Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: wQci01Z9OLblcbUJAEaY9avKYI+283sjxoWeNuHnDzw=
Subject key identifier: C5:E4:37:70:E9:E8:BD:49:1D:91:CD:6E:53:A4:C7:76:9B:EC:51:B3
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 01A0F1C3B1C550BDA4180F810D05237570D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 1A13
Signing time: Wed 30 Sep 2026 10:02:09 +0000
Manifest this update: Wed 30 Sep 2026 10:02:09 +0000
Manifest next update: Thu 01 Oct 2026 10:02:09 +0000
Files and hashes: 1: 1xBlob06V4OZHwqAUkwFisJ8hbE.roa (hash: fUNS9n+gbfLHDdSyjCsCUEORZD+YjwBO+Q4C1PMroB0=)
2: JchC90yjmUCoGpTy_G9JV_hpnDA.roa (hash: y6rgHhMgSwSF+hb/ru1il5IUm+2sXbyrH9l61ZHVZEc=)
3: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: U9tGXDET1NBZLpjCJsocUJApZBRc5rTMe5SyszV4ki8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:c3:b1:c5:50:bd:a4:18:0f:81:0d:05:23:75:70:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Sep 30 10:02:09 2026 GMT
Not After : Oct 1 10:02:09 2026 GMT
Subject: CN=c5e43770e9e8bd491d91cd6e53a4c7769bec51b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f9:40:23:de:b9:cf:e3:87:b3:c6:48:32:4a:
4c:29:ad:68:5e:dd:0e:89:e5:3f:d4:89:22:91:e2:
28:4d:c1:d3:b9:94:3b:1b:89:a3:1e:f7:0e:41:bb:
8c:e7:9b:72:65:1b:59:83:56:20:1a:6e:0d:02:d0:
5a:d9:68:07:ec:5b:1f:68:60:bc:b2:e2:f6:45:76:
a2:62:c8:aa:07:2c:e3:5a:44:e1:9e:eb:bf:ab:1f:
0e:e6:4b:80:4b:38:a1:5a:2f:4a:b4:5e:13:c5:f0:
f1:6b:a2:4e:57:14:32:3c:3c:ab:78:2e:01:b8:65:
fa:2d:09:0f:4d:14:90:91:1b:01:3c:54:fe:fa:6c:
c4:a3:62:21:fb:f8:97:1e:5d:68:60:5d:e7:9f:17:
90:6a:9a:6a:65:82:31:54:01:ec:96:ca:78:0a:44:
1b:40:c3:34:61:4b:f5:08:16:73:3a:e5:04:42:1e:
86:fa:31:b9:3c:26:b7:08:56:44:25:63:ff:bc:5f:
70:5e:fe:83:78:f2:a9:34:5d:3b:ae:ac:97:ea:40:
de:bb:b7:80:e1:a5:95:72:79:52:6e:a2:ca:d6:cb:
98:22:c2:af:d7:40:b5:02:5e:32:73:04:0a:11:e2:
8d:fa:0b:2f:65:d3:23:e8:31:6b:2b:f4:3a:bd:22:
a6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E4:37:70:E9:E8:BD:49:1D:91:CD:6E:53:A4:C7:76:9B:EC:51:B3
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:32:db:58:4c:62:56:54:11:e5:4b:e3:1a:c5:54:a4:42:ca:
46:47:a0:d2:30:5d:fd:e1:32:6a:ef:37:6a:e7:a9:1d:a0:fb:
df:03:e2:75:cf:f9:3b:86:b6:aa:93:c6:10:d5:10:a2:5b:fd:
f6:6e:61:9d:90:3b:b6:64:99:da:03:c9:45:c8:69:2e:24:e4:
fb:18:15:6e:09:3f:d0:af:fe:da:d9:b7:58:68:35:8a:44:8b:
a7:08:61:f7:ad:d6:b8:5c:dc:53:e8:dc:70:12:73:8e:ff:2a:
8a:e7:d8:fb:9c:47:ed:0a:91:62:52:c0:28:dc:1e:fb:46:22:
58:0e:b5:a7:db:95:2e:e5:63:a7:fb:22:76:16:8c:8e:78:94:
30:fc:f7:65:06:90:22:30:70:ee:34:c6:2b:2f:5b:a8:e5:52:
8c:83:70:f2:97:c0:e9:99:10:96:15:51:7e:c1:09:91:a9:38:
20:93:c8:60:b8:b3:db:d0:83:71:ef:a2:51:b1:e2:41:0d:e6:
ab:29:34:83:76:81:16:5d:83:34:44:a7:fc:81:80:26:d9:fd:
87:90:26:e7:df:ba:62:5a:8a:76:1f:94:bf:d5:f0:ce:d8:ec:
e1:4a:b2:67:05:8e:80:5c:60:92:7a:21:a4:ca:39:a2:bb:bf:
47:62:a1:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDxw7HFUL2kGA+BDQUjdXDZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MjkyZGM2MzcxOGVlYmM3MDRhYjAwMmVjYjgxZDNkNTJk
NGQxYzMwHhcNMjYwOTMwMTAwMjA5WhcNMjYxMDAxMTAwMjA5WjAzMTEwLwYDVQQD
EyhjNWU0Mzc3MGU5ZThiZDQ5MWQ5MWNkNmU1M2E0Yzc3NjliZWM1MWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/lAI965z+OHs8ZIMkpMKa1oXt0O
ieU/1IkikeIoTcHTuZQ7G4mjHvcOQbuM55tyZRtZg1YgGm4NAtBa2WgH7FsfaGC8
suL2RXaiYsiqByzjWkThnuu/qx8O5kuASzihWi9KtF4TxfDxa6JOVxQyPDyreC4B
uGX6LQkPTRSQkRsBPFT++mzEo2Ih+/iXHl1oYF3nnxeQappqZYIxVAHslsp4CkQb
QMM0YUv1CBZzOuUEQh6G+jG5PCa3CFZEJWP/vF9wXv6DePKpNF07rqyX6kDeu7eA
4aWVcnlSbqLK1suYIsKv10C1Al4ycwQKEeKN+gsvZdMj6DFrK/Q6vSKmZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXkN3Dp6L1JHZHNblOkx3ab7FGzMB8GA1UdIwQY
MBaAFHcpLcY3GO68cEqwAuy4HT1S1NHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEt
ZDljNWQyNjQxOWIyLzEvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEtZDljNWQyNjQxOWIy
LzEvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTLbWExi
VlQR5UvjGsVUpELKRkeg0jBd/eEyau83auepHaD73wPidc/5O4a2qpPGENUQolv9
9m5hnZA7tmSZ2gPJRchpLiTk+xgVbgk/0K/+2tm3WGg1ikSLpwhh963WuFzcU+jc
cBJzjv8qiufY+5xH7QqRYlLAKNwe+0YiWA61p9uVLuVjp/sidhaMjniUMPz3ZQaQ
IjBw7jTGKy9bqOVSjINw8pfA6ZkQlhVRfsEJkak4IJPIYLiz29CDce+iUbHiQQ3m
qyk0g3aBFl2DNESn/IGAJtn9h5Am59+6YlqKdh+Uv9Xwztjs4UqyZwWOgFxgknoh
pMo5oru/R2KhuA==
-----END CERTIFICATE-----
Generated at Wed Sep 30 17:08:28 2026 by rpki-client