Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
File: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft (raw, json)
Hash identifier: FU6CnBLkW6sZVvf9gEGz+4pdxbzdPZutxa6eRmhxbN0=
Subject key identifier: 3D:C5:DB:BC:7B:8D:8E:F6:05:48:A0:19:9F:29:FA:AD:8F:5F:1E:03
Authority key identifier: 77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
Certificate issuer: /CN=772f8e257843732ec5ed0f61a13acabee6090a96
Certificate serial: 019D2583522D8CD184A3571C4275B8AED101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 15:00:56 +0000
Manifest this update: Wed 25 Mar 2026 15:00:56 +0000
Manifest next update: Thu 26 Mar 2026 15:00:56 +0000
Files and hashes: 1: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl (hash: IuwSVC8KE9cshMG902UhcEKKeoPX4NySBTBRMKjqDQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:52:2d:8c:d1:84:a3:57:1c:42:75:b8:ae:d1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f8e257843732ec5ed0f61a13acabee6090a96
Validity
Not Before: Mar 25 15:00:56 2026 GMT
Not After : Mar 26 15:00:56 2026 GMT
Subject: CN=3dc5dbbc7b8d8ef60548a0199f29faad8f5f1e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:32:67:96:02:3c:93:22:53:b3:d9:39:23:d7:
d6:e5:fe:e8:a2:ca:86:ab:52:19:a1:c4:20:b5:46:
20:d9:17:72:8b:03:01:4a:ee:b4:4f:87:86:6e:18:
95:7b:96:7f:e2:c1:d5:b5:fe:84:a4:67:f5:69:59:
9b:70:40:0d:2d:70:c5:dc:cc:50:3b:00:22:18:ac:
ca:be:a0:d9:a7:eb:4d:c1:eb:bf:4e:56:85:97:b4:
fd:ab:2a:7f:0e:dc:f8:21:c8:c1:bd:e1:46:73:17:
6f:13:89:77:57:ae:07:84:2c:b2:11:75:30:fc:16:
c5:8f:dc:71:9a:9e:4b:62:6d:19:09:b4:bd:96:41:
cc:6a:2e:b9:b8:69:09:f9:bd:45:04:a0:49:48:b9:
8e:bc:db:e9:85:09:3e:7f:5b:b6:78:8a:e7:ee:e8:
6b:c5:9f:09:3c:f3:fd:c4:14:91:cf:64:6e:d7:ad:
ab:19:e3:81:92:5e:46:1c:cc:cb:c9:e6:28:e0:6a:
a2:30:66:e9:b0:c9:eb:bc:cb:45:f4:95:07:d1:0e:
59:db:0e:84:d7:ce:c7:9e:87:a7:52:d7:81:0c:4d:
70:e6:fb:a2:f7:54:08:9a:7a:90:dc:2f:9f:37:0d:
eb:7b:51:d3:5d:aa:82:53:88:30:52:69:58:34:6a:
d6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C5:DB:BC:7B:8D:8E:F6:05:48:A0:19:9F:29:FA:AD:8F:5F:1E:03
X509v3 Authority Key Identifier:
keyid:77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:00:b9:6a:a1:41:09:43:f2:0d:77:84:b5:00:09:22:14:fe:
51:7f:81:71:98:7e:7a:3c:93:81:96:d8:90:aa:11:a7:a0:05:
0e:7d:0e:c2:7f:a1:76:59:cb:29:91:f5:f4:f4:c4:4b:84:b8:
4e:e6:fc:93:3a:ce:54:d5:df:0b:c2:07:07:e6:77:85:de:c4:
72:03:03:0e:fc:f7:8f:e4:b7:75:1a:86:5a:ba:e8:30:be:16:
66:fd:e0:8a:c7:44:60:17:aa:e8:b4:2e:7e:8b:e4:ee:d8:57:
c9:b4:62:6d:0d:c2:c8:c2:d6:83:58:f5:be:6b:70:da:eb:70:
40:2c:b6:17:13:c2:3b:66:95:43:42:49:9d:ff:2c:87:3c:c2:
ab:41:c2:c5:4c:cb:c1:a4:31:bc:0c:a8:c2:63:bd:48:b1:54:
81:54:a4:27:3c:9e:06:e3:f2:dd:e0:6b:fb:0d:8f:1f:ff:21:
f8:0e:e8:41:72:94:73:8f:43:32:ce:34:0d:d7:d6:90:ac:e1:
ef:09:90:98:22:9f:29:e6:4f:d5:15:5f:b4:d7:06:da:c0:b7:
5d:61:1c:be:92:ca:50:86:7a:0a:86:da:45:76:80:4c:d6:90:
71:43:b5:d5:dd:07:9a:74:dc:92:8b:93:8b:44:b6:b2:6d:72:
0e:57:a7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:27 2026 by rpki-client