Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File: DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier: VCwmyuto2R8wzUsE59FgMsPhtVvn1criWgmy6IupTWQ=
Subject key identifier: 51:CA:AA:E6:B6:0F:64:EB:E0:BD:9E:AC:7F:C3:8D:7F:AC:64:91:39
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer: /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial: 019D25BA0EECA6273E81A5DC8C3AA8EB9CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number: 105F
Signing time: Wed 25 Mar 2026 16:00:43 +0000
Manifest this update: Wed 25 Mar 2026 16:00:43 +0000
Manifest next update: Thu 26 Mar 2026 16:00:43 +0000
Files and hashes: 1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: AcIHx8azaCZhJ9IYPcgTa4nrWbG0coeSCK4cJKoUzoU=)
2: EAp4uNAc6f0HymDOmRK8myDrjdo.roa (hash: pmfGtVbkHJrjhdQXgKEkAIluH1FlB2AL+HRSoa36574=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:0e:ec:a6:27:3e:81:a5:dc:8c:3a:a8:eb:9c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Validity
Not Before: Mar 25 16:00:43 2026 GMT
Not After : Mar 26 16:00:43 2026 GMT
Subject: CN=51caaae6b60f64ebe0bd9eac7fc38d7fac649139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f2:20:07:ba:c1:77:55:58:19:9e:d6:c3:ef:
32:53:f9:0c:ee:a5:c7:8a:37:76:2e:68:00:98:20:
c1:da:fb:b0:26:e9:81:d7:5d:6f:3a:a4:da:7b:8a:
8d:ac:4e:4a:d1:54:ef:69:1b:79:69:20:21:b0:bf:
8e:48:e3:95:16:12:12:99:b1:84:c4:64:d2:bf:33:
7c:01:da:22:0d:e2:f4:64:2e:58:94:b3:78:b2:19:
c3:5e:60:a3:b6:70:44:14:be:c3:b0:1f:b6:9d:51:
e7:a4:8d:2a:b2:7c:07:e2:f1:d7:fd:73:c6:56:42:
47:4e:2f:1b:2b:d8:e8:c6:5c:c4:71:18:3b:3c:d9:
fa:ce:af:74:a1:89:22:35:b1:c0:ae:50:6b:72:38:
f6:e4:63:ad:1c:52:a0:a1:0d:ee:89:73:6a:87:83:
fe:b7:88:64:a6:dd:bb:ae:47:b3:3f:a0:1f:2c:49:
51:d0:a9:3a:bc:19:51:c3:61:17:5a:9b:c1:6a:e1:
4d:0d:17:ac:62:78:97:5e:94:ff:fc:72:5e:3e:ee:
39:1f:9f:17:85:4f:e5:82:d8:fa:7c:a0:0e:3c:75:
42:b1:ed:8d:dd:00:9e:77:65:4b:0f:87:2c:08:8e:
76:04:ef:86:85:6a:e8:09:da:da:2f:2e:f1:a0:b3:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CA:AA:E6:B6:0F:64:EB:E0:BD:9E:AC:7F:C3:8D:7F:AC:64:91:39
X509v3 Authority Key Identifier:
keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:00:78:c6:74:e5:30:d1:53:91:d1:94:ab:47:e4:68:b9:9d:
29:ee:ab:82:b9:7a:52:1a:94:bb:94:4a:e7:ff:c1:84:57:59:
ad:6b:cc:03:a9:a5:a7:0f:be:e2:bc:12:82:84:61:4c:f0:62:
8b:84:23:41:bc:f5:66:fc:91:6e:8b:d6:ed:40:2b:30:78:41:
3e:ec:b2:64:a9:4c:c1:f4:ff:c8:df:59:2a:4c:ac:33:f4:fa:
d4:e2:4d:a4:c8:94:3d:be:7c:3a:ad:c8:b7:22:9c:a5:99:00:
15:e5:80:3b:35:71:11:15:11:e2:fb:40:e7:99:3d:26:04:0f:
19:94:0f:f2:96:5d:1b:93:59:eb:b8:0d:0b:27:bc:8c:04:c2:
ea:f7:d2:ad:cf:63:a1:1d:9d:55:44:58:7b:6e:7c:33:98:2a:
c4:0d:a7:59:d6:f8:b5:2f:b7:61:15:c3:56:0c:63:86:1a:f4:
fd:06:0b:c7:a4:fd:36:45:f7:b0:1b:3b:8f:8b:3a:94:e4:78:
29:a5:d3:36:a7:19:25:e1:66:f3:31:90:0f:49:44:40:19:be:
4e:93:21:9b:b6:a2:cc:7f:57:85:6a:87:07:ed:d1:5f:86:f0:
5a:f4:91:25:57:dc:a5:0b:bc:30:28:1a:d6:59:b0:ec:77:5d:
46:5e:a7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:40 2026 by rpki-client