Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json)
Hash identifier: jfy92/5M13GzW17ExSNJrm+3nQ/NV/NKuinYrNpfGc8=
Subject key identifier: A0:2D:F9:59:F5:BF:64:DD:88:3A:3E:8C:BD:28:64:A9:51:EC:E6:0B
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 01A10AA72660E9DB9BF1C2ED1E70BA249377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
Manifest number: 1172
Signing time: Mon 05 Oct 2026 06:01:28 +0000
Manifest this update: Mon 05 Oct 2026 06:01:28 +0000
Manifest next update: Tue 06 Oct 2026 06:01:28 +0000
Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: 0btsv4WCe6oN4Vi1+fy8t16+OcnmOCytc4K12YJTj34=)
2: XpDHF6qNAfRig2NmPZIIBwNiNAU.roa (hash: 9bFU4KF8zp5CMrxC2WFBFW2SFIScv756NVWyJZFeI1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:a7:26:60:e9:db:9b:f1:c2:ed:1e:70:ba:24:93:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: Oct 5 06:01:28 2026 GMT
Not After : Oct 6 06:01:28 2026 GMT
Subject: CN=a02df959f5bf64dd883a3e8cbd2864a951ece60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:c2:10:78:3e:b7:76:23:ca:8c:32:a7:35:
f2:2d:b3:a5:32:76:21:5a:0e:bf:39:3a:bf:db:e7:
4b:6c:8f:c9:5c:b5:42:93:fb:e2:47:f1:c8:4b:d3:
8f:0a:61:8e:20:4c:e3:60:55:fe:1c:f5:2c:fb:67:
86:95:69:a7:d8:59:05:88:d3:d3:b1:35:95:65:6f:
9c:77:57:2d:a2:ca:74:79:6f:cb:14:55:e8:7d:a4:
88:27:1e:6d:ff:c2:c0:85:fb:1e:25:05:bb:fe:e8:
c9:fc:dd:58:e7:e6:f4:1f:23:ac:c1:f1:a3:75:93:
c4:f2:9e:7a:4d:0e:df:e4:e8:41:d0:4d:c8:0e:6b:
bf:07:87:0d:66:78:e9:ef:f0:82:18:c6:36:38:5a:
10:a9:0e:f7:3c:11:97:c8:29:63:17:9b:b7:71:72:
31:e9:1a:8d:5f:b0:ce:22:0c:a8:36:d6:ea:10:1c:
75:45:7c:f0:a4:1a:ce:63:67:5a:d6:93:a6:49:76:
91:ca:05:14:18:90:5f:14:fd:8b:7a:11:e1:ab:c8:
1c:ac:a1:be:cd:5b:12:5f:26:9a:3f:95:da:73:5e:
7e:df:6d:de:7b:2d:58:53:b8:3f:1a:9b:e4:cf:00:
1e:ec:82:95:90:d4:ed:79:74:ee:a7:2b:03:d2:92:
01:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2D:F9:59:F5:BF:64:DD:88:3A:3E:8C:BD:28:64:A9:51:EC:E6:0B
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:5d:b1:c9:1a:c0:37:1d:8b:7d:73:0e:56:93:ce:26:65:66:
04:7d:d4:e5:c9:1a:9b:57:b3:ce:0f:92:f8:fb:57:99:ab:32:
55:37:2b:e7:00:c2:6d:28:12:53:af:9a:1a:bb:b0:25:95:c5:
d6:d5:59:52:5a:4a:0d:05:9a:d9:43:01:b2:07:3d:20:e9:8e:
f5:79:30:50:67:38:0a:89:5d:03:ff:31:b6:dc:f0:94:a2:56:
d5:50:a1:0b:c7:d4:d5:e7:69:40:a0:ed:73:17:bd:e3:1d:fe:
57:f2:c5:3a:a9:c1:30:c2:ac:af:2c:db:bd:8c:b0:89:1d:4f:
dc:77:e1:5f:16:87:95:61:46:0e:97:56:95:ac:3b:bd:86:c7:
cd:dc:8c:18:17:75:0d:06:d6:b8:33:1b:58:0c:dd:31:f7:d7:
3d:26:f3:32:d7:91:59:a5:bf:07:0d:ea:9d:11:a9:f0:87:7a:
e9:22:5d:11:a8:45:7f:e6:16:a6:c5:7a:b4:81:3f:e0:0e:a8:
13:cf:d9:7b:59:9f:74:80:cb:7f:f9:3d:31:57:89:f5:fb:ee:
2d:d1:7d:02:7a:a6:73:12:a7:69:90:43:b3:43:dd:59:a9:64:
d9:7a:4f:fb:d3:db:11:a9:f5:4d:89:69:01:2f:16:3d:f9:5b:
fc:4a:08:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:33:54 2026 by rpki-client