Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
File: dYDRZWm7JKMo4ntH99dRZZcl3vs.mft (raw, json)
Hash identifier: 5L6npUwdQA3iaJE+iZp0OlDA3xpZiqcnqdtpHHR8Yko=
Subject key identifier: F7:24:58:46:F1:6C:62:EA:C7:D2:D4:21:48:64:BD:39:7F:11:ED:7F
Authority key identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
Certificate issuer: /CN=7580d16569bb24a328e27b47f7d751659725defb
Certificate serial: 019D25F14AEDAAF54436841C5DD2D5410CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:01:03 +0000
Manifest this update: Wed 25 Mar 2026 17:01:03 +0000
Manifest next update: Thu 26 Mar 2026 17:01:03 +0000
Files and hashes: 1: ECrRKyyp-LiX1od5u6h9jQbQyd8.roa (hash: G+0jVdYZJlndG8ZNfCVw49ceooT9pB50RNi/efo30+s=)
2: dYDRZWm7JKMo4ntH99dRZZcl3vs.crl (hash: OZlgJEb+ie9zIDJs9SIj89aWtttXx5Q9MSoKel1GUlM=)
3: y86tnmPuqWIsHAopUuOyTE-DfXY.roa (hash: ddB2+/l7hkyocSFaIWWx4fEn6FSZzUu/NIcm47CrJmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:4a:ed:aa:f5:44:36:84:1c:5d:d2:d5:41:0c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7580d16569bb24a328e27b47f7d751659725defb
Validity
Not Before: Mar 25 17:01:03 2026 GMT
Not After : Mar 26 17:01:03 2026 GMT
Subject: CN=f7245846f16c62eac7d2d4214864bd397f11ed7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4b:48:aa:1b:f8:ea:9b:22:0f:a3:aa:8f:c4:
59:48:61:76:7e:ec:92:dd:4f:05:73:16:a9:4f:f0:
8e:f4:76:40:1a:14:c0:b7:0a:70:2b:1c:3d:bc:88:
8b:ab:b6:47:70:c5:5b:0d:33:d3:b9:fd:35:dd:27:
48:14:ba:4e:c2:7a:5e:0e:2b:0b:e0:d8:2f:2f:ef:
5f:0d:c0:1a:79:0c:f4:bc:1b:62:9a:2f:a7:96:43:
9d:c9:cb:6c:00:37:f3:4c:0b:61:b5:58:97:c1:72:
8a:f8:21:bd:29:a2:b3:2e:cb:6f:d5:04:bf:b6:9d:
9d:53:4b:14:5d:14:5c:dd:6a:87:d9:c0:22:3f:ce:
a6:52:59:af:a2:47:29:24:c6:32:d6:26:0b:f5:f1:
66:32:f0:f7:d5:5a:c2:df:14:94:84:68:31:4d:60:
ce:1c:a0:7d:cb:ed:ed:33:14:3b:89:cc:be:02:38:
8f:72:22:15:d7:34:20:08:d2:47:8a:22:3e:f1:9b:
d8:46:24:e5:f6:25:8d:78:99:78:53:48:15:31:d8:
4e:0a:9d:7b:5b:cc:0c:63:df:a8:91:ad:f4:72:2e:
9f:63:db:f4:7a:56:fe:b1:ef:2e:57:8a:a5:8e:ff:
1a:19:cc:5d:5f:02:e8:b6:10:b6:78:dc:d6:e8:9e:
ad:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:24:58:46:F1:6C:62:EA:C7:D2:D4:21:48:64:BD:39:7F:11:ED:7F
X509v3 Authority Key Identifier:
keyid:75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:03:18:31:c9:e6:23:03:fa:b1:23:25:c9:b3:07:3f:1c:a8:
a2:c5:dd:2a:03:70:ba:6b:03:21:4a:4c:ce:b1:76:b7:20:03:
10:40:2f:c4:35:4b:ef:c6:0f:ff:fb:7e:99:ce:0f:fb:00:7b:
82:0c:26:f5:41:e0:93:00:12:1f:3b:15:5f:e7:eb:49:53:47:
28:c5:06:91:78:40:79:8e:ac:51:de:8c:20:f5:99:dc:8b:a9:
99:0b:0f:3e:85:12:e8:31:63:f2:af:31:26:3c:b4:53:0e:5e:
46:4b:6e:b5:35:bf:9b:23:4d:67:d0:74:91:aa:b4:b0:22:1b:
d3:c1:90:99:be:c2:f3:0b:32:9d:42:26:f7:4d:df:d2:d0:c8:
f6:11:ef:91:a9:a0:dc:65:80:f3:7d:2b:9e:18:5d:d1:6b:b5:
10:99:f7:8d:0b:3c:46:e1:2c:c5:f6:7c:2d:f5:18:c2:8b:45:
91:16:72:58:a9:15:92:b2:b4:ea:71:71:4e:3e:aa:85:9d:df:
03:67:56:48:11:58:45:27:52:c5:88:96:87:f0:d3:93:06:cb:
9e:fa:64:14:99:3f:9a:51:84:57:74:db:9a:da:36:ca:2c:11:
39:46:1d:7c:1f:c9:16:38:90:7e:e7:60:bd:ce:7e:67:79:93:
55:cb:4a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:55 2026 by rpki-client