Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
File: dy-5SkWdO3XOi_uPErTPcZgsY0M.mft (raw, json)
Hash identifier: qHSEFWGPm+8zTZQGqJtB2SUbBZhetfWLTtT83IwqAW4=
Subject key identifier: 31:3B:98:6E:48:A5:D1:43:05:05:2A:EF:16:41:17:9A:5F:17:5A:46
Authority key identifier: 77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43
Certificate issuer: /CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
Certificate serial: 019D2470C885B60BA333426643E8BC86A3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
Manifest number: 040B
Signing time: Wed 25 Mar 2026 10:01:04 +0000
Manifest this update: Wed 25 Mar 2026 10:01:04 +0000
Manifest next update: Thu 26 Mar 2026 10:01:04 +0000
Files and hashes: 1: dy-5SkWdO3XOi_uPErTPcZgsY0M.crl (hash: ukCc3c5+ZW13Tc5U+KKpMOQ0TJzNw10krz/6C563vaM=)
2: xPQUYz25Kw5OqjEMvXe5mrzD17U.asa (hash: yVaACJvXdwB+QYqWE/blK7XRzmJJaal8sDFXluTDI0c=)
3: yZwwxHdq2mwMvEKhuZrOFRDdPXg.roa (hash: 0MUPEijqaOiMb0pbzOVVpFzyA1GqgLhChQvRIq7H260=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:70:c8:85:b6:0b:a3:33:42:66:43:e8:bc:86:a3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
Validity
Not Before: Mar 25 10:01:04 2026 GMT
Not After : Mar 26 10:01:04 2026 GMT
Subject: CN=313b986e48a5d14305052aef1641179a5f175a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f7:36:81:9a:24:ee:0d:fd:6f:49:ea:ff:23:
0e:ac:1e:ba:8d:f2:9f:4f:10:a1:01:29:b5:47:9d:
70:a9:55:bc:ef:58:5a:70:fe:0b:d7:be:c8:1f:23:
6d:bb:7a:57:9f:f0:6e:ef:8a:bb:74:67:3e:27:94:
45:fc:da:ba:5c:0b:33:fa:e9:bc:75:0b:49:1e:67:
77:f4:73:b6:29:8a:39:2c:65:30:12:5d:2e:07:90:
d5:a7:9e:ca:27:81:d7:6d:24:30:18:e9:64:c8:3e:
66:d8:3a:c8:05:94:d0:30:65:19:d6:38:90:58:2e:
c1:1e:41:cb:36:89:20:c3:d0:6e:33:52:2b:29:75:
37:66:b5:ed:cf:50:af:2a:f9:a5:ab:9c:1e:8c:c8:
e8:02:d3:87:d0:b9:e1:be:70:28:7b:46:a2:bc:44:
ce:bf:a5:e9:00:c4:3c:2b:cd:b6:f2:b3:3d:cd:f5:
6a:1d:5f:22:94:84:cd:50:24:7a:13:26:b7:bc:89:
a8:e9:ca:4a:0d:8f:d3:fa:30:f9:28:56:a3:ee:a2:
ac:74:bd:3f:8e:37:e0:ba:8c:9c:bc:76:d7:5b:a7:
0b:ce:a5:5c:e1:c9:00:e3:ca:1f:93:fd:b2:4f:68:
0a:b2:a3:75:49:07:44:0c:b8:bc:75:5e:c2:86:d2:
d0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3B:98:6E:48:A5:D1:43:05:05:2A:EF:16:41:17:9A:5F:17:5A:46
X509v3 Authority Key Identifier:
keyid:77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2d:a2:25:3b:46:19:f3:02:a1:1b:77:9e:b9:87:e8:c4:2c:
16:b6:66:7b:3a:b3:5e:11:99:0e:b4:65:84:2e:7d:6e:30:46:
31:5f:02:e0:a8:c4:06:7a:b4:c4:68:3f:42:bb:db:a8:32:01:
7b:8b:f2:4b:f6:c0:79:e8:78:69:9d:23:c1:ad:73:dc:e6:a6:
ba:a4:6e:11:18:f4:ff:bb:5a:48:78:8d:69:26:ef:e8:68:cc:
44:cd:1b:92:41:72:5f:4b:69:5d:37:ed:21:3c:b2:54:5e:ac:
dd:71:ee:39:f1:29:1a:e5:fb:91:59:29:d5:11:fb:4d:03:63:
1d:16:13:4a:df:c1:24:77:9a:be:c0:74:69:9f:bc:98:3b:8c:
05:57:ba:4b:f9:6c:27:20:81:57:b8:3a:fa:32:44:ba:51:f9:
a3:50:26:5a:a7:7c:15:dc:e0:cc:2e:6b:0c:a4:cd:6e:3b:e0:
eb:90:c1:d8:62:47:0f:5f:3c:7e:8e:8b:b9:b4:34:b6:32:d3:
a3:b0:35:43:1f:d4:fe:43:5e:92:9d:93:e4:a8:33:9c:17:f5:
3a:46:37:45:35:3d:9a:c4:0f:ba:ca:9c:4b:96:46:57:d2:43:
96:3e:8b:5d:d0:b8:3b:66:ce:10:f9:61:a4:22:3a:06:e6:c5:
c2:75:d3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:29:23 2026 by rpki-client