
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
File: dyDGcENNpRAiYQmdoQHyXdP3qto.mft (raw, json)
Hash identifier: jazHvS4NrvPWebVQflLrEHHLfwTsVqcMy05mWRuz3gI=
Subject key identifier: 8F:55:A9:A5:06:A6:4E:E5:E7:74:E6:B4:07:24:86:FF:F4:1E:2E:59
Authority key identifier: 77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
Certificate issuer: /CN=7720c670434da5102261099da101f25dd3f7aada
Certificate serial: 01A1396D98229881F16BFB1D27D2EADBA454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
Manifest number: 12E5
Signing time: Wed 14 Oct 2026 08:00:46 +0000
Manifest this update: Wed 14 Oct 2026 08:00:46 +0000
Manifest next update: Thu 15 Oct 2026 08:00:46 +0000
Files and hashes: 1: dyDGcENNpRAiYQmdoQHyXdP3qto.crl (hash: bi9VQCX0UTUj2Sp4RTyWMHC/E9nI9gil5E8YjXUqhUo=)
2: fxjDmBMtX4lZXvQ-w62aJNa_wcA.roa (hash: k9PdZxgspVP2JG6hPwNtH2QKs9wDWHLF4meodXKpQn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:6d:98:22:98:81:f1:6b:fb:1d:27:d2:ea:db:a4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7720c670434da5102261099da101f25dd3f7aada
Validity
Not Before: Oct 14 08:00:46 2026 GMT
Not After : Oct 15 08:00:46 2026 GMT
Subject: CN=8f55a9a506a64ee5e774e6b4072486fff41e2e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:63:7d:af:a4:1d:57:07:24:95:9c:fd:54:31:
e5:08:9b:10:a7:29:c7:ca:16:b1:7b:a1:82:ec:fd:
68:95:d5:8e:7b:9b:4d:38:7c:22:37:f6:a3:71:66:
a8:da:c4:8e:db:1a:5e:91:dd:dd:be:24:09:f6:41:
30:84:26:ca:e0:a4:b5:ad:0e:f3:48:4b:a9:f4:bc:
4c:e3:57:dd:dd:a9:8e:3d:0a:64:61:56:91:37:3e:
75:67:71:f2:0c:de:f9:a7:b4:e7:61:01:32:cb:fe:
03:72:d2:a3:57:66:46:f3:57:91:68:66:78:10:8b:
33:b1:fa:87:c2:8e:ae:19:4b:e5:aa:2a:6f:f4:8c:
8f:39:38:60:bb:8f:22:bc:b0:15:0f:3a:6a:6a:50:
d4:6b:ee:c9:8b:0a:0d:46:48:9c:b1:f7:5d:63:4c:
79:df:3d:5e:fd:0b:c1:49:f9:c9:c3:37:7f:18:5d:
35:8e:a1:dc:4f:0f:ae:30:0e:b2:fa:3a:20:6e:80:
e9:66:bb:78:45:43:46:16:9a:7d:e9:ef:14:b6:5b:
18:8e:ae:55:4f:33:d6:af:96:75:6b:8b:7f:98:78:
bc:9a:34:f5:77:30:d9:93:f4:4f:10:d1:d6:6c:d5:
9b:bd:77:86:80:75:21:0b:b0:be:23:4f:cd:66:0a:
a1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:55:A9:A5:06:A6:4E:E5:E7:74:E6:B4:07:24:86:FF:F4:1E:2E:59
X509v3 Authority Key Identifier:
keyid:77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:13:16:c1:94:5e:2c:9e:21:fe:06:d5:e8:b8:5f:83:7e:44:
57:67:32:f1:ca:87:a9:4b:94:d1:4b:f0:39:7a:22:1b:14:86:
02:22:19:0a:62:1c:a3:5f:f2:95:49:b4:b3:6c:c0:09:ff:40:
26:2c:42:80:d4:22:17:e9:0a:a7:55:1e:bf:86:16:e1:c6:d8:
69:48:78:10:bf:7d:c6:82:6c:1e:52:ae:23:18:95:65:f2:8e:
9c:24:50:47:44:58:f5:0e:93:b1:1b:0c:27:12:9b:00:a7:1c:
5a:a6:7f:b5:2f:b6:51:3f:e5:4b:8b:0b:b2:22:e6:2b:5b:e3:
58:76:26:06:47:07:6b:5f:e9:7c:25:54:a5:c1:8a:1a:21:ef:
01:de:89:47:8b:38:5b:57:d5:2f:45:b8:e1:37:6f:b8:d0:95:
42:17:2b:8f:a8:fd:1e:3a:cb:43:bb:2a:02:4c:f7:ff:d2:9c:
e4:58:ed:ec:64:fe:01:f7:79:89:65:2f:43:72:71:bb:1b:ed:
57:19:ba:0a:9e:52:b6:e7:ef:7b:0e:7f:09:52:c3:f7:82:04:
0f:93:61:2d:5d:f0:f4:40:d9:f6:28:eb:cb:b4:24:62:c8:e7:
84:fe:b2:72:06:af:50:60:d2:92:bb:42:34:7b:4f:a8:26:57:
59:06:60:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:51:31 2026 by rpki-client