Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
File: DyKg7jvG4y2JLt3iV8u3mRefLNY.mft (raw, json)
Hash identifier: ykRqToU8ABo7HmjZxl5Gis+oZXeq1MCzz9go8IZzbAg=
Subject key identifier: F9:3C:1D:21:AF:22:96:BB:59:2F:85:0D:1F:35:F8:53:A8:A4:60:2C
Authority key identifier: 0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
Certificate issuer: /CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Certificate serial: 019D2695B901F8257CC48D573D452A94E79D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
Manifest number: 09F1
Signing time: Wed 25 Mar 2026 20:00:39 +0000
Manifest this update: Wed 25 Mar 2026 20:00:39 +0000
Manifest next update: Thu 26 Mar 2026 20:00:39 +0000
Files and hashes: 1: 6anxR7oWcscDd04QL41XaD9H2mI.roa (hash: HOaKAJ+9l8ZBJN2kLFM0Go13VYLLmXxM5vLOU8G4dHg=)
2: DyKg7jvG4y2JLt3iV8u3mRefLNY.crl (hash: PuJBSrVjzTwVhSO2LL/ORaC5e35sd7z9bDD3P3Cd5eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:b9:01:f8:25:7c:c4:8d:57:3d:45:2a:94:e7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Validity
Not Before: Mar 25 20:00:39 2026 GMT
Not After : Mar 26 20:00:39 2026 GMT
Subject: CN=f93c1d21af2296bb592f850d1f35f853a8a4602c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:45:a0:42:0b:1a:09:4a:78:de:2e:3d:4e:68:
16:ba:b4:34:6e:e3:79:02:6e:18:dc:bf:85:71:1c:
71:93:5b:a9:28:ca:93:b1:6f:40:73:28:d6:bb:b7:
2d:2d:5b:2a:f1:82:2f:3b:1a:e9:25:df:92:aa:40:
19:fe:42:23:88:60:44:e4:90:16:09:01:ea:11:f7:
5c:62:87:64:24:69:20:06:04:50:8e:ed:33:ac:33:
a8:2b:f8:1c:6c:ac:cf:b8:35:9c:ae:14:49:2d:1e:
4e:63:bf:13:75:a6:bd:b5:e2:85:ca:bb:9c:ab:75:
e9:79:af:fc:fa:cd:26:bd:09:a9:33:c6:68:f6:eb:
9d:87:21:b1:eb:1b:7a:5b:8c:35:73:e4:3f:d0:2e:
78:1d:6e:3a:46:18:2f:5e:35:18:a3:e5:6d:ac:88:
53:7d:d1:6b:17:07:7b:36:a0:bf:2e:e8:0a:b6:2e:
b6:aa:d8:a9:d0:33:e5:2f:54:37:2b:6c:96:86:8e:
e4:7e:30:95:99:20:8a:a8:20:73:3e:96:cd:86:12:
27:05:74:60:12:cd:f4:55:2e:47:b1:72:83:32:96:
22:24:45:56:2d:81:e3:6c:ea:c9:23:29:3d:0c:98:
92:87:0e:25:f2:c2:c4:4a:f6:c8:85:6a:62:22:13:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3C:1D:21:AF:22:96:BB:59:2F:85:0D:1F:35:F8:53:A8:A4:60:2C
X509v3 Authority Key Identifier:
keyid:0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:07:ac:c1:5d:9a:54:88:53:28:b1:53:ae:49:d7:bf:f9:e7:
05:c7:2a:1f:29:e1:ff:c9:d5:76:9a:c7:8d:ea:e8:c0:d8:a6:
39:ba:47:43:d1:cd:3e:2a:04:11:e1:f3:88:97:ed:09:df:7b:
f1:10:fc:13:f2:cc:7a:67:42:53:92:5f:e3:14:4a:49:1e:a2:
ef:32:4b:52:e7:18:4b:37:ac:9b:9a:22:1c:8d:1c:44:8d:68:
a5:92:40:1d:44:2d:39:da:d3:ab:28:53:44:d2:80:8f:5f:5c:
58:30:1e:13:89:b5:81:a7:72:09:64:25:d2:e4:7e:99:23:53:
b9:6f:e0:71:df:63:59:ed:19:ef:88:d6:a7:6f:85:a8:56:26:
5e:38:da:7c:05:49:fe:b8:95:5a:39:11:32:90:98:41:62:df:
7b:85:4c:29:51:f3:d2:ee:0e:d1:e0:58:bb:f9:3e:9f:52:74:
30:9a:72:a7:39:55:39:22:7c:aa:f3:ad:dd:92:e4:f4:90:4c:
eb:55:83:ec:d7:cc:90:82:48:31:d9:12:c2:17:76:a4:9c:7b:
30:bf:b8:30:6a:52:cc:2e:fd:9d:59:bc:10:96:2a:d2:63:c7:
44:ea:6b:24:64:5e:fa:3b:74:3a:b4:46:55:67:01:f9:b6:c5:
72:6b:f8:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlbkB+CV8xI1XPUUqlOedMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMjJhMGVlM2JjNmUzMmQ4OTJlZGRlMjU3Y2JiNzk5MTc5
ZjJjZDYwHhcNMjYwMzI1MjAwMDM5WhcNMjYwMzI2MjAwMDM5WjAzMTEwLwYDVQQD
EyhmOTNjMWQyMWFmMjI5NmJiNTkyZjg1MGQxZjM1Zjg1M2E4YTQ2MDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kWgQgsaCUp43i49TmgWurQ0buN5
Am4Y3L+FcRxxk1upKMqTsW9AcyjWu7ctLVsq8YIvOxrpJd+SqkAZ/kIjiGBE5JAW
CQHqEfdcYodkJGkgBgRQju0zrDOoK/gcbKzPuDWcrhRJLR5OY78Tdaa9teKFyruc
q3Xpea/8+s0mvQmpM8Zo9uudhyGx6xt6W4w1c+Q/0C54HW46RhgvXjUYo+VtrIhT
fdFrFwd7NqC/LugKti62qtip0DPlL1Q3K2yWho7kfjCVmSCKqCBzPpbNhhInBXRg
Es30VS5HsXKDMpYiJEVWLYHjbOrJIyk9DJiShw4l8sLESvbIhWpiIhORxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPk8HSGvIpa7WS+FDR81+FOopGAsMB8GA1UdIwQY
MBaAFA8ioO47xuMtiS7d4lfLt5kXnyzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHlLZzdqdkc0eTJKTHQzaVY4dTNtUmVmTE5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zMDg0ZGUtYjE1OS00ZTU0LTllZDct
NDJkNjc4NDA5NDRkLzEvRHlLZzdqdkc0eTJKTHQzaVY4dTNtUmVmTE5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8zMDg0ZGUtYjE1OS00ZTU0LTllZDctNDJkNjc4NDA5NDRk
LzEvRHlLZzdqdkc0eTJKTHQzaVY4dTNtUmVmTE5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQeswV2a
VIhTKLFTrknXv/nnBccqHynh/8nVdprHjerowNimObpHQ9HNPioEEeHziJftCd97
8RD8E/LMemdCU5Jf4xRKSR6i7zJLUucYSzesm5oiHI0cRI1opZJAHUQtOdrTqyhT
RNKAj19cWDAeE4m1gadyCWQl0uR+mSNTuW/gcd9jWe0Z74jWp2+FqFYmXjjafAVJ
/riVWjkRMpCYQWLfe4VMKVHz0u4O0eBYu/k+n1J0MJpypzlVOSJ8qvOt3ZLk9JBM
61WD7NfMkIJIMdkSwhd2pJx7ML+4MGpSzC79nVm8EJYq0mPHROprJGRe+jt0OrRG
VWcB+bbFcmv4ew==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:58 2026 by rpki-client