Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
File: dyDGcENNpRAiYQmdoQHyXdP3qto.mft (raw, json)
Hash identifier: DVIvfq/4BWoMmr2MqMAI3khTciy2x2sB8hJePigeXGU=
Subject key identifier: B3:05:B0:ED:29:FA:48:4B:E6:37:1D:0B:DC:B7:4D:D8:22:FB:B8:A0
Authority key identifier: 77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
Certificate issuer: /CN=7720c670434da5102261099da101f25dd3f7aada
Certificate serial: 019D288460568A333EE89729805EF7D52379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
Manifest number: 10CA
Signing time: Thu 26 Mar 2026 05:00:57 +0000
Manifest this update: Thu 26 Mar 2026 05:00:57 +0000
Manifest next update: Fri 27 Mar 2026 05:00:57 +0000
Files and hashes: 1: dyDGcENNpRAiYQmdoQHyXdP3qto.crl (hash: kPCB9ondKLUlpfCfJRWFoiibIrtNdgeHCtYtuR3qTrM=)
2: fxjDmBMtX4lZXvQ-w62aJNa_wcA.roa (hash: k9PdZxgspVP2JG6hPwNtH2QKs9wDWHLF4meodXKpQn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:60:56:8a:33:3e:e8:97:29:80:5e:f7:d5:23:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7720c670434da5102261099da101f25dd3f7aada
Validity
Not Before: Mar 26 05:00:57 2026 GMT
Not After : Mar 27 05:00:57 2026 GMT
Subject: CN=b305b0ed29fa484be6371d0bdcb74dd822fbb8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:10:8d:47:63:a0:37:33:fd:d5:2f:6c:57:
a8:54:09:a1:fb:2d:39:f5:74:5c:79:df:1a:dc:6c:
1a:1a:ab:d4:c9:c7:f1:28:5c:c0:39:d5:25:4f:f6:
32:b2:bc:ed:8c:24:24:42:20:b3:36:fc:d8:bb:74:
61:6d:d4:ef:69:8e:dc:5f:73:b3:ad:ec:36:0f:c7:
f5:cf:e4:c2:96:9c:a9:2e:b1:ac:63:fe:81:ef:ed:
6a:d7:9b:31:ae:d8:cd:65:c6:37:d4:5a:91:ea:b6:
46:ad:bf:fe:25:59:7b:7f:76:23:86:eb:fe:97:3e:
0d:2c:80:3f:19:a7:e8:3b:1c:9a:5c:ff:b1:2d:2a:
51:d3:9c:26:e0:54:ff:64:98:6c:ea:c7:6a:b9:19:
e3:da:a5:2d:2a:e3:4e:a0:cf:4a:4e:39:68:3e:c5:
79:5d:d8:3c:ab:99:92:b1:54:90:64:fb:b5:35:ff:
02:15:6a:ed:2d:ad:3f:fd:f1:3f:9a:4a:85:44:bc:
3d:1e:61:0a:40:8f:a0:8c:8d:c9:ed:8e:27:da:99:
4a:89:5f:b5:a0:8e:fd:d6:98:1a:22:7b:21:c8:93:
4a:99:60:5b:63:b4:6c:59:99:bd:6f:ad:27:2b:a4:
f5:b9:0e:dd:fe:80:37:5b:4a:34:c4:5d:a1:10:87:
4f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:05:B0:ED:29:FA:48:4B:E6:37:1D:0B:DC:B7:4D:D8:22:FB:B8:A0
X509v3 Authority Key Identifier:
keyid:77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d0:6b:5f:d6:73:b6:3c:81:06:93:be:18:fe:43:6f:ad:7f:
22:e0:0f:b5:c4:ef:93:09:10:a8:9a:60:c5:98:d0:9f:2f:79:
2d:ae:aa:a4:48:02:bc:2f:46:43:db:11:25:97:d0:ec:1f:34:
7e:7b:f0:32:68:b9:be:c5:c6:88:a1:49:be:da:17:7a:d7:c3:
ef:7f:31:fa:b2:44:e4:cf:f7:e1:03:fb:a9:70:68:da:01:a7:
c6:a7:d7:22:a0:d1:47:6b:b9:a6:c8:78:eb:1a:15:c7:ad:2d:
62:8f:54:d3:e9:8f:47:41:67:9e:51:eb:9f:15:4b:fc:c2:a6:
0b:06:1c:dd:98:b0:89:95:d5:e9:40:f1:e5:99:b1:d6:71:43:
40:a8:74:35:48:c3:cc:92:55:e3:56:b9:af:41:b0:83:fc:c7:
1c:1b:01:73:df:6f:7b:e2:02:dd:d2:aa:b3:cb:56:82:ea:e2:
f6:e5:7f:e3:65:15:e5:30:b2:b8:04:fd:fc:9c:69:ae:01:95:
dd:aa:6e:6e:97:aa:be:18:62:89:6a:73:17:9d:bd:57:c4:44:
dc:39:df:aa:df:a0:e8:fc:9d:c9:e9:72:c4:82:ca:f3:9a:dd:
31:a6:7c:49:b2:a3:08:d5:8a:0f:76:f9:41:24:c6:a6:64:a5:
eb:ec:fd:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohGBWijM+6JcpgF731SN5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MjBjNjcwNDM0ZGE1MTAyMjYxMDk5ZGExMDFmMjVkZDNm
N2FhZGEwHhcNMjYwMzI2MDUwMDU3WhcNMjYwMzI3MDUwMDU3WjAzMTEwLwYDVQQD
EyhiMzA1YjBlZDI5ZmE0ODRiZTYzNzFkMGJkY2I3NGRkODIyZmJiOGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6MQjUdjoDcz/dUvbFeoVAmh+y05
9XRced8a3GwaGqvUycfxKFzAOdUlT/YysrztjCQkQiCzNvzYu3RhbdTvaY7cX3Oz
rew2D8f1z+TClpypLrGsY/6B7+1q15sxrtjNZcY31FqR6rZGrb/+JVl7f3Yjhuv+
lz4NLIA/GafoOxyaXP+xLSpR05wm4FT/ZJhs6sdquRnj2qUtKuNOoM9KTjloPsV5
Xdg8q5mSsVSQZPu1Nf8CFWrtLa0//fE/mkqFRLw9HmEKQI+gjI3J7Y4n2plKiV+1
oI791pgaInshyJNKmWBbY7RsWZm9b60nK6T1uQ7d/oA3W0o0xF2hEIdPbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMFsO0p+khL5jcdC9y3Tdgi+7igMB8GA1UdIwQY
MBaAFHcgxnBDTaUQImEJnaEB8l3T96raMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHlER2NFTk5wUkFpWVFtZG9RSHlYZFAzcXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jZjc1M2YtNzc4MS00ZGZlLWEzOGUt
ZDg0NTk5NTk5MWFjLzEvZHlER2NFTk5wUkFpWVFtZG9RSHlYZFAzcXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9jZjc1M2YtNzc4MS00ZGZlLWEzOGUtZDg0NTk5NTk5MWFj
LzEvZHlER2NFTk5wUkFpWVFtZG9RSHlYZFAzcXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNBrX9Zz
tjyBBpO+GP5Db61/IuAPtcTvkwkQqJpgxZjQny95La6qpEgCvC9GQ9sRJZfQ7B80
fnvwMmi5vsXGiKFJvtoXetfD738x+rJE5M/34QP7qXBo2gGnxqfXIqDRR2u5psh4
6xoVx60tYo9U0+mPR0FnnlHrnxVL/MKmCwYc3ZiwiZXV6UDx5Zmx1nFDQKh0NUjD
zJJV41a5r0Gwg/zHHBsBc99ve+IC3dKqs8tWguri9uV/42UV5TCyuAT9/JxprgGV
3apubpeqvhhiiWpzF529V8RE3Dnfqt+g6PydyelyxILK85rdMaZ8SbKjCNWKD3b5
QSTGpmSl6+z9Bw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:39 2026 by rpki-client