Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
File: DY087TLjYPzUbBY1Vt4oqigksZs.mft (raw, json)
Hash identifier: Ru/XBZgiti85FfAKMsvrHnU9LLYveKDuBYiS3g0QxoM=
Subject key identifier: F4:AC:A2:F1:E6:C8:D8:F5:C7:A7:0D:3B:10:38:02:9A:90:28:74:4A
Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
Certificate issuer: /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Certificate serial: 019D28F28D832DBE04573275D8DC24616D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
Manifest number: 0360
Signing time: Thu 26 Mar 2026 07:01:17 +0000
Manifest this update: Thu 26 Mar 2026 07:01:17 +0000
Manifest next update: Fri 27 Mar 2026 07:01:17 +0000
Files and hashes: 1: 1-nukkIR6QW9cgqOuKheFLpvicPM.roa (hash: E0YmmZeDYH8nWMQd2BPTkT+OQ+zyRbNJxd4dp/aCenc=)
2: DY087TLjYPzUbBY1Vt4oqigksZs.crl (hash: pPR+5ENnzSSt2f0/jH6FCNBNLiNImpsK4aw6+Ip6Fs4=)
3: fW8Rb2ydTpsUsTrGa2SivBYDQlA.roa (hash: R0r5msaJunREx2IGezURTBwCC6OaeIbwcDABeHEl6S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:8d:83:2d:be:04:57:32:75:d8:dc:24:61:6d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Validity
Not Before: Mar 26 07:01:17 2026 GMT
Not After : Mar 27 07:01:17 2026 GMT
Subject: CN=f4aca2f1e6c8d8f5c7a70d3b1038029a9028744a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:33:97:d1:e7:3e:f1:c2:40:92:46:5a:0d:
44:75:bd:ed:29:92:46:53:91:6c:7e:f1:d7:9e:6b:
19:70:73:fb:05:41:90:91:18:20:c8:47:f2:4d:d9:
ff:b8:78:cd:ba:85:2a:af:a0:f6:2c:af:dc:0c:9c:
67:98:c2:4f:a3:78:e0:d0:3f:f2:5d:fa:4a:bd:99:
e6:1b:4b:23:f4:89:e0:a4:bd:5c:bd:c6:43:84:8e:
54:b7:e6:1a:80:6c:3d:17:ff:72:31:97:ed:45:72:
8f:17:44:e2:30:56:2b:93:fe:0a:cd:1b:77:b2:db:
ba:42:e0:12:0e:1b:f0:82:90:b2:0b:e4:f3:35:28:
47:e3:3c:b5:55:dd:81:40:47:12:37:96:24:8d:86:
9c:5a:d0:2f:04:57:ed:ad:19:6c:48:4c:bf:4b:9d:
a2:f9:70:a5:e8:f0:4e:59:34:fc:4c:a8:92:65:1a:
bf:dd:4e:3f:9e:da:89:1a:d7:db:cc:53:b2:fb:27:
23:5b:67:9c:50:8e:5e:97:e6:8a:be:10:9e:ce:f0:
51:71:cc:ee:f4:ba:2d:b0:15:4a:56:76:eb:b8:8d:
ab:87:ea:0e:97:1a:0e:a7:97:0a:aa:73:54:41:4d:
7a:9d:2e:02:4c:7d:b9:aa:24:c7:23:ef:2b:f8:10:
6e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AC:A2:F1:E6:C8:D8:F5:C7:A7:0D:3B:10:38:02:9A:90:28:74:4A
X509v3 Authority Key Identifier:
keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:27:d8:8b:7a:10:ae:27:96:79:7f:46:4b:fa:d6:4d:bd:7d:
d5:c6:78:58:09:ee:2c:b6:c0:1a:cf:b4:dd:d9:dd:b6:e2:9b:
7b:41:7d:74:58:5e:15:69:29:0c:90:0d:55:e7:f4:16:c2:c5:
87:42:3b:ed:4f:15:56:2b:0c:40:1c:14:15:6f:ef:67:0b:7d:
ee:ca:dd:89:d9:c9:0f:19:8a:f0:76:f7:8d:e7:3d:d4:e5:63:
a0:0a:22:81:70:90:18:31:3a:87:71:7d:a4:50:da:ec:f4:5b:
27:be:65:44:3f:73:80:32:61:17:b5:3d:6a:f0:9d:d3:32:63:
43:7b:fa:c4:5f:13:ba:4f:03:c8:09:76:d9:09:aa:c8:28:82:
2e:68:8f:22:21:ef:6d:ca:97:c0:c2:b8:ed:85:a8:7a:5d:54:
34:37:74:83:20:e3:ba:d1:42:f5:9f:6e:29:e9:48:e7:58:d1:
22:c8:27:b9:f3:a7:5e:e8:bd:8f:91:c7:bf:04:dc:89:9b:ef:
84:fc:7d:9f:26:eb:94:70:bd:d5:6a:65:1c:05:e6:36:f7:d4:
94:fe:a5:be:a3:22:3d:40:05:6b:39:8d:f1:0e:67:69:8f:51:
54:79:1b:12:57:ad:88:35:f6:a8:74:ae:f7:53:a2:9a:3c:d6:
4f:88:ca:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:31:23 2026 by rpki-client