Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
File: dygVWFa4zk2F-NpPbTWwVbMNvTw.mft (raw, json)
Hash identifier: 6WI6dmJeqOUnUNz8/Dp21MKnL20vEjtbhZxJErxUHEo=
Subject key identifier: 72:85:8F:55:F5:DA:5E:6B:5C:68:DD:85:FF:56:83:C8:8C:A6:75:6B
Authority key identifier: 77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C
Certificate issuer: /CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c
Certificate serial: 019D273A8214825FDD30AE486BC2C3CC2954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
Manifest number: 0131
Signing time: Wed 25 Mar 2026 23:00:38 +0000
Manifest this update: Wed 25 Mar 2026 23:00:38 +0000
Manifest next update: Thu 26 Mar 2026 23:00:38 +0000
Files and hashes: 1: IUXK5owGJRJBQqIOmgn7bKscCRQ.roa (hash: 3cmce/T6z+IA9rzyeoaTbVrr0D6UCYaIjKkeAxLWn1c=)
2: dygVWFa4zk2F-NpPbTWwVbMNvTw.crl (hash: py3mT8ltyIJExl31/MpSMInkQvk0e/3qhShWP1U9AN8=)
3: ymLzZ-VhmhqNEGONzE9KW-m04rM.roa (hash: RinsNGJ2DGv43ndnKRTv8Ja4sLQDd8GhBHpIm7eFfCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:82:14:82:5f:dd:30:ae:48:6b:c2:c3:cc:29:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c
Validity
Not Before: Mar 25 23:00:38 2026 GMT
Not After : Mar 26 23:00:38 2026 GMT
Subject: CN=72858f55f5da5e6b5c68dd85ff5683c88ca6756b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:c8:61:5f:28:d3:e4:b3:1f:8b:85:91:6f:
fc:7a:e9:6c:75:f2:0a:7c:7d:8c:71:aa:84:a1:3c:
82:5d:24:86:dd:5f:1a:44:8f:6f:74:4c:bd:a9:ed:
52:6c:7f:cf:b5:8d:52:f4:7a:72:f9:1c:ff:86:1f:
98:2f:5b:a7:60:ea:32:f8:80:61:35:dd:d2:d8:e5:
63:f1:10:8d:82:e2:5c:73:2b:c6:ac:fd:5e:05:5a:
94:c3:e5:20:fe:b9:03:24:87:18:76:12:54:8b:64:
85:d2:f1:13:df:d9:69:2b:44:fa:cb:01:3e:16:d6:
56:be:7d:de:b8:24:9d:ad:3c:70:a1:bf:5d:11:52:
f3:3e:67:f6:7a:36:d1:c1:30:90:c3:2c:03:79:81:
ce:a9:a3:41:e8:d3:3b:90:4c:18:6d:72:c5:33:cd:
e5:8f:43:aa:69:f8:00:1a:24:62:a6:1a:dc:8a:de:
26:cd:0a:cd:1d:ac:61:af:8c:fd:27:9d:32:19:48:
af:5b:dc:11:b2:69:34:ad:65:14:57:3c:72:99:33:
b6:6b:6d:6f:14:9f:16:63:2e:e8:72:15:db:9e:35:
8d:83:ec:1d:18:2a:f5:92:31:a2:ea:73:e0:9f:a9:
b6:73:d4:7f:3f:49:b4:c1:52:00:49:29:82:44:73:
9c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:85:8F:55:F5:DA:5E:6B:5C:68:DD:85:FF:56:83:C8:8C:A6:75:6B
X509v3 Authority Key Identifier:
keyid:77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:82:ce:0e:7b:55:ab:4d:4c:2f:5f:1c:19:08:85:b4:d5:82:
65:32:42:99:1c:d7:55:e3:79:0f:a9:64:32:e4:f8:72:e1:71:
d5:d0:86:9d:46:42:96:cb:4d:4f:2a:d5:ac:23:1a:e3:72:74:
c3:d0:b8:1a:59:cd:1f:98:17:7f:34:7a:49:fe:36:24:42:5e:
2a:a4:3e:71:f8:d0:0c:cb:20:01:29:1f:13:a1:ee:fb:f9:48:
bb:02:72:1d:27:83:89:6e:87:25:7d:f1:2a:d0:ab:cd:48:34:
1b:ea:a7:43:35:b8:97:69:db:ec:d1:c3:6c:7a:0a:78:38:3a:
0a:df:d4:2b:d2:04:bf:a6:1f:2f:b2:b6:01:3f:6f:d1:99:38:
8a:a3:e7:2d:ba:fe:4b:d9:39:9d:56:67:9d:ea:51:7c:d4:d8:
9f:f8:e3:b3:48:db:70:8d:7c:63:7d:91:f8:66:35:f5:95:f1:
9e:be:48:9a:0b:6e:56:12:fa:38:43:a5:42:79:9f:9c:35:95:
1f:13:4c:1d:82:b4:60:b0:7f:8c:04:55:ce:84:f1:41:5f:78:
8e:32:53:c6:c3:c1:85:9a:d2:45:ec:5f:3e:62:ae:f4:50:b4:
ad:3a:f1:9e:ef:58:03:1e:8c:98:ca:9e:29:e1:d2:76:8a:c4:
7e:8e:33:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:18 2026 by rpki-client