Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier: IAJyLv9bEelGFsCKhEmyD9+7iB2uyS7fMVve+7Pb+Oo=
Subject key identifier: E9:07:3D:2A:4A:64:5B:5F:6F:8E:D2:3F:A9:7D:72:A3:5B:E9:E8:6C
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 01A0E02ADD10F5376BB5C28BEE57EBF022A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number: 1A80
Signing time: Sun 27 Sep 2026 00:01:40 +0000
Manifest this update: Sun 27 Sep 2026 00:01:40 +0000
Manifest next update: Mon 28 Sep 2026 00:01:40 +0000
Files and hashes: 1: 0IWvtKpWz8nwzfyztFPG-10e-ec.roa (hash: M3DL2KpstDY4RX5irHxTIoQ7SYVzPk7eR23DZZrDMbo=)
2: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: LLdglroXHyTNYbX0lkN/kM9K4rOGHqjDoQUuVOEd9Rw=)
3: pYVSN2AB9mwBr8yDS1zYwXrTuMQ.roa (hash: xWYPQfiNQqIYcOLgwTTjRZ9fSTqKYlkmjs7r1ngIGF4=)
4: uXN7_MtPKMwhSTIFKpLUwo-V5P8.roa (hash: 8z/tTyMqQq524Fl02SLcRSjti3sQ0AEo40zN2vpCYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:dd:10:f5:37:6b:b5:c2:8b:ee:57:eb:f0:22:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Sep 27 00:01:40 2026 GMT
Not After : Sep 28 00:01:40 2026 GMT
Subject: CN=e9073d2a4a645b5f6f8ed23fa97d72a35be9e86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0a:ad:5b:57:e8:71:cf:f8:e3:fe:40:b8:60:
70:76:d4:e3:75:71:37:08:08:3f:5e:86:c5:03:12:
11:49:77:1d:51:02:e3:d7:a1:41:5e:90:f2:f1:98:
df:ed:1b:b4:72:15:e0:56:2d:6e:43:d8:cd:d7:84:
a2:4c:b5:7f:44:e7:5b:cb:0f:d5:99:0a:22:38:07:
91:fc:77:f6:86:01:d2:19:41:7c:07:36:ba:8c:e7:
46:11:fb:01:08:8e:d4:32:bb:6f:03:92:48:94:11:
0d:1c:40:ce:f3:bb:aa:9b:49:fc:40:6c:ce:6c:85:
21:79:08:74:fe:f3:3f:22:79:73:95:71:22:b3:76:
33:6f:c8:cf:66:a4:6a:4b:74:73:be:ed:8c:80:00:
12:3c:e1:dc:08:c1:19:c4:3d:33:27:3b:e7:69:c5:
c8:5a:03:19:2f:42:d3:2d:41:cd:46:e0:b6:7d:3e:
2b:82:da:8f:12:86:c3:9e:2b:95:13:fc:80:d3:ba:
40:6c:40:b6:fa:db:5c:4c:ba:8a:95:5c:e0:67:6c:
8f:f6:89:cf:28:d2:43:d9:ee:48:f8:b8:ba:7e:c0:
77:4d:9d:27:12:ae:56:28:d0:a3:e5:fe:b5:76:54:
29:44:8c:13:54:40:b3:85:46:26:a1:f6:c4:96:cf:
6a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:07:3D:2A:4A:64:5B:5F:6F:8E:D2:3F:A9:7D:72:A3:5B:E9:E8:6C
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8f:04:b1:e7:ab:3a:4e:72:78:ee:d8:1b:f8:52:c6:05:2b:
14:50:7c:2b:3e:f8:c3:52:62:6f:fe:c8:04:c3:f8:6f:27:6b:
ee:7b:9b:44:19:f2:08:c5:bf:7a:35:17:a1:e9:6f:1f:ae:7f:
47:e8:fb:3b:cc:bb:25:68:65:7e:ab:03:7f:0f:3b:2f:e4:e7:
53:f5:88:75:7a:ae:6e:87:35:5c:08:42:c7:aa:a0:f6:06:4e:
fc:60:83:12:29:ee:ba:82:ec:7a:8e:a7:2c:f6:a9:1d:3f:d7:
11:85:39:9a:e4:52:6d:c1:57:67:6d:54:aa:eb:fd:1a:30:00:
2b:34:ae:10:c8:d1:42:2a:65:b1:af:e1:df:d2:8c:73:79:8d:
8f:45:33:6d:03:c4:75:1d:15:d5:93:3f:1f:07:7a:c9:94:58:
21:7d:a8:d7:82:9d:25:b1:93:66:a4:22:71:fc:4a:53:97:78:
0d:3f:57:fb:b2:7f:4c:ac:74:cc:a1:7c:88:d2:07:9e:33:50:
c0:40:7b:4e:ce:1c:ad:3a:8b:7b:2e:ea:a4:3e:6e:84:63:26:
9d:45:cd:1d:41:9f:af:62:07:43:4e:f2:43:e1:79:66:99:e6:
a0:76:a6:ee:7b:8e:d4:5f:f3:4a:c7:7b:ee:cb:37:21:79:2f:
41:ba:40:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:47:05 2026 by rpki-client