Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File: DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier: oX+YAjLPFNhRtkLZbVKHbPRYl+rzVuMFdPCq8FsYols=
Subject key identifier: F2:EF:3B:8F:16:59:BC:4B:8D:B3:89:CD:9F:1B:41:9D:7A:4E:16:8C
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer: /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial: 01A0D9F1B850E9960937328B476228E684CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number: 124A
Signing time: Fri 25 Sep 2026 19:01:32 +0000
Manifest this update: Fri 25 Sep 2026 19:01:32 +0000
Manifest next update: Sat 26 Sep 2026 19:01:32 +0000
Files and hashes: 1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: MTjIsY7mYToSEFYeyrEtHtV5m8p7VAwX28K5CmyIJ0M=)
2: EAp4uNAc6f0HymDOmRK8myDrjdo.roa (hash: pmfGtVbkHJrjhdQXgKEkAIluH1FlB2AL+HRSoa36574=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:b8:50:e9:96:09:37:32:8b:47:62:28:e6:84:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Validity
Not Before: Sep 25 19:01:32 2026 GMT
Not After : Sep 26 19:01:32 2026 GMT
Subject: CN=f2ef3b8f1659bc4b8db389cd9f1b419d7a4e168c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ba:18:de:e9:b0:a2:02:30:53:3b:23:72:bf:
4f:f0:81:0f:05:95:bf:1f:83:f5:98:2c:93:10:1a:
66:6a:9a:17:90:4a:c9:25:93:2e:2d:6d:fc:cf:e2:
3e:e0:df:49:27:03:e7:33:25:d3:e7:54:6d:55:eb:
98:eb:1e:b6:f6:97:65:30:2f:b4:6c:74:f4:04:b2:
0b:77:6d:e6:37:51:f2:7a:15:30:62:79:8d:f7:f1:
ec:ed:ec:c3:87:58:8e:db:c2:27:eb:05:60:b6:4f:
ec:83:68:fa:34:3f:79:f4:04:67:01:01:d8:73:3e:
85:89:f5:7a:54:8b:2a:5a:e0:c1:64:5f:27:ae:53:
fc:b1:f6:ba:1a:fc:bf:53:3e:5a:0f:4d:b9:97:25:
38:b3:d3:ab:af:2b:25:c3:00:2a:08:38:93:0f:93:
74:33:a4:5c:9a:0c:48:a0:fe:26:e0:6b:75:e4:ab:
9e:f1:54:05:56:41:8a:6e:51:08:f1:f6:a6:8e:16:
e1:14:39:c1:3e:09:03:86:43:67:96:7f:86:55:a1:
8f:2c:ca:96:82:71:03:cd:74:78:38:30:c0:20:93:
8a:b1:89:c3:65:dd:9d:ec:18:fe:94:d7:ad:a8:57:
59:c1:0c:8e:d7:94:4c:8d:e1:05:73:79:7f:bd:e7:
ea:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EF:3B:8F:16:59:BC:4B:8D:B3:89:CD:9F:1B:41:9D:7A:4E:16:8C
X509v3 Authority Key Identifier:
keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:38:1b:54:cd:18:2e:d4:27:be:10:f0:a5:0a:af:59:b1:1c:
37:8c:96:99:df:12:93:f7:31:60:77:07:3b:52:b5:87:b7:d3:
e7:d7:0f:6a:cb:96:7a:d6:3a:e6:43:c6:d0:8b:26:38:f3:c0:
48:f6:b9:01:82:d7:7c:60:0b:28:01:71:16:59:b9:7d:04:18:
fb:45:39:47:81:c4:f7:89:dd:b8:42:2a:6e:c5:2f:73:10:98:
49:8b:92:83:20:0e:4d:98:46:36:58:b6:3b:d1:89:07:93:f6:
1a:eb:14:39:a3:ee:a7:9d:e6:01:a6:fe:fc:f2:83:9e:99:cc:
f1:e1:07:de:c7:50:0b:21:a1:76:0f:1e:fd:37:08:5c:ad:7e:
ce:d9:22:0f:61:f9:92:dd:08:bd:65:98:36:82:2a:99:d3:83:
0a:01:1a:b1:0b:3f:e0:7f:1b:c1:9e:92:ff:01:ea:2f:d5:68:
29:43:3c:a5:ec:1f:b5:cb:53:45:1c:74:72:05:60:5e:e8:48:
9a:ad:0d:ea:28:00:d8:a5:2e:72:d3:23:f3:1a:72:57:36:c4:
aa:51:db:08:8c:4a:4d:15:5d:21:73:65:73:c5:38:82:3a:b3:
50:29:bf:52:9d:83:66:90:40:7d:a3:fd:10:16:dd:f4:02:c0:
71:65:fb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:19:40 2026 by rpki-client