Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: wyo8QiOXRh/dHHGXimwInnofLpAB/iAQZizntFAQZmk=
Subject key identifier: 3C:E4:5A:1A:07:E1:45:8A:E7:49:DC:2B:81:80:4A:57:AA:8F:23:CB
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 019D265F11C1EBF80BE788F19F29D2E04407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 181C
Signing time: Wed 25 Mar 2026 19:00:57 +0000
Manifest this update: Wed 25 Mar 2026 19:00:57 +0000
Manifest next update: Thu 26 Mar 2026 19:00:57 +0000
Files and hashes: 1: 1xBlob06V4OZHwqAUkwFisJ8hbE.roa (hash: fUNS9n+gbfLHDdSyjCsCUEORZD+YjwBO+Q4C1PMroB0=)
2: JchC90yjmUCoGpTy_G9JV_hpnDA.roa (hash: y6rgHhMgSwSF+hb/ru1il5IUm+2sXbyrH9l61ZHVZEc=)
3: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: OKT7eBcIxI5+ztWbwqFRa9xkPrJy34ZATG+IQtQRDXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:11:c1:eb:f8:0b:e7:88:f1:9f:29:d2:e0:44:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Mar 25 19:00:57 2026 GMT
Not After : Mar 26 19:00:57 2026 GMT
Subject: CN=3ce45a1a07e1458ae749dc2b81804a57aa8f23cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:13:5e:1b:35:5e:f5:ae:76:89:e0:c2:8e:
50:6a:f2:a6:e8:14:c0:8e:7c:f1:5f:b2:5a:51:85:
e5:09:be:2b:d3:6e:4c:55:00:56:da:56:bf:75:66:
55:b5:3b:5f:75:1b:01:ae:e1:98:e1:4c:ad:e1:85:
81:ed:a4:6c:f6:05:b0:aa:35:36:70:e4:ba:4e:a3:
a2:9b:58:01:bf:dc:13:85:73:f1:e8:d6:94:52:f6:
2e:4c:07:de:42:e7:25:c5:61:0c:df:80:61:60:f9:
ab:54:f0:ad:63:cf:e6:78:a5:5f:a6:bc:ab:06:30:
11:b7:83:1c:4e:45:96:9a:64:7a:5c:84:0b:1f:b3:
1f:55:53:af:e2:c1:8b:2d:30:d0:c8:fa:e1:0c:f8:
23:14:0f:2d:be:64:a1:3b:f2:84:40:d4:cd:c2:f9:
55:5e:ce:34:70:a9:f9:81:6d:91:72:9e:da:06:76:
f1:ef:8d:1b:4f:f5:8b:f9:b4:d2:1d:b6:c0:09:b1:
87:e6:c2:91:1d:85:d6:a8:a9:9c:28:d6:68:f1:18:
95:27:0e:9e:45:d2:e3:f6:f7:72:57:06:a8:3f:b9:
7f:55:17:49:80:fa:4e:db:a8:f4:c8:55:a2:00:e4:
63:de:b4:bf:3b:d3:4f:d2:83:3a:66:7e:dc:0a:6d:
48:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E4:5A:1A:07:E1:45:8A:E7:49:DC:2B:81:80:4A:57:AA:8F:23:CB
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:69:6e:f9:74:37:1b:ee:7c:a1:8c:c8:17:bc:7f:ac:39:1e:
a9:1c:c8:db:eb:ee:99:2e:26:2c:f6:18:64:35:da:1b:25:86:
e4:d2:6c:8e:53:95:76:00:da:2c:da:88:52:6c:de:6a:93:20:
66:3e:f4:ba:ec:6c:b2:92:2e:18:dc:da:93:d1:3d:1b:25:d0:
44:b7:81:cd:83:9d:87:e9:3f:4d:dd:b9:38:88:3b:9f:56:71:
08:07:af:8a:83:c8:bf:0b:d2:b8:27:ad:65:51:a8:c5:74:40:
84:cd:65:5a:1b:57:de:e8:99:55:bb:61:63:44:f8:0e:72:6b:
1e:52:70:15:b1:61:b0:7a:55:a9:56:c4:70:c9:e7:19:23:56:
76:9e:58:cd:e5:40:aa:10:87:ee:64:d1:b5:c1:32:db:2a:a7:
07:18:2f:2c:82:ae:30:c9:30:fc:a0:ac:b0:3e:f3:70:3e:c4:
a9:dd:8b:04:d5:ff:9b:cb:c9:1b:6d:6c:6e:b9:30:c1:a5:71:
3f:ad:82:51:8f:f9:e6:89:0a:17:34:86:64:ba:fa:f7:45:b0:
ed:cc:32:20:3c:86:dc:fe:67:a5:87:85:46:8d:1d:74:fb:17:
95:92:12:50:f5:5f:4b:09:b3:d8:b5:a2:a8:71:cc:7d:2f:60:
81:5b:1c:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXxHB6/gL54jxnynS4EQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MjkyZGM2MzcxOGVlYmM3MDRhYjAwMmVjYjgxZDNkNTJk
NGQxYzMwHhcNMjYwMzI1MTkwMDU3WhcNMjYwMzI2MTkwMDU3WjAzMTEwLwYDVQQD
EygzY2U0NWExYTA3ZTE0NThhZTc0OWRjMmI4MTgwNGE1N2FhOGYyM2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAATXhs1XvWudongwo5QavKm6BTA
jnzxX7JaUYXlCb4r025MVQBW2la/dWZVtTtfdRsBruGY4Uyt4YWB7aRs9gWwqjU2
cOS6TqOim1gBv9wThXPx6NaUUvYuTAfeQuclxWEM34BhYPmrVPCtY8/meKVfpryr
BjARt4McTkWWmmR6XIQLH7MfVVOv4sGLLTDQyPrhDPgjFA8tvmShO/KEQNTNwvlV
Xs40cKn5gW2Rcp7aBnbx740bT/WL+bTSHbbACbGH5sKRHYXWqKmcKNZo8RiVJw6e
RdLj9vdyVwaoP7l/VRdJgPpO26j0yFWiAORj3rS/O9NP0oM6Zn7cCm1I/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzkWhoH4UWK50ncK4GASleqjyPLMB8GA1UdIwQY
MBaAFHcpLcY3GO68cEqwAuy4HT1S1NHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEt
ZDljNWQyNjQxOWIyLzEvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEtZDljNWQyNjQxOWIy
LzEvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGlu+XQ3
G+58oYzIF7x/rDkeqRzI2+vumS4mLPYYZDXaGyWG5NJsjlOVdgDaLNqIUmzeapMg
Zj70uuxsspIuGNzak9E9GyXQRLeBzYOdh+k/Td25OIg7n1ZxCAevioPIvwvSuCet
ZVGoxXRAhM1lWhtX3uiZVbthY0T4DnJrHlJwFbFhsHpVqVbEcMnnGSNWdp5YzeVA
qhCH7mTRtcEy2yqnBxgvLIKuMMkw/KCssD7zcD7Eqd2LBNX/m8vJG21sbrkwwaVx
P62CUY/55okKFzSGZLr690Ww7cwyIDyG3P5npYeFRo0ddPsXlZISUPVfSwmz2LWi
qHHMfS9ggVscTw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:54 2026 by rpki-client