Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
File: dygVWFa4zk2F-NpPbTWwVbMNvTw.mft (raw, json)
Hash identifier: 7KebKv0+Un5IikAs1X8W+wMwIrYea1ckggtKnqXhe2Q=
Subject key identifier: 00:51:46:71:6E:79:DD:A7:E4:90:5A:03:14:80:96:9C:1A:33:08:26
Authority key identifier: 77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C
Certificate issuer: /CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c
Certificate serial: 01A1DEA780F98D11B07BDBD5D4CB67AE5E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
Manifest number: 03A3
Signing time: Sun 15 Nov 2026 10:01:21 +0000
Manifest this update: Sun 15 Nov 2026 10:01:21 +0000
Manifest next update: Mon 16 Nov 2026 10:01:21 +0000
Files and hashes: 1: IUXK5owGJRJBQqIOmgn7bKscCRQ.roa (hash: 3cmce/T6z+IA9rzyeoaTbVrr0D6UCYaIjKkeAxLWn1c=)
2: SiTbwMGtFl7yz90TOcACIfl_jbM.roa (hash: bZN6RaXx0CwbNISBjFsu0G8tFXjESLVVXcSOexStvD8=)
3: dygVWFa4zk2F-NpPbTWwVbMNvTw.crl (hash: Q9PXc4Cjw1ftJvEzneG6laDFrNfnLRGHYlDZQ+UM8lQ=)
4: ymLzZ-VhmhqNEGONzE9KW-m04rM.roa (hash: RinsNGJ2DGv43ndnKRTv8Ja4sLQDd8GhBHpIm7eFfCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:80:f9:8d:11:b0:7b:db:d5:d4:cb:67:ae:5e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c
Validity
Not Before: Nov 15 10:01:21 2026 GMT
Not After : Nov 16 10:01:21 2026 GMT
Subject: CN=005146716e79dda7e4905a031480969c1a330826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:55:d6:ae:5d:e3:73:3c:14:2b:74:1d:fa:
d4:24:6f:54:90:c8:2f:74:9f:8a:89:ca:11:9a:b0:
bc:02:6b:a9:5d:dc:c7:32:fa:ea:f6:79:f0:0f:81:
95:56:de:13:e8:f4:24:72:62:64:9b:93:00:89:2f:
a6:63:5d:cf:fe:9b:db:1e:92:33:af:42:0e:61:11:
36:ea:33:84:94:a0:dc:e9:6f:ce:eb:16:cd:ae:bf:
48:68:b7:34:a9:60:ca:ac:f0:ae:65:62:f7:75:a1:
90:d4:44:8c:27:2d:f1:89:d4:e7:2f:d5:be:8b:1a:
fe:43:3f:b1:dd:d5:31:77:18:93:98:2f:c9:43:36:
61:e5:dd:ee:a1:39:ae:8e:91:58:81:ce:3b:bf:ae:
ba:cb:3a:28:8d:60:91:8e:f0:dc:bc:4b:d9:b8:77:
cb:a4:c1:0f:10:bf:a2:8c:b1:aa:0d:45:49:50:df:
d9:3c:24:1b:89:c0:52:5d:25:99:bd:87:c9:45:14:
90:b4:81:d0:4d:e9:85:c9:1d:e1:48:4f:d5:ed:d8:
5c:b7:8f:e8:45:df:e3:c7:b3:86:f2:a3:f8:fc:5e:
4a:b6:51:60:b3:9e:8c:05:cb:26:bc:8b:77:c1:4e:
ea:30:c1:de:bc:31:0b:d1:96:19:b7:33:f0:df:86:
c1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:51:46:71:6E:79:DD:A7:E4:90:5A:03:14:80:96:9C:1A:33:08:26
X509v3 Authority Key Identifier:
keyid:77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:2a:0b:9e:a8:a3:ac:f2:d2:2c:9b:9c:b1:b5:94:68:14:14:
7f:94:70:0a:4e:f0:7f:82:e0:0f:22:0c:77:1b:1b:22:5d:40:
aa:08:e6:50:69:60:f5:4a:54:28:2e:4f:e0:e2:c4:ef:41:82:
db:f1:0f:b0:6c:8d:c8:64:df:56:d6:7d:ba:43:ad:5f:03:1c:
0f:5e:21:25:a5:b7:b5:cb:83:cb:96:3b:3c:3e:97:43:7d:71:
66:d7:40:1e:90:19:f7:ad:49:6b:2e:2e:73:42:26:b3:b0:99:
b9:27:16:3f:3e:fa:36:f2:26:f5:47:9f:e1:80:47:36:31:8e:
81:03:33:96:55:6c:bb:bc:06:72:b4:e6:d5:a9:f6:ce:53:3a:
1f:0b:1a:84:c0:46:08:db:e5:b2:15:03:d3:88:2b:b0:69:ba:
0a:ca:58:db:39:f5:bc:68:66:7a:35:1d:de:63:c1:d8:e3:34:
dc:60:f7:3d:ac:56:95:1f:b6:aa:73:4a:d8:cc:6e:3c:9d:ca:
4a:10:e6:e1:83:d5:e6:ce:00:19:81:49:e5:7b:61:f1:08:75:
5b:e7:38:ba:09:8e:89:0f:dd:5d:8c:02:42:1f:18:cd:e8:4c:
2a:d9:4f:e7:15:39:ac:e0:2a:7d:da:63:dc:52:af:5b:f7:3f:
ae:06:0f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:42:14 2026 by rpki-client