Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
File: DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft (raw, json)
Hash identifier: vmgzLs+C5vl6zpcztYkT906KkMycSkOOz/UHsslUI0c=
Subject key identifier: 20:BE:4F:EB:8A:EE:88:00:B4:01:0A:6D:98:ED:CC:50:C9:AB:75:63
Authority key identifier: 0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
Certificate issuer: /CN=0d814a5f08fb47711d7160b027f996dfb612f045
Certificate serial: 019D2929395F9917DC0777BF702F0981621B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
Manifest number: 17CC
Signing time: Thu 26 Mar 2026 08:01:00 +0000
Manifest this update: Thu 26 Mar 2026 08:01:00 +0000
Manifest next update: Fri 27 Mar 2026 08:01:00 +0000
Files and hashes: 1: DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl (hash: WGbsNhIspYN89VmOJ9HV3GPJT1lJvgsN+r7O5jxsmJc=)
2: hvrAoDLP-O8bFZV3A8_RKQudOis.roa (hash: 5pvq3N7LVgKGxK7NA9zvvsccRO2dQ9fcZlkpsYmHI4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:39:5f:99:17:dc:07:77:bf:70:2f:09:81:62:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d814a5f08fb47711d7160b027f996dfb612f045
Validity
Not Before: Mar 26 08:01:00 2026 GMT
Not After : Mar 27 08:01:00 2026 GMT
Subject: CN=20be4feb8aee8800b4010a6d98edcc50c9ab7563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0e:00:55:4f:db:7f:54:b4:2f:8d:a7:24:e4:
5b:4b:e8:20:fd:d1:3b:60:36:51:39:e2:19:d4:46:
75:d9:c7:e6:99:70:26:61:c0:05:b4:03:99:f0:a5:
1d:c3:5b:e2:9f:e6:cf:d8:db:3f:30:00:55:13:13:
18:21:07:0b:7e:a4:1c:6d:34:da:7d:94:f2:48:52:
85:63:97:30:61:99:4d:b8:40:11:1b:0f:ab:0b:71:
3c:e7:b9:4f:f2:a5:14:21:35:dc:cf:46:f0:36:2a:
f1:43:d6:ea:2a:06:6e:ca:9b:96:24:69:1b:2f:da:
3c:98:ec:a6:73:b3:a0:09:75:cc:e0:49:e7:86:8c:
a4:63:0d:91:ae:9e:5b:f9:de:23:ea:94:d9:64:e4:
6c:54:42:e6:55:f9:3a:17:6e:07:32:64:63:7a:c9:
e0:11:3d:36:d9:d2:fc:aa:c4:89:91:75:e1:77:cb:
d9:8f:aa:5c:4b:c4:a8:39:2f:1e:57:8f:3d:50:33:
74:5d:8f:35:0f:e6:3a:c0:e9:e8:c0:d8:74:14:07:
a3:15:a0:82:23:28:4d:30:b6:5c:0a:a0:73:d8:03:
65:17:08:92:ea:b1:c9:36:c3:c1:c8:98:aa:dc:6a:
3c:6f:4f:58:74:44:af:a9:31:b0:b5:41:a7:0f:4e:
ba:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BE:4F:EB:8A:EE:88:00:B4:01:0A:6D:98:ED:CC:50:C9:AB:75:63
X509v3 Authority Key Identifier:
keyid:0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:78:15:13:3c:9a:5f:03:ba:5f:2b:39:4d:c0:19:95:e3:3d:
14:2c:6e:2b:96:e3:a4:21:de:a7:8b:92:39:da:44:87:82:0f:
23:73:a4:24:a1:db:1f:c0:8f:8e:b2:c0:6b:9e:5c:85:f9:51:
4c:98:45:1a:cb:81:39:9d:0f:18:05:77:b8:dd:97:51:df:de:
94:0f:c8:d1:e2:48:9d:96:78:92:e3:bf:68:81:1e:40:fb:c2:
8a:09:d6:39:4f:ef:8f:05:96:e9:20:56:f5:cc:93:3c:ef:57:
11:96:50:af:c2:3b:46:98:d1:7b:48:97:63:a1:95:47:13:1c:
fc:26:66:90:58:96:7d:2a:65:3f:93:49:4c:3b:d7:49:e2:b6:
85:22:a1:20:b1:7d:92:6b:fd:cf:76:2e:1b:60:cb:a2:35:40:
7f:bc:d5:a8:0d:75:81:b1:78:0f:eb:3c:a8:02:19:7f:fb:95:
8d:ff:a3:50:3c:9a:da:a9:9f:78:2d:d1:be:56:11:b8:d0:58:
5f:71:81:4d:6e:b8:59:17:63:9e:11:1a:21:63:95:6c:8d:57:
41:a3:f0:31:e1:58:de:18:9b:f8:5f:3d:5f:1d:85:6d:6e:f0:
c6:94:c3:53:1b:65:e0:4b:f3:ed:e4:4f:aa:a4:bf:a5:2b:bd:
d9:c5:06:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKTlfmRfcB3e/cC8JgWIbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkODE0YTVmMDhmYjQ3NzExZDcxNjBiMDI3Zjk5NmRmYjYx
MmYwNDUwHhcNMjYwMzI2MDgwMTAwWhcNMjYwMzI3MDgwMTAwWjAzMTEwLwYDVQQD
EygyMGJlNGZlYjhhZWU4ODAwYjQwMTBhNmQ5OGVkY2M1MGM5YWI3NTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ4AVU/bf1S0L42nJORbS+gg/dE7
YDZROeIZ1EZ12cfmmXAmYcAFtAOZ8KUdw1vin+bP2Ns/MABVExMYIQcLfqQcbTTa
fZTySFKFY5cwYZlNuEARGw+rC3E857lP8qUUITXcz0bwNirxQ9bqKgZuypuWJGkb
L9o8mOymc7OgCXXM4EnnhoykYw2Rrp5b+d4j6pTZZORsVELmVfk6F24HMmRjesng
ET022dL8qsSJkXXhd8vZj6pcS8SoOS8eV489UDN0XY81D+Y6wOnowNh0FAejFaCC
IyhNMLZcCqBz2ANlFwiS6rHJNsPByJiq3Go8b09YdESvqTGwtUGnD066PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCC+T+uK7ogAtAEKbZjtzFDJq3VjMB8GA1UdIwQY
MBaAFA2BSl8I+0dxHXFgsCf5lt+2EvBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlGS1h3ajdSM0VkY1dDd0pfbVczN1lTOEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84YTY4NGItMDM3NS00MGU1LWI3MjYt
Y2U3OTg1YjU2MDkzLzEvRFlGS1h3ajdSM0VkY1dDd0pfbVczN1lTOEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84YTY4NGItMDM3NS00MGU1LWI3MjYtY2U3OTg1YjU2MDkz
LzEvRFlGS1h3ajdSM0VkY1dDd0pfbVczN1lTOEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHngVEzya
XwO6Xys5TcAZleM9FCxuK5bjpCHep4uSOdpEh4IPI3OkJKHbH8CPjrLAa55chflR
TJhFGsuBOZ0PGAV3uN2XUd/elA/I0eJInZZ4kuO/aIEeQPvCignWOU/vjwWW6SBW
9cyTPO9XEZZQr8I7RpjRe0iXY6GVRxMc/CZmkFiWfSplP5NJTDvXSeK2hSKhILF9
kmv9z3YuG2DLojVAf7zVqA11gbF4D+s8qAIZf/uVjf+jUDya2qmfeC3RvlYRuNBY
X3GBTW64WRdjnhEaIWOVbI1XQaPwMeFY3hib+F89Xx2FbW7wxpTDUxtl4Evz7eRP
qqS/pSu92cUG+Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:31 2026 by rpki-client