Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
File: DYGcnS5S2Ereot5MLeZLd4mFjrI.mft (raw, json)
Hash identifier: OHqBZM5VSGBlZTKxkcBlXdEMRv7TmBYREikTFtdYoOA=
Subject key identifier: 0C:20:35:E6:A7:D2:F2:AC:DF:9D:BD:7C:F9:7C:5D:52:B0:A4:B3:B1
Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
Certificate issuer: /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Certificate serial: 01A0D0EDB3D1CE9F477B25A90030158E6E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
Manifest number: 0DC9
Signing time: Thu 24 Sep 2026 01:00:33 +0000
Manifest this update: Thu 24 Sep 2026 01:00:33 +0000
Manifest next update: Fri 25 Sep 2026 01:00:33 +0000
Files and hashes: 1: 4mvw711lnQzyvs4Hvdkp66DN8WA.roa (hash: cOfCZrF6cE78BmpoYXmsaMPC6thd3G27U3oDjezLwXY=)
2: DYGcnS5S2Ereot5MLeZLd4mFjrI.crl (hash: yyqMKU+aIcTh8UvXHhzgm9UBnB+bX0Yty+8QeR5gMPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:b3:d1:ce:9f:47:7b:25:a9:00:30:15:8e:6e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Validity
Not Before: Sep 24 01:00:33 2026 GMT
Not After : Sep 25 01:00:33 2026 GMT
Subject: CN=0c2035e6a7d2f2acdf9dbd7cf97c5d52b0a4b3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d1:a5:d9:cc:4d:34:da:23:99:5c:09:54:f5:
49:4e:9a:27:8e:71:5a:73:8e:5e:0e:34:da:09:e0:
8c:b1:9c:a4:32:d1:d1:7d:92:c4:0b:37:db:41:f7:
6f:4c:1d:e0:3c:9d:2a:e1:39:cf:a8:b9:ca:61:b9:
10:bd:55:18:fb:03:03:97:09:89:ac:34:fb:25:6f:
25:26:72:e7:71:09:d8:97:b5:b1:ed:47:2f:bd:ed:
28:51:5c:c4:6f:9f:58:d5:db:e4:b4:2b:4a:55:eb:
85:cb:09:6d:5b:5f:0b:74:2f:1f:64:09:bc:80:46:
16:2a:38:e3:de:82:9f:f4:20:89:1e:59:b9:95:11:
31:f3:e2:c6:e7:53:7d:0d:de:3e:f1:db:f4:4b:bc:
0f:0c:c9:4d:13:4e:69:32:da:72:c3:75:e3:5f:ce:
56:8f:62:a4:cb:eb:7a:aa:ed:80:23:91:5b:64:2d:
50:1c:fb:0a:7f:fc:a5:a8:64:79:44:04:16:b0:07:
72:74:2b:24:77:17:62:b9:b7:5c:5c:b1:55:27:eb:
27:05:d3:27:3c:91:51:c5:fa:31:68:bd:e6:83:78:
6c:50:e2:44:6d:13:f8:53:21:95:9a:b7:3e:8b:bf:
96:4b:c7:b6:73:12:48:de:33:32:9c:61:62:5d:75:
67:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:20:35:E6:A7:D2:F2:AC:DF:9D:BD:7C:F9:7C:5D:52:B0:A4:B3:B1
X509v3 Authority Key Identifier:
keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f0:70:e9:e6:cb:b0:1a:02:3b:7a:c3:35:21:19:9e:0c:43:
30:dd:ad:2e:55:6e:75:49:0d:5d:ee:54:0d:78:f4:f2:89:b0:
dc:a5:d8:30:30:f3:53:8d:87:01:f7:6a:fc:46:b5:68:b2:33:
de:4a:08:a6:79:2d:27:fa:dd:97:ff:5d:9c:27:95:75:a1:36:
e6:97:d9:ab:0a:cd:20:60:8d:36:3f:7d:e2:59:41:1a:55:cc:
b1:a9:b3:ee:c8:00:84:ca:ae:84:6f:2e:2d:ad:9e:2d:ed:e5:
5b:14:e9:b5:a8:48:11:66:1e:6b:df:69:ac:9a:dd:16:1c:1c:
78:6e:16:ec:09:01:80:3b:bc:1e:b0:92:64:70:09:ef:e6:26:
5d:0e:3c:b0:c1:e6:f1:92:a9:81:5e:de:1a:50:ca:82:d7:18:
bf:86:83:8d:46:1f:27:11:16:21:af:a1:31:56:d2:1c:cc:53:
36:11:2f:c1:c9:40:d7:c3:c2:28:44:b5:b0:3b:8a:27:6e:9d:
ea:08:31:3b:51:7b:c2:44:19:ea:78:db:f8:f5:4f:f0:c2:36:
03:74:19:41:24:a0:ab:72:89:8a:d4:83:6e:f1:93:c4:8f:12:
1d:70:a7:c4:0a:d0:c5:ef:2d:5e:ae:4d:34:60:a8:46:35:89:
2c:ea:79:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQ7bPRzp9HeyWpADAVjm4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkODE5YzlkMmU1MmQ4NGFkZWEyZGU0YzJkZTY0Yjc3ODk4
NThlYjIwHhcNMjYwOTI0MDEwMDMzWhcNMjYwOTI1MDEwMDMzWjAzMTEwLwYDVQQD
EygwYzIwMzVlNmE3ZDJmMmFjZGY5ZGJkN2NmOTdjNWQ1MmIwYTRiM2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09Gl2cxNNNojmVwJVPVJTponjnFa
c45eDjTaCeCMsZykMtHRfZLECzfbQfdvTB3gPJ0q4TnPqLnKYbkQvVUY+wMDlwmJ
rDT7JW8lJnLncQnYl7Wx7Ucvve0oUVzEb59Y1dvktCtKVeuFywltW18LdC8fZAm8
gEYWKjjj3oKf9CCJHlm5lREx8+LG51N9Dd4+8dv0S7wPDMlNE05pMtpyw3XjX85W
j2Kky+t6qu2AI5FbZC1QHPsKf/ylqGR5RAQWsAdydCskdxdiubdcXLFVJ+snBdMn
PJFRxfoxaL3mg3hsUOJEbRP4UyGVmrc+i7+WS8e2cxJI3jMynGFiXXVn0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwgNean0vKs3529fPl8XVKwpLOxMB8GA1UdIwQY
MBaAFA2BnJ0uUthK3qLeTC3mS3eJhY6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS84NzczNDItNzM0Yy00NzFiLWIzZjkt
MDJjMzdmZWI4YTllLzEvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS84NzczNDItNzM0Yy00NzFiLWIzZjktMDJjMzdmZWI4YTll
LzEvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/Bw6ebL
sBoCO3rDNSEZngxDMN2tLlVudUkNXe5UDXj08omw3KXYMDDzU42HAfdq/Ea1aLIz
3koIpnktJ/rdl/9dnCeVdaE25pfZqwrNIGCNNj994llBGlXMsamz7sgAhMquhG8u
La2eLe3lWxTptahIEWYea99prJrdFhwceG4W7AkBgDu8HrCSZHAJ7+YmXQ48sMHm
8ZKpgV7eGlDKgtcYv4aDjUYfJxEWIa+hMVbSHMxTNhEvwclA18PCKES1sDuKJ26d
6ggxO1F7wkQZ6njb+PVP8MI2A3QZQSSgq3KJitSDbvGTxI8SHXCnxArQxe8tXq5N
NGCoRjWJLOp50A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:41:12 2026 by rpki-client