Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
File: djizYCRf5EsXV6ael3oV4H-q9ps.mft (raw, json)
Hash identifier: D9QjSvwHhaaNpqDQGjY3ZB8OfcOgjFHFY/vFnM6gYy8=
Subject key identifier: D5:43:2F:E9:72:45:D5:7A:F0:7E:F9:D7:7F:A1:31:B0:C0:8B:6F:AC
Authority key identifier: 76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B
Certificate issuer: /CN=7638b360245fe44b1757a69e977a15e07faaf69b
Certificate serial: 019D284D322F27C27E6EB2CE4ABBA9147924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
Manifest number: 03E2
Signing time: Thu 26 Mar 2026 04:00:40 +0000
Manifest this update: Thu 26 Mar 2026 04:00:40 +0000
Manifest next update: Fri 27 Mar 2026 04:00:40 +0000
Files and hashes: 1: b2NnwzgfLDbXtAxH9dtL0v2uNtk.roa (hash: KBKYmxla1nso+r4vvsx8/d03VCCVPfJjj4bfekYBlMo=)
2: djizYCRf5EsXV6ael3oV4H-q9ps.crl (hash: oJzJkVNiPAnujdmKB3rPkvTE9bsRfZ3flirA16TgSyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:32:2f:27:c2:7e:6e:b2:ce:4a:bb:a9:14:79:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7638b360245fe44b1757a69e977a15e07faaf69b
Validity
Not Before: Mar 26 04:00:40 2026 GMT
Not After : Mar 27 04:00:40 2026 GMT
Subject: CN=d5432fe97245d57af07ef9d77fa131b0c08b6fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ed:cc:fb:32:49:c8:23:02:b9:cf:ef:95:07:
e6:50:62:be:84:0e:15:98:74:54:11:f8:76:16:55:
8c:bf:01:08:c1:a4:b5:f9:8b:97:0a:27:d0:ac:59:
1d:b5:74:6e:b4:e8:9d:7c:59:c5:fb:56:93:2d:47:
03:30:b0:cf:74:47:0e:51:11:ae:cc:dc:20:8c:72:
75:05:5f:94:b6:b8:71:0d:76:eb:3b:78:52:50:cb:
08:b6:00:21:37:eb:96:01:18:65:81:41:9f:87:67:
ae:46:08:fb:a2:10:1c:7e:84:e3:9f:7b:02:b0:a2:
3b:be:50:89:8c:ce:86:c9:15:80:94:1c:6a:95:1f:
1c:3e:16:bf:0d:31:a0:f9:c0:f2:f0:a3:1d:25:89:
8a:b3:f5:74:81:e7:71:88:c4:58:9c:e1:01:07:7f:
19:c1:a0:ba:db:d2:bd:32:07:18:f8:58:7c:4f:a6:
08:07:3f:d4:96:4c:0b:52:b1:08:df:fa:35:d1:81:
b5:5c:48:52:cc:bd:0b:fe:d3:de:7c:6d:53:ce:a1:
47:48:54:7d:08:42:7a:48:33:68:7f:73:e4:08:e3:
95:ff:d2:f6:c1:50:6f:33:ea:eb:22:4a:7c:ac:e3:
59:2b:a1:8e:b5:d3:8a:48:ce:7a:6b:8b:b2:9a:c1:
aa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:43:2F:E9:72:45:D5:7A:F0:7E:F9:D7:7F:A1:31:B0:C0:8B:6F:AC
X509v3 Authority Key Identifier:
keyid:76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b0:7c:64:5c:e2:39:3b:9c:a3:1e:11:c7:53:bd:6c:dd:db:
6d:32:8f:41:75:e6:1b:3d:03:c0:19:80:1a:6e:77:4c:75:ad:
03:e2:75:63:66:1f:d4:33:54:a0:11:a1:37:1e:ad:e0:30:6b:
cb:5b:78:9c:d1:46:d3:dc:b3:fb:bf:31:f5:ff:2f:9c:26:8f:
c1:9a:d9:b2:86:1f:ee:07:85:04:e2:c4:80:68:ea:35:c7:33:
30:f2:99:ec:1d:25:61:fb:f8:fc:bc:52:7f:c0:5d:89:42:67:
7d:4a:8c:2c:c4:12:e9:38:9c:c2:db:b1:3f:8a:60:03:3e:31:
1d:42:86:d2:06:05:21:78:bc:32:4d:a4:4a:08:f7:a3:99:45:
d7:dd:04:40:52:8b:b7:b7:2f:fb:ca:66:2d:1f:f2:4e:cb:f5:
e9:e4:ba:8f:ef:f0:58:dd:f3:0f:a5:fd:76:83:5d:db:6a:64:
b1:ea:ec:87:b8:66:70:7f:95:7a:0c:1d:18:94:02:40:1e:8a:
02:60:07:84:33:52:75:26:8c:b7:43:c1:a3:92:d3:a4:1c:e0:
a3:bb:6f:fe:22:d0:e8:46:ae:7e:12:e0:db:3d:58:79:14:b1:
0f:17:b7:52:0e:87:6d:ba:88:62:79:82:31:43:1c:4f:61:19:
78:c3:2e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:22 2026 by rpki-client