
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
File: dyDGcENNpRAiYQmdoQHyXdP3qto.mft (raw, json)
Hash identifier: Enc3uItlEpq1R1tCaldlyrWUTXzmAsQsfG8qacKHKnU=
Subject key identifier: 8A:2F:1B:03:D9:47:B7:69:8B:D2:48:C9:30:D0:13:2A:73:D3:A6:6F
Authority key identifier: 77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
Certificate issuer: /CN=7720c670434da5102261099da101f25dd3f7aada
Certificate serial: 019E1DC7A446C773628BB9DA54E1CAA1C819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
Manifest number: 1149
Signing time: Tue 12 May 2026 20:01:23 +0000
Manifest this update: Tue 12 May 2026 20:01:23 +0000
Manifest next update: Wed 13 May 2026 20:01:23 +0000
Files and hashes: 1: dyDGcENNpRAiYQmdoQHyXdP3qto.crl (hash: 9bgBSagLdCYGX8Cw+1+EE/cFDL4ipbdvVf8l9Oa6IQA=)
2: fxjDmBMtX4lZXvQ-w62aJNa_wcA.roa (hash: k9PdZxgspVP2JG6hPwNtH2QKs9wDWHLF4meodXKpQn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:a4:46:c7:73:62:8b:b9:da:54:e1:ca:a1:c8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7720c670434da5102261099da101f25dd3f7aada
Validity
Not Before: May 12 20:01:23 2026 GMT
Not After : May 13 20:01:23 2026 GMT
Subject: CN=8a2f1b03d947b7698bd248c930d0132a73d3a66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:7c:b3:69:47:ad:e7:46:10:25:95:22:bc:
16:a6:d5:f8:8c:4f:ad:3e:1c:a8:5f:00:1a:62:b2:
7d:70:f4:c0:30:50:62:c2:81:49:5f:a7:e7:cb:ae:
43:de:7f:32:57:78:d0:bd:5a:35:60:8e:c7:05:d6:
9d:c0:ac:b5:06:33:47:45:5f:a5:b4:b3:fa:70:ab:
c5:09:7e:2f:d7:ce:c5:b9:fd:d5:f5:93:2c:6a:4c:
99:c4:63:47:62:6f:91:3c:74:69:0d:ee:a5:10:2a:
ec:2d:71:77:d0:a2:d6:6a:f2:f6:c9:67:ca:ae:ca:
b8:78:88:77:9b:49:78:57:f0:6f:7d:62:27:bc:71:
2f:07:42:68:c2:6a:77:3a:71:f4:75:a8:b2:eb:79:
c1:91:b7:6a:dc:dd:23:9c:6c:f2:54:0c:b5:0a:b1:
6f:d8:25:8b:4a:c5:d3:33:75:cc:29:4c:b3:5f:4b:
10:24:dc:74:d2:32:88:bb:fb:fd:cd:7a:b2:b9:a3:
20:02:f0:6a:f5:13:aa:73:c8:9c:82:89:3f:7b:61:
28:cb:b0:9f:2d:8b:43:4c:ca:32:9b:2a:11:9c:ac:
eb:7b:bb:85:04:63:ae:fa:be:f3:24:de:ca:1d:87:
68:f6:56:cf:47:b6:82:a5:62:13:3b:9f:8d:bf:a9:
cd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2F:1B:03:D9:47:B7:69:8B:D2:48:C9:30:D0:13:2A:73:D3:A6:6F
X509v3 Authority Key Identifier:
keyid:77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ce:1d:dc:9b:ef:69:6f:6c:11:21:ca:d1:53:ea:4e:bb:3f:
ce:06:76:16:c5:a2:52:46:61:81:2e:06:33:9d:db:10:26:7c:
3c:3d:2c:72:e4:16:29:10:5a:27:ae:f6:ea:c1:d1:a1:3e:f8:
34:3c:19:2b:f0:69:b2:da:9d:1c:68:ba:af:27:54:fe:5d:39:
c0:fc:2d:9c:18:60:6d:76:e5:33:07:5d:50:12:9f:db:82:d9:
37:93:fe:fb:29:75:56:78:dd:6a:f8:ae:7e:50:3e:56:27:6b:
cb:5e:34:7d:cd:42:13:96:ea:63:da:ee:6f:24:67:11:3c:e3:
f9:a3:95:c3:9b:00:df:7e:ec:2a:ea:a4:61:23:3c:8a:a1:07:
d4:dd:98:ed:90:17:42:68:5e:bf:f3:8b:0a:a2:15:b3:22:e9:
a6:87:ca:3e:59:e4:1f:51:60:62:41:53:c3:ca:7c:f1:e8:36:
f8:3c:6e:cf:52:4e:2e:67:46:ca:b1:d6:03:82:82:cd:0b:81:
dd:e6:a0:24:7b:dd:bf:62:d9:61:a5:3c:42:57:bd:f4:cc:da:
84:18:9e:56:6a:5f:e9:41:7f:10:08:38:ba:2b:29:b4:25:b7:
4c:80:b5:09:a5:bc:4f:ad:de:47:a8:f0:fe:48:ee:a4:cb:d5:
e5:bf:23:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:05 2026 by rpki-client