Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft
File: dy9wNcKJOyjNBP0amzys0kKMjf0.mft (raw, json)
Hash identifier: MXQeXjmtv1O5vKjf1BAVR57ZVeZIz/qxoNYCrcmi36c=
Subject key identifier: 7F:5E:03:31:BC:07:D1:F8:13:E2:B0:89:C9:98:1D:3A:3E:2F:6B:5E
Authority key identifier: 77:2F:70:35:C2:89:3B:28:CD:04:FD:1A:9B:3C:AC:D2:42:8C:8D:FD
Certificate issuer: /CN=772f7035c2893b28cd04fd1a9b3cacd2428c8dfd
Certificate serial: 01A020563ECEBC1CA19D13BA03CF95677659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft
Manifest number: 072D
Signing time: Thu 20 Aug 2026 18:01:57 +0000
Manifest this update: Thu 20 Aug 2026 18:01:57 +0000
Manifest next update: Fri 21 Aug 2026 18:01:57 +0000
Files and hashes: 1: 8Qo74UQPSqvugCWFfb9DBf7wKqE.roa (hash: M/pOvg/hdX2EdZ83UmfDv3mPILFnj+u5MLVly1CyGXs=)
2: NZYrDqHNM7w06ZqIbetRmQuvkI8.roa (hash: aqDX81Tnke9g7oa5zcmS5K2aP4v9bwtCbdPJWZIvsEE=)
3: dy9wNcKJOyjNBP0amzys0kKMjf0.crl (hash: ligi14KkIRsNTqT2gUzRy7xqiabwe1m20ka9tGZQVGg=)
4: j7E0VOUyJDRGY1mXB_LTgfCHtec.roa (hash: DmIJX6VYUzzGV5IX9wpqM+xTHY2Teuv8gdmzrljcdLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 18:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:56:3e:ce:bc:1c:a1:9d:13:ba:03:cf:95:67:76:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f7035c2893b28cd04fd1a9b3cacd2428c8dfd
Validity
Not Before: Aug 20 18:01:57 2026 GMT
Not After : Aug 21 18:01:57 2026 GMT
Subject: CN=7f5e0331bc07d1f813e2b089c9981d3a3e2f6b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:51:ff:41:e9:9b:f6:da:c5:97:c5:a3:a8:
ab:9e:f5:05:21:55:8d:58:4d:ad:27:81:66:10:de:
c7:8e:45:fd:32:a8:7c:dd:fc:d2:b9:3d:88:38:0f:
d9:ae:09:d4:c9:09:a7:6b:88:ef:78:08:2c:58:2a:
79:90:4c:99:cf:e2:9f:fc:d1:8d:47:b8:f0:34:cc:
59:c8:ac:b8:ad:63:9e:f3:93:fa:61:49:84:db:e2:
7e:e5:12:2c:76:26:97:bd:8b:cc:b7:e4:fc:8b:79:
76:2f:10:f5:90:3a:a0:80:65:ac:5b:33:a8:64:68:
86:0a:00:be:f0:7c:a5:3d:3d:81:59:d6:66:f2:dd:
ec:40:d8:d2:1c:01:0b:05:63:d2:55:d9:51:5d:8e:
c9:7a:fd:ae:ca:05:4f:60:cf:cc:f8:4e:b6:b5:99:
8f:6e:05:ed:95:ff:0c:4b:8f:f0:f6:08:41:d2:cd:
9e:66:7f:b8:54:4c:23:7f:68:2b:e3:41:e6:48:08:
92:30:61:40:a0:df:3e:3f:0c:25:e4:27:21:cf:8d:
10:d6:ae:d2:92:a6:68:64:04:8b:a8:7e:12:2c:ec:
ca:a2:2b:b2:9e:3b:55:7b:bd:a3:88:55:a6:eb:a2:
f3:08:9c:68:8e:2c:ba:f5:c6:c8:51:be:99:3c:6a:
49:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5E:03:31:BC:07:D1:F8:13:E2:B0:89:C9:98:1D:3A:3E:2F:6B:5E
X509v3 Authority Key Identifier:
keyid:77:2F:70:35:C2:89:3B:28:CD:04:FD:1A:9B:3C:AC:D2:42:8C:8D:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:4b:ec:a4:77:25:19:ff:3a:3b:e9:f6:0f:62:67:b1:cc:49:
34:dd:4d:86:2e:e8:76:3a:c3:85:07:fa:39:81:2c:e6:cb:d2:
c8:1a:18:e1:4f:e5:aa:af:15:a7:a5:11:e3:96:30:0b:4c:ff:
45:90:2b:7d:ba:ef:1a:5b:86:d0:d8:38:16:9d:6f:09:44:10:
1f:a5:89:0a:4e:db:17:15:2b:9c:41:c0:ac:55:2b:87:45:10:
2d:52:7e:04:0a:ae:5b:66:99:04:8c:cb:37:a8:d8:b0:44:8b:
d1:1d:4f:d4:99:3c:6c:23:ce:09:f8:31:59:ed:1d:20:d8:de:
35:d1:5a:42:b1:c7:3e:dd:e0:97:fc:3b:c7:7d:1a:2e:e2:c5:
45:bf:12:25:06:39:03:1f:a4:6f:42:60:eb:f2:42:73:60:1c:
dc:9d:a3:44:ed:99:eb:11:62:47:32:d6:f0:e3:a3:31:95:a7:
8c:eb:55:1b:45:e3:57:93:9d:9f:4b:a7:81:1a:98:bd:86:b2:
0f:9b:0a:e9:13:27:88:91:88:2f:21:60:f2:f3:02:97:36:a1:
bd:2d:1c:52:a2:36:e3:77:f1:90:e2:c8:e9:ca:10:04:2c:a8:
b6:9c:1e:95:58:3f:09:2c:d9:b8:02:4c:22:59:3a:db:2c:c5:
a7:2d:05:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:38:02 2026 by rpki-client