Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: ke/VMPAtxlXAq985R8lkQXZ0VYMO9Ym4LEjKrYA9JwU=
Subject key identifier: FF:D3:71:42:3C:64:7E:A6:25:93:7D:A0:BD:21:0A:62:02:75:8B:2D
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 019D29CE562683F3BA54C34D95DFA6B9D9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 0906
Signing time: Thu 26 Mar 2026 11:01:21 +0000
Manifest this update: Thu 26 Mar 2026 11:01:21 +0000
Manifest next update: Fri 27 Mar 2026 11:01:21 +0000
Files and hashes: 1: AMaU2fzpygF41S188jpF5PCtFow.roa (hash: AWYDQzHyjmYoYUtXrgToOGpkyPi31WYjmrREJ5IO1nU=)
2: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: p3o3T7roXplMiF+LTI1DKlgm2BT7yr2PlZrCkY03HFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:56:26:83:f3:ba:54:c3:4d:95:df:a6:b9:d9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: Mar 26 11:01:21 2026 GMT
Not After : Mar 27 11:01:21 2026 GMT
Subject: CN=ffd371423c647ea625937da0bd210a6202758b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ec:64:ce:28:ab:2d:c1:db:a7:33:82:05:a1:
4d:5c:47:2f:c4:9f:24:0c:65:9e:8e:8e:2f:a4:e0:
d4:26:6f:62:42:e9:06:58:08:4f:94:ae:8c:f6:6d:
f0:21:11:a5:4c:68:22:40:eb:95:1c:19:b0:16:2a:
ef:1a:fa:41:fc:d7:f8:d0:3c:c2:b4:25:f1:d7:4c:
4e:de:30:01:cc:7b:7f:94:4e:30:11:9f:96:87:65:
cf:57:66:89:2c:8c:15:a4:86:0c:d7:9e:ec:a9:5c:
25:71:a3:70:d9:d2:d5:d5:90:54:e9:00:d1:04:bf:
06:17:11:5f:bc:72:a2:f2:04:8d:bf:95:f5:c7:a2:
67:81:9d:0c:15:cb:cd:04:2a:99:0d:14:78:9f:6b:
12:08:31:35:9f:b4:be:79:88:a2:4d:33:a9:70:c9:
45:85:49:e0:1a:ff:d8:10:fa:91:c1:75:e1:2a:36:
ae:25:10:0d:fe:7d:22:5f:01:69:73:89:35:4d:af:
c1:24:4b:1b:98:34:5e:a1:13:fe:21:77:1e:f1:2c:
b1:f1:3a:26:f0:04:41:66:d0:4e:48:77:08:00:42:
5f:fb:39:c8:68:58:22:62:bd:52:98:13:32:86:04:
0e:c7:2b:18:d3:3c:3b:89:32:ad:8b:91:3e:a6:8b:
2b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D3:71:42:3C:64:7E:A6:25:93:7D:A0:BD:21:0A:62:02:75:8B:2D
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:da:67:24:64:1d:12:ea:cd:2f:0a:9d:53:38:13:5e:4a:1a:
60:64:e9:0d:75:ae:05:5e:40:6d:ec:4c:de:49:a0:48:23:64:
57:92:c9:b1:87:35:c5:09:93:6f:65:45:78:7b:e2:a0:7d:91:
1f:74:8d:0b:4a:ba:f3:b6:f2:31:43:18:9d:a5:97:3c:33:b5:
06:b1:10:34:4e:47:c0:7e:cb:fb:e0:99:8e:56:c0:0f:83:2b:
6e:7b:91:77:18:21:39:fc:0a:ec:6a:f7:46:c3:72:d2:ad:d0:
bf:ed:bf:94:67:d1:35:26:c8:e7:f1:ca:ee:8c:60:b0:ee:68:
6d:1f:9f:6f:3e:7f:ef:e9:80:c3:ba:a5:89:6e:90:09:10:3b:
99:0f:60:4e:bf:78:e9:06:82:af:75:21:86:7c:f2:59:00:5b:
dd:c2:d1:dc:ef:d7:e4:30:7c:17:b0:4b:8a:c5:a4:41:e6:52:
33:62:b7:67:db:7d:49:21:a6:13:0a:2c:af:9a:01:a9:f0:c1:
10:21:89:92:11:3f:09:3b:cd:65:e1:f2:2c:f9:1d:9a:fe:ab:
8a:e6:e7:a6:f1:05:86:99:2c:e7:6b:2b:46:76:ec:a8:36:af:
fc:7c:86:69:5d:e6:db:7b:46:3a:ae:17:5d:58:1a:29:b0:b4:
8f:53:5f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:35 2026 by rpki-client