Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
File: dygFKufRD9ImGiJI_ADSArDyVXQ.mft (raw, json)
Hash identifier: KZU88r8yjKFwkBH0HmVtANi7sCeG3t87IqVvkgIokAU=
Subject key identifier: 2E:4D:AA:B2:B3:6C:D6:C2:43:E7:CC:75:26:7F:52:C3:3B:76:A8:21
Authority key identifier: 77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
Certificate issuer: /CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Certificate serial: 019D273B233DDF868DD661434934153E2844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
Manifest number: 188E
Signing time: Wed 25 Mar 2026 23:01:20 +0000
Manifest this update: Wed 25 Mar 2026 23:01:20 +0000
Manifest next update: Thu 26 Mar 2026 23:01:20 +0000
Files and hashes: 1: JNkr5sJ7ip69KbDdvD4kPrMRCFE.roa (hash: lOIWQDrAFB72tPTDRq9zpid9asQhjRi1A6BVV0mLQ0A=)
2: dygFKufRD9ImGiJI_ADSArDyVXQ.crl (hash: yo0niijunr/P7VCIAWyKY9YchsMhMBsVKHC9650q6I4=)
3: sfYPhQ6RD9htbpRLWND2pNFZgk0.roa (hash: Nx5iosy0Tc5xWKlypEqy7h/HiFr5i52nJ2YrifsLjWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:23:3d:df:86:8d:d6:61:43:49:34:15:3e:28:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Validity
Not Before: Mar 25 23:01:20 2026 GMT
Not After : Mar 26 23:01:20 2026 GMT
Subject: CN=2e4daab2b36cd6c243e7cc75267f52c33b76a821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:82:1c:eb:f1:72:55:4f:3c:37:de:98:4f:1f:
43:56:74:01:22:70:86:05:bb:e7:9c:53:28:33:68:
14:0e:6b:b8:1d:f8:c4:87:42:1e:ed:fd:4b:ec:46:
bb:1a:94:1d:37:85:9e:3f:48:51:66:1d:e7:b8:16:
99:2c:7c:c3:ee:fc:f9:d4:50:db:23:e3:51:4e:db:
6a:30:12:96:5c:14:cf:24:ae:43:6c:d8:8a:7b:77:
e7:89:c8:4d:a0:ec:94:fa:a2:86:3e:95:7b:4b:ed:
ac:0a:6f:ff:2f:31:3f:0d:5d:2f:52:9b:73:be:27:
a9:4e:64:1e:a0:3e:93:5c:01:18:34:ad:56:42:33:
2f:6e:83:ff:fc:87:8d:ff:99:3d:28:8a:52:aa:9a:
8d:c6:28:fa:b6:af:e9:ff:b5:46:b6:5a:c2:16:a4:
74:1d:f8:aa:35:bb:3d:6c:e8:ac:35:6d:70:be:94:
1e:eb:ff:1d:f1:98:57:c4:aa:7a:c5:6d:dc:14:65:
04:9a:d5:78:6f:5c:fb:e9:9a:81:b6:dc:45:bd:ff:
9f:83:ff:c3:4a:e5:28:ed:3f:86:9e:8e:7f:c1:e4:
0e:ca:5c:b8:00:85:9b:2d:b6:22:1f:d0:84:f0:af:
a6:56:53:60:a6:b5:f1:d4:40:62:b7:49:66:0d:80:
c8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4D:AA:B2:B3:6C:D6:C2:43:E7:CC:75:26:7F:52:C3:3B:76:A8:21
X509v3 Authority Key Identifier:
keyid:77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1b:f9:f1:71:b0:5a:6d:7d:2c:a1:9f:e8:5a:c2:15:43:3a:
2a:93:54:f6:c6:a2:bf:b4:e7:94:20:01:3b:79:2a:af:83:a4:
2e:6b:aa:5b:bd:17:80:e2:63:8d:36:61:8d:fc:88:38:0c:34:
16:9a:98:ba:93:ed:02:45:0a:3a:b5:84:1f:af:16:f6:03:cf:
7e:6d:bc:34:71:6c:20:a5:dd:89:bf:9b:03:8c:85:3f:3b:3d:
79:1c:3e:82:32:d7:a1:99:32:58:98:29:0a:9f:f7:f5:0a:7b:
c1:e8:cd:5c:d4:6b:3c:e5:9e:4f:30:c6:a0:80:c2:26:79:7d:
0a:84:32:65:83:08:f7:d8:81:65:ee:07:a1:12:7e:68:ff:de:
1d:f3:19:f4:20:b0:da:51:9d:86:36:59:52:5a:d2:b9:2e:df:
10:ab:49:d1:24:fa:53:a5:d2:3b:91:89:e3:7a:0f:d3:fa:76:
9f:45:60:ce:5f:85:92:e4:d3:10:0d:8a:e3:2f:ad:fa:c6:85:
c7:c1:d6:04:be:29:47:15:a5:b7:13:26:77:d6:db:83:e8:e5:
f2:08:9f:bf:09:3f:8f:84:09:20:d6:7c:9a:bf:2a:08:6f:f9:
01:9a:09:09:32:d2:cb:cc:64:e6:91:37:73:08:03:10:c5:dc:
47:0b:b7:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOyM934aN1mFDSTQVPihEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MjgwNTJhZTdkMTBmZDIyNjFhMjI0OGZjMDBkMjAyYjBm
MjU1NzQwHhcNMjYwMzI1MjMwMTIwWhcNMjYwMzI2MjMwMTIwWjAzMTEwLwYDVQQD
EygyZTRkYWFiMmIzNmNkNmMyNDNlN2NjNzUyNjdmNTJjMzNiNzZhODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYIc6/FyVU88N96YTx9DVnQBInCG
BbvnnFMoM2gUDmu4HfjEh0Ie7f1L7Ea7GpQdN4WeP0hRZh3nuBaZLHzD7vz51FDb
I+NRTttqMBKWXBTPJK5DbNiKe3fnichNoOyU+qKGPpV7S+2sCm//LzE/DV0vUptz
viepTmQeoD6TXAEYNK1WQjMvboP//IeN/5k9KIpSqpqNxij6tq/p/7VGtlrCFqR0
HfiqNbs9bOisNW1wvpQe6/8d8ZhXxKp6xW3cFGUEmtV4b1z76ZqBttxFvf+fg//D
SuUo7T+Gno5/weQOyly4AIWbLbYiH9CE8K+mVlNgprXx1EBit0lmDYDIewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5NqrKzbNbCQ+fMdSZ/UsM7dqghMB8GA1UdIwQY
MBaAFHcoBSrn0Q/SJhoiSPwA0gKw8lV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHlnRkt1ZlJEOUltR2lKSV9BRFNBckR5VlhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS80Y2IxYjEtNzAxYi00ZTQyLThiMDUt
MmNiYzQwZTVmZTYyLzEvZHlnRkt1ZlJEOUltR2lKSV9BRFNBckR5VlhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS80Y2IxYjEtNzAxYi00ZTQyLThiMDUtMmNiYzQwZTVmZTYy
LzEvZHlnRkt1ZlJEOUltR2lKSV9BRFNBckR5VlhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhv58XGw
Wm19LKGf6FrCFUM6KpNU9saiv7TnlCABO3kqr4OkLmuqW70XgOJjjTZhjfyIOAw0
FpqYupPtAkUKOrWEH68W9gPPfm28NHFsIKXdib+bA4yFPzs9eRw+gjLXoZkyWJgp
Cp/39Qp7wejNXNRrPOWeTzDGoIDCJnl9CoQyZYMI99iBZe4HoRJ+aP/eHfMZ9CCw
2lGdhjZZUlrSuS7fEKtJ0ST6U6XSO5GJ43oP0/p2n0Vgzl+FkuTTEA2K4y+t+saF
x8HWBL4pRxWltxMmd9bbg+jl8gifvwk/j4QJINZ8mr8qCG/5AZoJCTLSy8xk5pE3
cwgDEMXcRwu3AQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:47 2026 by rpki-client