Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
File: dYDRZWm7JKMo4ntH99dRZZcl3vs.mft (raw, json)
Hash identifier: 5Ayw4M5J5MS7a9984MYVbzR0sdpYW/5ZeQZdCQV6rPg=
Subject key identifier: 38:39:E3:7E:AA:67:19:22:DC:92:88:57:AE:B3:7A:41:B1:87:52:88
Authority key identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
Certificate issuer: /CN=7580d16569bb24a328e27b47f7d751659725defb
Certificate serial: 01A0DC1729BD9C53E634C712A68E75718F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 05:01:40 +0000
Manifest this update: Sat 26 Sep 2026 05:01:40 +0000
Manifest next update: Sun 27 Sep 2026 05:01:40 +0000
Files and hashes: 1: ECrRKyyp-LiX1od5u6h9jQbQyd8.roa (hash: G+0jVdYZJlndG8ZNfCVw49ceooT9pB50RNi/efo30+s=)
2: dYDRZWm7JKMo4ntH99dRZZcl3vs.crl (hash: NM5kS0B9LV2kzfOoLVcp8cFwuaYnc7G7byigc1CGDC8=)
3: y86tnmPuqWIsHAopUuOyTE-DfXY.roa (hash: ddB2+/l7hkyocSFaIWWx4fEn6FSZzUu/NIcm47CrJmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:29:bd:9c:53:e6:34:c7:12:a6:8e:75:71:8f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7580d16569bb24a328e27b47f7d751659725defb
Validity
Not Before: Sep 26 05:01:40 2026 GMT
Not After : Sep 27 05:01:40 2026 GMT
Subject: CN=3839e37eaa671922dc928857aeb37a41b1875288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:0a:ee:fe:c7:47:c8:08:3c:ea:75:70:70:
33:89:5c:fe:d0:e4:6a:94:84:78:62:81:1f:97:46:
3a:27:93:6a:13:0d:62:bb:c1:08:14:92:0c:8b:2b:
48:a1:1c:a6:bc:7d:07:4b:11:98:fd:a3:a0:b5:9b:
a9:88:97:87:1e:e0:ab:5d:29:fa:18:66:49:77:56:
6c:3f:8f:ea:60:80:01:bd:1e:d8:59:06:c6:9f:cc:
2e:c0:9f:96:cc:5c:56:8a:ae:11:f5:a9:33:1d:29:
d1:8e:8e:2c:ef:16:0d:4b:01:7a:cf:2a:48:82:c4:
df:af:9a:ee:95:e9:9b:78:a9:d0:76:7f:a2:d3:b1:
ad:e7:44:5d:86:9b:8d:40:12:6e:98:72:f1:50:b5:
41:f4:48:f5:c4:51:21:39:b8:4d:10:f4:0b:0c:55:
29:df:2b:88:c5:20:f4:b6:f0:78:53:30:eb:60:a5:
8b:8d:8f:ef:37:54:f8:b5:21:48:13:f2:0a:1a:1b:
ff:c3:76:58:d4:d3:ce:6a:50:65:e4:6b:bc:61:b2:
0b:73:df:7b:de:27:e8:88:81:8e:1c:a2:f9:45:6c:
49:b3:90:1e:47:26:20:5c:ef:7a:eb:3e:f1:93:8d:
15:90:bb:27:42:6d:5b:36:6e:3c:50:3b:86:f6:3d:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:39:E3:7E:AA:67:19:22:DC:92:88:57:AE:B3:7A:41:B1:87:52:88
X509v3 Authority Key Identifier:
keyid:75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7f:a3:fa:bd:b8:c9:89:8f:3a:2d:03:a8:6a:0d:2c:cd:bb:
b6:46:fe:e8:bb:5c:0c:75:f8:c5:c1:7a:25:95:d2:63:0a:dc:
25:6d:43:8b:e7:d7:7c:c0:09:10:c3:e6:1e:08:6a:02:23:93:
84:a1:f3:23:ed:f6:9d:e8:3a:8d:6f:90:0b:67:32:7f:60:31:
b4:1a:fe:e8:11:8c:6d:1f:6f:b0:eb:94:cd:d9:40:f5:26:b3:
73:d7:22:ac:2e:a6:2c:b1:72:4a:e6:32:e3:9c:98:c9:4d:c5:
c6:bc:88:6b:09:83:98:33:94:04:db:96:1a:3a:74:e2:dc:de:
31:ca:91:41:eb:8d:b8:29:8d:32:ef:aa:e4:b4:94:53:93:f4:
7b:5b:3f:1a:b5:f4:28:f5:3f:7a:6a:50:2c:92:f1:2d:64:2d:
ae:f8:69:57:86:ac:6d:64:99:d4:cf:17:40:f8:e3:ff:45:2f:
1e:96:ee:83:d0:41:69:43:69:01:b7:12:b3:1f:c9:92:4a:a3:
92:0b:83:ce:7a:6f:ba:de:b0:79:6d:4e:60:fb:f3:83:a6:cc:
d7:3e:71:09:a1:06:5c:40:42:b0:6b:d8:21:00:ff:61:4f:cf:
48:17:8d:8a:cb:e7:f5:fa:2d:2b:81:dc:85:40:21:f8:54:43:
8b:7a:67:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:48:10 2026 by rpki-client