:99:
e8:01:16:c3:db:72:24:c3:dc:14:db:de:10:b0:34:49:7b:d1:
cd:ae:2b:31:61:85:2f:4e:52:57:45:e3:0d:d5:e5:58:52:d6:
ce:b3:51:80:0e:74:31:0a:b5:66:d8:c8:7c:bf:23:9b:9b:38:
df:cf:f2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:08:53 2026 by rpki-client