Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: +iRyiKCSu2eKtDRpj2qrzd1/yHfVrafhTjwxtzzeT6U=
Subject key identifier: 86:95:F5:D4:72:A4:1B:F8:A1:6E:DF:F3:20:8A:11:80:27:12:63:CA
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 019E1D2291955D6AC51CF413046108F37018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 0984
Signing time: Tue 12 May 2026 17:01:05 +0000
Manifest this update: Tue 12 May 2026 17:01:05 +0000
Manifest next update: Wed 13 May 2026 17:01:05 +0000
Files and hashes: 1: AMaU2fzpygF41S188jpF5PCtFow.roa (hash: AWYDQzHyjmYoYUtXrgToOGpkyPi31WYjmrREJ5IO1nU=)
2: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: hNN7EH0Mn/AfI4wL0cpF4hQPDYaBa/ouD8uKCUW+2fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:91:95:5d:6a:c5:1c:f4:13:04:61:08:f3:70:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: May 12 17:01:05 2026 GMT
Not After : May 13 17:01:05 2026 GMT
Subject: CN=8695f5d472a41bf8a16edff3208a1180271263ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:97:75:80:ef:24:ca:6b:dc:0b:10:56:20:
51:6a:3c:a2:96:ca:16:9e:18:96:d7:b3:de:c0:db:
27:fa:11:29:fb:99:03:86:79:53:a0:05:fb:3a:df:
95:ff:a6:9e:2a:fb:eb:11:4e:de:2e:47:8a:14:a8:
c8:d5:53:1c:4f:ab:c1:9f:b5:04:a5:2b:9c:56:a6:
78:3e:79:9b:8e:55:3f:92:88:f4:a8:9e:88:3a:77:
aa:ac:fc:f0:0c:55:14:95:15:c1:e5:3e:4f:2a:e3:
dd:26:ab:7e:04:c2:5e:40:23:f7:66:05:ad:08:3c:
97:8c:6f:83:1c:ae:c0:bd:7f:85:fb:7e:34:de:f8:
3e:35:59:65:a0:c1:bc:0e:02:62:c2:55:59:3c:e7:
89:1e:d1:db:47:07:89:ba:88:3f:9f:7d:fa:df:7f:
9c:c0:6a:42:ee:cf:51:3c:8c:15:ec:df:d6:ff:da:
0f:97:3e:b0:d6:de:51:7d:ba:19:f0:b0:70:b1:fd:
de:45:03:40:ff:92:6f:94:ef:b3:eb:4d:2e:95:b9:
64:2b:7f:ab:f9:e0:ef:ed:5c:8d:d4:82:75:29:d9:
66:aa:64:cc:4f:7f:53:c9:df:bf:59:ae:ce:51:da:
af:cb:7d:c4:da:d3:01:df:3c:43:7f:69:58:e7:66:
e7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:95:F5:D4:72:A4:1B:F8:A1:6E:DF:F3:20:8A:11:80:27:12:63:CA
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e8:42:14:8c:43:a0:ea:fa:20:2a:0b:b8:de:32:51:78:c7:
d5:33:26:ca:25:01:4b:25:55:59:3b:00:2c:9a:fd:5e:cc:d4:
70:03:b9:60:6b:cf:a3:10:72:e6:ac:db:b2:22:6a:36:5f:dd:
81:c8:8b:37:e3:e2:24:2d:45:6c:35:a5:7a:d0:58:bb:9c:60:
4b:fb:b5:53:20:31:11:be:3b:11:a2:09:62:6b:37:77:a1:3e:
1d:7e:13:70:7f:9c:cf:e9:a3:c1:0b:02:c4:ec:1e:c9:a9:74:
6f:d9:4c:40:b5:0e:c2:f0:2a:8a:f8:63:3e:cc:d8:78:55:26:
17:b6:f5:e5:f7:11:f8:8d:29:40:1d:2b:c0:2a:d6:81:4d:45:
fc:ce:53:ec:04:57:e1:5e:c7:60:02:5a:7a:b0:6e:62:41:73:
ab:1f:38:33:4b:b9:4b:7c:fd:51:8c:f9:68:76:b0:bf:0a:dc:
5a:d3:6f:7a:56:fc:5d:c9:4f:cb:9f:7b:d0:2c:8f:9f:25:c0:
22:81:14:62:89:ff:e2:f3:1b:24:85:6b:f5:51:f5:05:0c:e4:
7e:0b:85:ee:96:89:3b:68:c8:8b:67:ac:f2:28:d6:5f:77:5a:
57:f0:16:98:c5:d7:63:06:c0:c7:ce:52:2d:02:78:09:49:4c:
5f:a1:12:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:16 2026 by rpki-client