Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json)
Hash identifier: Agop+uVmrTDwHBdtZe6fEf6OYWxqt+h2twJi9i7EI7M=
Subject key identifier: 03:53:5A:7B:0B:77:A0:92:7A:0A:10:3C:AC:4A:91:05:1D:E0:FE:6A
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 019D2816E67943EA7E1FF75421073BC9472F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
Manifest number: 0F6F
Signing time: Thu 26 Mar 2026 03:01:22 +0000
Manifest this update: Thu 26 Mar 2026 03:01:22 +0000
Manifest next update: Fri 27 Mar 2026 03:01:22 +0000
Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: wZdisrtmCTDZeQNrtvxX/bnsVuYded95IhxDnyg7SAs=)
2: XpDHF6qNAfRig2NmPZIIBwNiNAU.roa (hash: 9bFU4KF8zp5CMrxC2WFBFW2SFIScv756NVWyJZFeI1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:e6:79:43:ea:7e:1f:f7:54:21:07:3b:c9:47:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: Mar 26 03:01:22 2026 GMT
Not After : Mar 27 03:01:22 2026 GMT
Subject: CN=03535a7b0b77a0927a0a103cac4a91051de0fe6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:29:58:50:64:f2:c4:d6:30:e8:9b:eb:15:7a:
ad:6e:8b:47:83:d1:54:d5:c8:27:23:1a:cc:c5:c4:
9a:92:4f:d5:da:a5:d6:c0:12:84:b4:f6:22:4c:23:
52:f0:b4:b7:09:37:b3:51:d5:c2:76:51:1f:d9:bb:
87:c6:18:91:e0:4d:b8:93:93:91:0d:2b:a1:81:f0:
70:e2:89:70:7f:dc:93:5d:d2:0e:5c:0a:22:19:ee:
a0:cc:f2:21:05:33:90:0e:f9:54:f4:80:1f:d6:41:
0f:d4:ea:a8:7c:c0:3c:34:ed:36:d7:5d:4b:00:6c:
ac:f7:14:9b:d0:cc:f0:09:05:90:eb:ed:9d:d0:4c:
1e:82:5a:a9:0e:b2:1b:e4:63:47:b0:29:e7:7d:46:
75:70:eb:dc:e4:ca:6c:bc:ec:71:b0:03:fc:f9:86:
2f:9e:39:b8:56:18:6d:2d:84:af:d3:bc:f6:6d:7a:
c0:7e:68:8e:9f:e3:d8:aa:60:4e:07:4e:41:b0:f8:
28:e9:27:ba:ad:de:15:b9:ff:08:7a:be:99:ed:3a:
db:7f:a9:a3:13:82:88:61:45:86:03:75:d7:10:a1:
1a:fa:23:a3:f9:24:1b:1b:34:bd:49:ba:8b:d0:cd:
ab:a4:a5:14:96:23:c1:c9:1f:a8:06:f0:f6:4a:95:
11:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:53:5A:7B:0B:77:A0:92:7A:0A:10:3C:AC:4A:91:05:1D:E0:FE:6A
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:9c:22:ff:90:17:30:b6:25:c2:03:81:2b:81:be:1a:b0:03:
fb:06:7e:ee:98:e7:13:ce:20:44:c0:6e:25:ec:24:b9:ed:a4:
ef:37:9b:9c:1e:68:92:62:4f:9e:f0:8d:a8:1b:48:2d:4b:f4:
a6:ad:f7:73:21:4a:a8:9a:0e:83:23:53:ef:33:17:12:ff:71:
de:bc:6f:ae:d8:61:18:3a:ab:77:60:18:cf:a7:eb:35:6f:ad:
f8:73:77:28:af:7b:e8:f1:87:13:f4:bc:28:2f:46:3a:5c:79:
51:8d:b6:3a:53:f8:80:0f:81:c4:ad:88:36:c9:a6:bc:e8:b8:
86:60:9b:b6:5e:66:42:79:3a:d1:28:f3:51:5f:1d:ac:4b:99:
59:85:e4:99:37:eb:32:9c:fc:d0:a3:9c:30:61:13:8d:6a:d1:
99:9a:09:cd:83:03:af:08:43:8a:26:ca:58:f1:03:8b:69:b7:
f2:e5:32:39:54:2c:83:21:11:4b:34:98:3f:95:9f:a6:cf:cf:
c2:77:ea:f7:ff:3f:46:62:aa:61:cb:02:22:d7:00:a5:82:45:
0d:df:be:ba:47:59:35:8f:10:2b:97:40:b2:52:12:99:74:67:
ea:b7:7d:17:81:b7:7a:19:90:7f:ee:75:a8:8c:c6:e3:d0:93:
73:e2:bc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:53 2026 by rpki-client