Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File: DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier: een2jaAko1he1SzHtUC/lasQmftHKsG4PyHSGkOLvDw=
Subject key identifier: D4:D7:4D:20:3D:9E:07:1D:4D:D4:10:CD:32:D9:81:76:B2:B3:7F:6D
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer: /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial: 019F9391835600038CC1E6165C07A5DDF33B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number: 11A1
Signing time: Fri 24 Jul 2026 10:00:14 +0000
Manifest this update: Fri 24 Jul 2026 10:00:14 +0000
Manifest next update: Sat 25 Jul 2026 10:00:14 +0000
Files and hashes: 1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: QkiRsJydZEz8GS4IN260eTHIGk5ThNSPMW6LKzIEOP8=)
2: EAp4uNAc6f0HymDOmRK8myDrjdo.roa (hash: pmfGtVbkHJrjhdQXgKEkAIluH1FlB2AL+HRSoa36574=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:83:56:00:03:8c:c1:e6:16:5c:07:a5:dd:f3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Validity
Not Before: Jul 24 10:00:14 2026 GMT
Not After : Jul 25 10:00:14 2026 GMT
Subject: CN=d4d74d203d9e071d4dd410cd32d98176b2b37f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:58:47:8e:ea:bb:e6:cf:c6:71:17:68:8f:5b:
d6:43:39:38:fb:d4:26:50:a1:34:32:29:bb:1a:6d:
83:55:d5:cc:02:13:b3:e9:ee:a3:04:6e:52:77:35:
cc:83:1a:ac:9d:ae:a3:6a:13:ae:9e:a9:fd:cb:4b:
d3:90:fb:6a:a2:a2:78:66:ba:04:52:e9:38:48:77:
1c:71:ba:cd:9b:d0:8e:03:fb:b4:f3:bb:dc:ed:7d:
08:ee:cf:68:e2:50:bc:48:a6:5d:1c:b5:5e:6f:75:
d9:33:4f:94:69:81:15:32:87:da:3a:de:09:99:15:
e4:8b:be:99:3d:bd:40:6a:03:36:a5:34:d3:eb:1e:
79:35:22:50:a6:1a:39:97:d0:65:cd:d8:a0:4f:13:
5d:dd:19:82:3f:c6:ae:27:d2:1b:ba:4d:9e:24:1d:
3c:37:31:e9:b6:9e:3c:69:72:be:9e:03:3e:f3:19:
11:14:d7:05:c8:65:6f:24:6b:9a:9d:2b:3a:f8:fe:
b2:86:6f:16:84:86:cc:bf:c5:ad:57:52:19:a4:0d:
1a:54:45:a5:42:11:30:47:e8:a3:93:c6:38:2a:54:
e1:5a:36:1e:99:5a:cc:8f:43:fa:70:2a:4b:a0:5d:
2f:03:b3:8f:a7:af:db:50:6a:ca:7c:fc:42:68:81:
a8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D7:4D:20:3D:9E:07:1D:4D:D4:10:CD:32:D9:81:76:B2:B3:7F:6D
X509v3 Authority Key Identifier:
keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:42:da:09:b5:5f:3d:73:f1:f1:aa:c3:2b:9d:89:41:a8:d4:
f8:95:e3:6a:47:f9:92:c3:23:f5:49:16:64:7d:dc:1e:b8:18:
50:f3:66:a7:9d:ce:20:87:d6:a2:b6:0c:73:42:e0:83:6c:1a:
15:05:da:e5:90:3c:aa:2f:31:b9:0a:74:25:34:88:bb:b5:1d:
26:73:55:fe:e7:43:b4:a8:63:49:30:52:01:79:6c:d9:88:cd:
b1:33:00:a1:33:3d:ec:77:6a:19:da:07:54:a8:65:7f:1b:af:
c4:e7:00:b1:75:f6:cd:30:12:6a:49:16:38:e5:21:3d:f7:f3:
52:b0:dc:a7:c3:cd:60:77:8e:81:17:e4:27:10:08:2d:f8:93:
91:88:59:d2:ab:ce:d8:a7:df:f0:f9:c9:cf:c7:11:d1:14:83:
a0:a5:84:4c:12:fa:9c:4d:4f:3c:ee:b8:2c:ce:50:a5:75:ae:
a3:41:eb:dd:36:6a:91:38:c3:85:73:b4:ea:a5:2c:e9:53:0c:
78:83:de:f5:26:76:1b:86:28:e7:48:d6:64:d4:a9:58:de:ad:
61:b7:b8:9f:89:81:04:7c:81:ab:06:1d:df:9b:f7:a4:c8:41:
3b:a0:d9:df:ce:b0:9b:9e:82:63:30:68:c5:9c:c3:77:d7:c0:
63:88:d0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:13 2026 by rpki-client