Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
File: dkyOsD7yMmpiDfEAVI0fBth0VRo.mft (raw, json)
Hash identifier: sfnJVV56a8wQu9LsLlqS1WQz8tMXeE/nRqv1isdnfL0=
Subject key identifier: 09:99:65:8A:C9:EA:B1:6F:E5:A9:F2:13:87:1C:73:AF:FF:C8:BC:EF
Authority key identifier: 76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
Certificate issuer: /CN=764c8eb03ef2326a620df100548d1f06d874551a
Certificate serial: 019D2960FA4592D01B4DE630B65813AA4030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
Manifest number: 113D
Signing time: Thu 26 Mar 2026 09:01:54 +0000
Manifest this update: Thu 26 Mar 2026 09:01:54 +0000
Manifest next update: Fri 27 Mar 2026 09:01:54 +0000
Files and hashes: 1: dkyOsD7yMmpiDfEAVI0fBth0VRo.crl (hash: LkZ3EHnkYQN3aU75euscrvB/Z6eY+pbjoHwrdnKNnmg=)
2: lM6EAL5jH7m-VanbJUJalubT-ik.roa (hash: QmjnVhkdEYUR4RGhNidEfs1iFjkT7cSO1WErzN3tuIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:fa:45:92:d0:1b:4d:e6:30:b6:58:13:aa:40:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764c8eb03ef2326a620df100548d1f06d874551a
Validity
Not Before: Mar 26 09:01:54 2026 GMT
Not After : Mar 27 09:01:54 2026 GMT
Subject: CN=0999658ac9eab16fe5a9f213871c73afffc8bcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6b:86:e5:a8:e1:eb:c5:70:16:ea:d4:0f:f2:
57:cd:45:e1:81:95:6b:f8:dc:3a:8f:53:3b:22:3c:
d2:fa:8d:66:df:77:40:d6:20:17:fa:93:98:ac:b8:
a9:7f:f7:d9:db:47:7b:c3:39:f7:82:0f:95:cd:bb:
26:70:7f:fe:b1:66:d2:9f:78:7d:94:2a:0b:f8:05:
b4:13:b1:88:54:8c:fe:b1:c2:c4:10:8a:32:db:55:
81:78:29:b3:96:5f:c3:90:74:49:98:a2:1a:e1:73:
ed:be:3d:fa:eb:e6:20:ff:92:88:ac:78:d2:fc:8a:
f2:a3:c6:d2:20:5c:b9:9a:e0:64:87:50:df:37:66:
77:48:49:72:d1:b8:fd:17:63:54:d5:93:59:f7:e4:
bc:89:09:8d:da:44:eb:01:75:2a:27:12:23:d8:c2:
bb:9d:75:cd:2c:7c:c1:b6:d0:f1:d9:9d:af:c5:9d:
f1:07:34:98:88:6c:ac:49:9c:a5:6e:4c:39:b5:28:
04:d7:a5:ed:2f:55:09:57:68:64:9c:cf:3b:2e:5d:
fc:ac:00:d5:b3:63:42:46:7e:6d:d1:90:9e:b5:6d:
f7:c7:ba:ea:1c:eb:c4:42:dd:55:61:9e:69:d1:d4:
ad:6d:c3:db:5d:db:0f:cf:cb:26:d0:f8:35:21:89:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:99:65:8A:C9:EA:B1:6F:E5:A9:F2:13:87:1C:73:AF:FF:C8:BC:EF
X509v3 Authority Key Identifier:
keyid:76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:18:4f:f4:a4:39:a8:36:d3:44:13:05:5b:8a:3d:de:52:c0:
0c:52:53:c8:2e:bf:3b:ca:c0:09:82:ff:de:1f:bc:9c:fb:46:
92:78:5b:98:c9:e0:3e:b9:db:23:81:5c:ad:46:1a:0a:d9:99:
8e:83:06:42:95:f1:22:3c:80:d7:b7:7c:a2:9f:c5:46:ac:b4:
6b:63:1c:81:cc:69:83:fe:46:80:ca:47:5b:a6:d3:d6:4b:e2:
de:ed:38:d1:bb:f1:72:c4:f6:d7:39:6d:fd:b6:df:58:e0:cd:
18:1a:59:54:b5:71:31:80:ab:e8:c0:07:31:b5:4a:8f:c4:1b:
70:c7:b9:d7:98:75:25:8a:94:26:9d:bf:f0:95:e9:bb:75:6c:
7f:c6:f7:d2:af:15:41:0e:74:59:69:75:98:31:1b:b5:4d:c5:
fc:b8:dc:5d:ac:c0:99:49:1f:03:d2:13:70:cd:87:74:32:4d:
04:e5:7c:e6:2a:d7:47:ec:a4:73:f7:c4:15:6a:6a:1f:9d:b6:
b6:cd:07:9d:d2:25:f5:ae:39:45:0f:44:46:12:70:ea:8f:3d:
40:7b:94:da:2b:90:24:93:f5:a5:d8:63:d1:b6:fb:1a:bd:bb:
26:14:22:c5:6a:9a:d0:c1:62:4f:3f:4e:af:84:1f:82:3c:48:
9b:51:a7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:58:34 2026 by rpki-client