Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
File: DY087TLjYPzUbBY1Vt4oqigksZs.mft (raw, json)
Hash identifier: uhgXYIv23xT3b691CyJ4XFEyXQ7Zctc1a0OTfsQcSAg=
Subject key identifier: 0D:50:2F:2F:66:F8:B4:67:9F:B5:9A:39:02:BE:12:BD:DA:FB:00:08
Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
Certificate issuer: /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Certificate serial: 01A0D804B5F83E9B5D718FBD86ED91E820EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
Manifest number: 0549
Signing time: Fri 25 Sep 2026 10:03:02 +0000
Manifest this update: Fri 25 Sep 2026 10:03:02 +0000
Manifest next update: Sat 26 Sep 2026 10:03:02 +0000
Files and hashes: 1: 1-nukkIR6QW9cgqOuKheFLpvicPM.roa (hash: E0YmmZeDYH8nWMQd2BPTkT+OQ+zyRbNJxd4dp/aCenc=)
2: DY087TLjYPzUbBY1Vt4oqigksZs.crl (hash: l9mo2FcIb1A6mq3RL2yVRyyCOrQNrpYAnYFwiye/vUI=)
3: rJtFAaihKwhTzfzLn9-a6P1w8XI.roa (hash: B8CZ2EbQTKFiK2knWInh1wLJvgTohC2zNRpfKKdNVRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:b5:f8:3e:9b:5d:71:8f:bd:86:ed:91:e8:20:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Validity
Not Before: Sep 25 10:03:02 2026 GMT
Not After : Sep 26 10:03:02 2026 GMT
Subject: CN=0d502f2f66f8b4679fb59a3902be12bddafb0008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0f:0f:92:c2:e9:68:a3:81:57:f3:49:f6:27:
25:3f:fb:00:b1:f9:93:33:d4:a0:bd:19:5e:d5:02:
c7:36:8b:04:05:5e:07:1a:1c:d0:38:85:97:30:dc:
92:99:85:11:16:f0:9b:a6:cd:74:1e:c2:47:9b:48:
b4:f1:ca:36:60:3f:2f:30:8c:f0:33:53:15:71:ac:
a3:b4:7d:a6:cd:36:d1:0e:be:c7:08:db:35:34:16:
19:f8:16:98:ae:8c:1b:44:c6:24:d2:cc:e1:71:14:
3d:2d:f2:ba:45:a4:0a:b8:c1:57:d8:5e:19:79:b2:
fd:75:64:ac:7e:a8:ab:55:22:ec:62:a0:48:cf:c5:
35:8b:a2:94:b1:e5:82:70:91:93:a7:0b:9c:5c:c7:
41:77:b5:a1:f4:26:d1:fb:87:a3:f6:0f:e5:a8:90:
e6:3a:25:99:46:b5:d3:eb:c9:a1:a7:f1:af:11:19:
cc:b0:cd:db:f6:f3:9a:1e:5c:8e:21:8c:18:e7:5b:
59:27:f9:d2:ad:5e:26:ff:1e:c2:88:1a:e1:d2:50:
07:e2:18:59:7b:29:10:15:ef:06:5c:fd:8b:51:ba:
93:77:3b:92:57:a1:62:25:9a:86:2f:be:bd:48:03:
17:de:46:45:33:90:45:c2:5b:21:73:8f:c7:2a:d2:
ac:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:50:2F:2F:66:F8:B4:67:9F:B5:9A:39:02:BE:12:BD:DA:FB:00:08
X509v3 Authority Key Identifier:
keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0b:71:1f:69:98:36:72:bc:db:da:d6:aa:f0:c9:0b:a9:60:
db:39:0d:3b:d1:c3:ce:51:9b:92:6d:f9:57:63:5a:28:79:74:
d3:e8:00:46:10:7f:32:d2:c7:43:fd:c0:72:82:2a:cf:44:3a:
e8:bc:59:2e:b4:45:f9:58:29:52:05:30:5d:77:36:3e:fd:67:
9c:22:e1:b2:a4:6b:e2:45:a6:09:4e:d7:a3:21:2a:bb:8c:af:
82:60:af:9f:83:31:99:d3:1b:84:9d:f4:9e:20:fe:b2:51:f2:
b7:c3:c1:82:89:f0:7d:f9:6e:ff:65:25:27:e2:e9:af:0a:22:
36:c2:6b:4e:83:79:b8:29:07:39:82:84:93:a1:6a:85:84:cf:
d5:de:4d:fc:6f:e8:91:55:dd:67:27:77:c0:f8:d3:fb:23:bc:
8a:b4:f0:5a:09:06:03:f0:19:30:77:91:3b:65:ca:08:df:82:
d5:dc:43:55:c8:65:8e:b9:37:c8:db:21:eb:ab:f6:4a:9b:64:
52:46:89:62:91:87:ed:2a:fc:78:cf:58:89:3f:12:39:b3:f9:
e3:ee:fa:55:3d:b6:cf:48:e4:a8:29:95:84:9d:47:af:51:b3:
db:f8:31:62:8a:82:0f:ec:62:c2:62:20:2a:e4:ab:d0:ac:fd:
bf:56:9a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:16:04 2026 by rpki-client