Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
File: DY087TLjYPzUbBY1Vt4oqigksZs.mft (raw, json)
Hash identifier: 0v9gb1DTJCKHkoogtDBkC7zMrgRpm53PsgLe2E2Hndg=
Subject key identifier: 9F:BF:A4:C7:70:3B:CB:E1:DD:C7:33:50:5F:D6:0F:79:A0:14:E6:C2
Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
Certificate issuer: /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Certificate serial: 019F9247FC93B0B30D74C95547234C089247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
Manifest number: 04A0
Signing time: Fri 24 Jul 2026 04:00:18 +0000
Manifest this update: Fri 24 Jul 2026 04:00:18 +0000
Manifest next update: Sat 25 Jul 2026 04:00:18 +0000
Files and hashes: 1: 1-nukkIR6QW9cgqOuKheFLpvicPM.roa (hash: E0YmmZeDYH8nWMQd2BPTkT+OQ+zyRbNJxd4dp/aCenc=)
2: DY087TLjYPzUbBY1Vt4oqigksZs.crl (hash: RNBCudATOvtlF3NZsHOjXSt40EIporwdQnm+1FM4toc=)
3: WQmYPEA5KHCYQnKwp8rq02Pzjjw.roa (hash: IE1MdBhd39ubFGDJ8fLp8tQMRe29ApkrELaTf7r4r+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:47:fc:93:b0:b3:0d:74:c9:55:47:23:4c:08:92:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Validity
Not Before: Jul 24 04:00:18 2026 GMT
Not After : Jul 25 04:00:18 2026 GMT
Subject: CN=9fbfa4c7703bcbe1ddc733505fd60f79a014e6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:14:25:78:87:c1:a2:9d:a3:9e:99:9c:cb:f0:
70:17:fa:8d:f5:26:7e:a9:ad:73:61:b4:21:70:97:
79:4d:1d:34:fb:63:44:11:7e:7b:3c:bc:72:be:15:
12:36:57:82:6c:5d:24:65:6c:fa:cc:de:c9:a1:69:
d0:91:b1:db:4b:88:49:67:4a:14:72:27:b5:c8:75:
fa:0d:ae:5f:5f:c2:ea:9c:1b:5a:c3:fa:19:be:e3:
7a:3a:6c:fc:ad:95:d4:cf:32:76:85:f3:df:f5:68:
ba:45:92:b5:19:b6:9d:8e:39:ae:7f:7a:33:f5:af:
c4:53:0e:a6:d6:85:ca:d7:20:7f:ee:e8:a9:ca:4d:
92:40:f7:a5:9b:e8:c2:e4:ab:31:b8:e9:ef:3e:2b:
aa:f9:ef:29:73:f7:27:64:66:9c:fe:eb:76:11:7a:
f2:24:a6:ef:bb:61:7b:ef:f5:c9:93:7a:8f:d4:d8:
cf:a9:3d:66:88:72:a6:4a:35:2d:ad:c9:b2:eb:55:
ec:5e:c9:8e:f2:41:38:46:06:6b:ee:dc:5a:af:6b:
a8:b1:16:38:84:fe:51:88:97:be:93:28:fd:31:9b:
2c:0f:ae:72:3e:00:cf:93:6e:86:3e:e8:8f:8d:62:
75:e6:06:04:58:30:54:e3:4f:7b:2f:6f:b1:b5:3a:
02:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BF:A4:C7:70:3B:CB:E1:DD:C7:33:50:5F:D6:0F:79:A0:14:E6:C2
X509v3 Authority Key Identifier:
keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:59:28:76:f5:d5:12:ed:9d:8a:8f:82:95:9a:f8:7d:c8:cc:
52:3e:37:75:ca:40:34:48:f4:ad:62:a7:af:d6:1c:fa:21:1f:
8f:45:64:da:61:0f:b7:42:e0:33:c1:5f:74:d4:53:b2:f0:8c:
7e:b3:99:9a:35:42:70:34:57:ac:f9:02:ab:47:cb:bd:99:8f:
65:58:df:d3:f5:84:58:a0:c8:c0:0c:e4:1e:e8:55:65:4e:01:
1b:a3:19:68:95:72:6f:32:84:b6:6f:fa:ab:2e:46:8b:0f:1f:
bd:b4:84:9c:b8:d4:81:3c:b7:62:dd:fa:a2:0c:18:8f:c3:42:
14:20:f6:96:41:98:ca:95:df:ac:e5:9f:11:80:e4:14:cb:1b:
90:7f:4b:18:3a:2e:26:b7:a1:09:45:c8:55:70:04:e2:d2:e7:
cf:fe:82:9e:44:71:56:67:d2:4e:94:ef:cb:ac:41:cf:96:72:
21:8b:85:98:00:c4:b3:8f:63:4e:62:ef:f1:3a:ac:56:c5:73:
b4:06:a4:57:ef:b3:91:a7:f2:56:14:02:ee:d5:22:bb:a2:60:
a1:a4:0d:c6:56:cc:06:a9:8b:e2:9f:7c:7b:7e:7a:85:f4:8c:
1c:83:b9:76:73:f0:e6:0b:57:48:23:59:cd:91:5d:3b:cd:d8:
f1:9f:c8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:44 2026 by rpki-client