Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier: eh2FGE9CndSp6IZ1eq0v7Hu0y0H6PNDlHuLSL+q4vX8=
Subject key identifier: D9:C4:CF:22:8E:91:51:1E:3D:3A:82:9B:AA:9F:9B:B1:92:9E:B0:09
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 019D281713DF3D39EBE01CF58DD15C8A9BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number: 1893
Signing time: Thu 26 Mar 2026 03:01:34 +0000
Manifest this update: Thu 26 Mar 2026 03:01:34 +0000
Manifest next update: Fri 27 Mar 2026 03:01:34 +0000
Files and hashes: 1: 0IWvtKpWz8nwzfyztFPG-10e-ec.roa (hash: M3DL2KpstDY4RX5irHxTIoQ7SYVzPk7eR23DZZrDMbo=)
2: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: HqlErIOOc5gkZ4ddPjBApTc8DKjWWXc0z47k5MNnenM=)
3: pYVSN2AB9mwBr8yDS1zYwXrTuMQ.roa (hash: xWYPQfiNQqIYcOLgwTTjRZ9fSTqKYlkmjs7r1ngIGF4=)
4: uXN7_MtPKMwhSTIFKpLUwo-V5P8.roa (hash: 8z/tTyMqQq524Fl02SLcRSjti3sQ0AEo40zN2vpCYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:13:df:3d:39:eb:e0:1c:f5:8d:d1:5c:8a:9b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Mar 26 03:01:34 2026 GMT
Not After : Mar 27 03:01:34 2026 GMT
Subject: CN=d9c4cf228e91511e3d3a829baa9f9bb1929eb009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:13:6b:ab:20:a8:13:77:2b:ae:ab:c8:87:
0e:b1:60:19:9f:7b:1d:d9:df:0f:ae:15:3a:34:c1:
d7:90:e9:ee:55:97:f6:c4:51:08:b6:33:81:8e:61:
7f:63:8d:56:d5:d2:23:42:79:66:84:4a:3e:7c:e8:
b3:9b:2d:25:cb:d6:d1:20:5f:72:ba:fc:68:78:13:
46:6a:36:a0:ea:74:22:8b:9d:ee:f8:a8:a0:2e:73:
5e:1e:45:40:4a:2c:e4:c5:9c:f1:f9:82:3f:60:d9:
8d:c5:c2:53:7f:07:c6:90:ed:00:e7:ac:63:66:a3:
8c:2d:16:82:c8:4c:68:50:90:98:73:08:84:62:0c:
b5:54:02:61:07:7c:13:51:60:68:78:66:2f:d1:d0:
c2:23:54:3b:8f:2d:bb:c7:9c:e2:2c:ce:21:4c:42:
74:b4:79:35:60:1f:84:5d:96:e4:07:6c:3e:ce:8d:
c6:a3:49:05:ce:49:b2:2a:14:34:a2:46:20:17:08:
97:ac:e4:fb:26:a6:f1:98:76:b8:05:75:8b:98:58:
7d:18:75:c3:54:3f:78:c4:6b:3c:44:d7:ba:c3:76:
e9:05:57:84:b5:07:d1:63:f5:47:ee:d3:e8:34:e3:
db:ed:37:a8:ec:16:8a:2c:fa:21:36:df:cf:c0:96:
bc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C4:CF:22:8E:91:51:1E:3D:3A:82:9B:AA:9F:9B:B1:92:9E:B0:09
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a9:10:d0:82:19:d6:44:fe:33:8e:9d:aa:b8:3e:cc:f9:69:
d7:59:d9:22:be:8b:f3:50:21:e8:96:2a:9f:6f:dc:b8:49:bf:
37:2b:63:1a:b8:2e:ea:32:2e:6f:cb:b8:f9:e7:c6:4b:39:8b:
5d:59:78:78:33:55:58:db:0c:0a:c3:96:cc:55:07:fd:49:5a:
f6:0b:2c:04:21:1f:2d:97:ac:2c:69:bd:a4:0e:88:5f:90:e5:
a2:3f:89:16:f5:c7:50:a1:9f:22:5c:33:ec:25:2d:7d:86:d2:
3f:42:b1:32:e4:4d:03:0e:f4:1f:5a:a9:19:4b:ce:8a:d6:06:
c0:33:1a:da:0e:e6:89:97:96:67:6c:31:53:13:4a:d4:81:3b:
2d:8d:17:bf:47:c6:9d:db:d3:7a:46:82:62:0b:45:29:2a:6a:
1c:bc:04:ec:2c:66:f1:62:46:f9:ee:3b:b7:12:e0:4e:83:0b:
57:3c:bc:5d:f4:7b:e1:d4:af:e2:7f:cc:59:03:67:98:ed:c3:
f2:59:db:8e:f1:52:60:5c:0e:f6:12:9f:94:53:11:c2:d0:b7:
b3:0f:6e:c0:b6:bb:ae:31:d3:c6:40:36:27:a4:f7:14:30:93:
27:e0:2a:2e:48:f7:65:61:59:19:28:d3:08:5d:bb:1a:db:b8:
c6:0f:44:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:22:38 2026 by rpki-client