Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
File: dHyzZv9uI99sCX9grcf6gHVZgZE.mft (raw, json)
Hash identifier: yF8v0gbdHCfENKerxKSDyyCejOoQPnLcyWNx2snCjdk=
Subject key identifier: 61:6F:13:C0:AE:5B:08:A5:03:E0:17:AE:90:63:C9:4D:8F:E3:C8:95
Authority key identifier: 74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
Certificate issuer: /CN=747cb366ff6e23df6c097f60adc7fa8075598191
Certificate serial: 019D2771F78C56A1E5BA27B3C131EB48CD5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
Manifest number: 0C4E
Signing time: Thu 26 Mar 2026 00:01:13 +0000
Manifest this update: Thu 26 Mar 2026 00:01:13 +0000
Manifest next update: Fri 27 Mar 2026 00:01:13 +0000
Files and hashes: 1: ZTaGvGPieOY_mdZ7DjbQhHhCnXs.roa (hash: xPpDP90fvRcRireZ1ICdhF9SMxSOwF26ckiak86gXOY=)
2: dHyzZv9uI99sCX9grcf6gHVZgZE.crl (hash: Idq3qa617rJinnlueN79g9q499lRpqL+jrK3yQq3INg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f7:8c:56:a1:e5:ba:27:b3:c1:31:eb:48:cd:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747cb366ff6e23df6c097f60adc7fa8075598191
Validity
Not Before: Mar 26 00:01:13 2026 GMT
Not After : Mar 27 00:01:13 2026 GMT
Subject: CN=616f13c0ae5b08a503e017ae9063c94d8fe3c895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:ad:60:36:dc:b9:5b:4f:18:0b:fd:d5:79:
ca:5d:4f:53:15:cb:04:6e:d1:58:d6:53:0c:e2:7b:
9a:b6:66:95:c7:5c:c1:bb:5d:51:d5:e8:2f:11:34:
ff:51:dd:33:04:8d:e4:17:58:b2:88:b3:68:34:dc:
37:e5:63:de:38:aa:0b:b9:e3:9b:14:8e:21:34:76:
83:a0:fd:f7:03:aa:e0:6d:b8:4b:45:67:cd:0a:16:
09:03:a0:5e:49:aa:60:3e:1c:40:13:b2:d4:47:b0:
5e:ae:86:16:bf:17:30:67:f8:9c:dd:d9:72:b0:59:
f2:a7:03:06:8b:00:cc:36:12:28:1c:6f:cd:d6:5e:
7b:ff:5e:1a:6e:f4:63:60:3d:60:da:9e:7d:a9:46:
1d:8b:b8:a4:26:f5:73:6b:d9:41:12:17:8d:b4:15:
94:4b:5a:47:25:ee:39:21:1c:0b:41:cb:6a:32:6c:
de:78:d4:10:ad:6a:fb:76:37:b8:da:40:ec:f5:8c:
04:2f:49:53:1b:da:cb:5f:f2:5c:8b:aa:20:3f:45:
d3:fd:76:10:8f:d2:fd:1c:e3:ba:c4:17:b0:82:70:
1b:24:37:f8:2b:1f:16:6b:a4:13:c9:fb:a5:4b:73:
01:1a:7f:86:87:6b:93:62:8a:77:83:e5:25:3e:4b:
d3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6F:13:C0:AE:5B:08:A5:03:E0:17:AE:90:63:C9:4D:8F:E3:C8:95
X509v3 Authority Key Identifier:
keyid:74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b2:2c:82:34:17:bf:4c:25:4c:b3:cb:a2:51:3f:89:91:f2:
6b:22:1a:8b:aa:5f:76:85:dc:df:7d:df:38:2d:ea:1a:4a:b2:
08:14:18:93:24:e9:70:ed:81:f3:62:06:90:82:b6:2b:b7:07:
45:22:8f:11:b7:da:07:e4:da:9a:48:75:08:70:cb:bc:9b:51:
ca:8c:e2:2e:54:5a:76:31:68:7a:23:30:3a:21:e2:09:29:97:
b9:93:b5:20:25:34:fc:36:72:34:e6:eb:e5:4e:fa:05:ef:8e:
5c:65:78:5a:22:5a:07:53:59:16:a5:e1:53:2e:15:12:95:e5:
3c:ac:b5:48:16:8d:4f:2b:05:c4:9c:4a:a5:ec:81:e0:e3:fd:
fb:f9:62:89:f8:64:66:86:4a:1c:da:3c:28:a6:84:84:89:2e:
3e:df:e9:5a:97:69:f0:09:ee:91:19:cd:3d:b8:b4:39:e8:22:
f3:4e:4e:81:b7:9a:9c:a5:b2:f1:29:c5:0d:72:59:07:6e:85:
02:5b:a7:11:2a:67:04:a2:cf:89:3c:95:48:cb:2a:6e:a1:fd:
ea:ab:f9:cd:73:de:08:47:27:ee:ec:7c:a9:23:4f:fe:80:0e:
22:36:0d:aa:bd:28:fb:06:6d:e5:df:e5:17:f0:c3:55:d8:e9:
7e:0d:45:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:43 2026 by rpki-client