Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: ZPtpVwc72F4BKYyflO7ezOJn3v6Glu4i6WzaxgQ/VQw=
Subject key identifier: EC:B1:8D:EA:4F:18:CB:03:8F:C3:1F:AB:76:CD:D1:5A:29:3A:69:BF
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 019E1F7F2ED1F2F6C8F5BA29794075D4543D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 189D
Signing time: Wed 13 May 2026 04:01:29 +0000
Manifest this update: Wed 13 May 2026 04:01:29 +0000
Manifest next update: Thu 14 May 2026 04:01:29 +0000
Files and hashes: 1: 1xBlob06V4OZHwqAUkwFisJ8hbE.roa (hash: fUNS9n+gbfLHDdSyjCsCUEORZD+YjwBO+Q4C1PMroB0=)
2: JchC90yjmUCoGpTy_G9JV_hpnDA.roa (hash: y6rgHhMgSwSF+hb/ru1il5IUm+2sXbyrH9l61ZHVZEc=)
3: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: Yetv6+ZYz4ClRKlBiSwsw3lUAR5Eo6wQBzmYApjLoRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:2e:d1:f2:f6:c8:f5:ba:29:79:40:75:d4:54:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: May 13 04:01:29 2026 GMT
Not After : May 14 04:01:29 2026 GMT
Subject: CN=ecb18dea4f18cb038fc31fab76cdd15a293a69bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bf:92:96:38:12:5e:ca:67:42:b1:94:fc:6a:
1c:05:57:72:49:f4:4e:05:0a:63:a3:66:92:62:d0:
b3:09:6b:cf:71:8d:e7:0e:79:06:0f:73:85:88:06:
01:f1:5a:70:1c:8d:e5:c1:9f:cc:f4:c5:b1:63:29:
64:72:3e:45:c2:3d:9c:48:1e:c2:1e:5a:5a:5b:21:
6f:38:d3:51:90:8e:ec:82:df:34:90:61:31:86:26:
60:35:16:f5:35:2b:e4:21:18:08:95:da:06:cf:75:
df:b4:48:ee:f4:bb:e2:b0:08:cc:72:81:24:46:eb:
e5:94:cb:14:ea:72:57:88:75:4d:30:6a:cc:7f:c6:
cb:20:1d:80:37:b1:77:b3:6d:74:70:fe:cc:d9:1a:
b1:89:62:05:8d:e4:ed:2c:d5:45:17:ba:0d:bb:c4:
12:05:86:f1:eb:a0:ce:95:57:01:65:25:38:a7:d6:
60:c0:44:d2:20:de:5d:c2:96:4a:06:c6:64:63:36:
d7:f5:49:7b:40:e4:2e:a8:cd:0e:48:f0:18:5e:da:
4f:0d:0e:74:57:1e:0d:ef:d6:cb:32:ca:b4:18:a7:
b7:7d:89:21:de:4f:c5:a9:f9:38:5e:86:72:80:91:
5e:da:e5:ac:2b:00:2f:6a:4f:83:8f:57:1d:36:84:
e7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B1:8D:EA:4F:18:CB:03:8F:C3:1F:AB:76:CD:D1:5A:29:3A:69:BF
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a5:03:5d:a6:3c:22:e2:c3:5f:d4:04:b5:7f:85:ca:88:46:
b7:66:c3:32:79:59:f1:99:9c:72:da:60:90:54:2d:71:5d:93:
5c:f6:db:b7:47:5a:67:e8:ed:a6:94:69:ab:08:50:70:74:c7:
c8:86:a3:1d:23:70:a0:bd:3b:f7:43:af:42:e4:4d:a7:4a:2a:
db:80:8c:ba:90:c9:57:a6:bb:37:86:5d:a1:4c:41:27:6f:f9:
0f:48:30:fc:e9:b7:80:d7:6c:9a:0c:80:f6:5d:4e:eb:20:c5:
59:80:49:9c:29:5f:5b:75:ff:93:fd:3c:65:c2:15:e1:5e:41:
3b:95:48:85:61:9c:08:9c:90:e5:2c:cc:28:95:50:f4:d4:fd:
b6:a4:57:69:fe:0e:37:09:82:fd:4b:a7:06:a1:0f:9e:2f:ce:
ca:47:70:a3:c4:32:d4:52:f6:06:70:af:bc:f7:a8:58:ee:48:
7c:ab:dd:0a:b8:a3:f4:e0:39:5f:b5:47:94:cc:26:d5:12:e4:
19:55:ec:71:8f:77:e3:37:91:e0:e7:63:cb:71:09:d8:98:3c:
ad:fe:56:e6:8f:98:d1:6b:d4:6d:09:85:dd:9c:aa:cb:4d:44:
f4:22:c6:b4:d2:f9:fc:9b:dd:6d:b5:c9:2e:a3:0b:b2:3f:22:
20:1b:bb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:16 2026 by rpki-client