Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
File: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft (raw, json)
Hash identifier: ToBWkUi1NmbGe5W1AZL+hQIfbwvebWo2YPPT2EW3O9I=
Subject key identifier: 92:9F:02:C3:C3:45:59:89:D8:BD:FD:05:C6:22:D1:7C:B3:BF:6B:1A
Authority key identifier: 77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
Certificate issuer: /CN=772f8e257843732ec5ed0f61a13acabee6090a96
Certificate serial: 019D3AC1295B50BB7CECB8F44AB949A6D8F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 18:00:30 +0000
Manifest this update: Sun 29 Mar 2026 18:00:30 +0000
Manifest next update: Mon 30 Mar 2026 18:00:30 +0000
Files and hashes: 1: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl (hash: +cBE7h4YyRJb1jdthbG3xypk4wg0/Z+zh77zVSGtFe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:29:5b:50:bb:7c:ec:b8:f4:4a:b9:49:a6:d8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f8e257843732ec5ed0f61a13acabee6090a96
Validity
Not Before: Mar 29 18:00:30 2026 GMT
Not After : Mar 30 18:00:30 2026 GMT
Subject: CN=929f02c3c3455989d8bdfd05c622d17cb3bf6b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:70:f5:54:81:fd:03:e1:36:3d:6f:f2:81:
1f:71:bc:96:6c:e1:4b:16:56:9f:79:d6:82:09:39:
42:68:05:0d:ca:8c:0a:31:80:53:f6:b2:87:a3:f8:
8b:50:a1:84:08:f0:37:de:71:d1:af:99:0a:e2:c5:
62:f4:96:aa:bd:91:49:cf:01:d8:5f:eb:51:a1:da:
bf:06:29:d1:f0:ef:ec:f9:0e:42:b2:49:5b:71:62:
17:7a:e2:b8:f2:14:b8:dd:da:32:40:ef:d0:9a:b2:
02:9e:52:6e:e8:e3:ac:e7:26:2f:51:c6:ac:57:88:
27:88:21:f9:8f:b1:0b:31:9a:ef:d6:a4:ac:75:57:
bf:2c:8f:87:c4:31:95:b1:01:56:66:58:bc:4e:b6:
52:fe:8c:b8:65:ae:f1:81:c5:12:c6:c2:0e:c8:0d:
cd:f6:84:40:c1:cf:be:bd:69:82:fe:32:c4:8e:e2:
ff:a5:96:4d:33:51:6a:c7:6c:e4:3b:6b:c3:86:08:
02:74:b5:68:f5:1f:0f:c6:b6:65:e7:27:43:2d:47:
1b:79:f4:d9:66:3c:62:6f:9b:3e:a3:5d:88:d9:7c:
53:fb:d6:d4:e1:12:aa:ca:84:5f:60:ea:81:0b:8c:
9d:10:d5:66:ae:71:e3:92:1d:6b:ec:96:72:8e:72:
d1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9F:02:C3:C3:45:59:89:D8:BD:FD:05:C6:22:D1:7C:B3:BF:6B:1A
X509v3 Authority Key Identifier:
keyid:77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:bc:eb:09:67:55:cb:83:d8:8d:d6:91:50:26:40:db:ec:53:
d7:47:f0:bb:4d:63:14:c7:1c:c1:10:20:e6:4a:f7:76:de:8f:
32:42:ed:6e:e9:cc:23:a5:a9:e2:7c:60:7f:5a:8e:09:57:19:
e5:e2:4e:94:23:c1:b5:0a:fb:57:1a:0b:83:73:40:e3:49:1b:
2a:20:67:0f:13:59:ad:34:bf:09:57:2c:2d:6d:b6:ad:97:96:
13:b8:1f:f6:d3:44:ad:49:e0:3e:d1:57:a1:2f:2e:a5:d8:75:
a2:ca:1e:68:50:26:b7:15:cd:2f:d5:7b:f0:32:b7:05:16:61:
4e:48:ab:6e:1d:33:82:72:0b:65:0b:87:2d:49:a7:ae:cc:fa:
3c:83:91:11:92:2b:0d:5b:86:d5:58:8e:c8:c3:28:8e:64:57:
a1:9e:bf:ac:2a:a6:ce:7b:da:f5:2f:5c:03:c2:fa:b7:a2:5c:
56:dd:61:27:ce:e0:a9:e7:2c:be:3a:16:c3:36:e8:d5:42:56:
47:00:f2:40:fd:07:b7:c5:a7:cc:3d:dd:2f:b3:78:ea:2d:8f:
a8:e9:90:c5:e1:54:4b:2f:5c:2c:46:d5:b0:a6:97:5c:63:09:
30:6b:de:8b:1f:7c:f4:41:6d:5e:e7:97:54:67:fb:3c:c3:03:
cb:07:ca:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06wSlbULt87Lj0SrlJptj3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MmY4ZTI1Nzg0MzczMmVjNWVkMGY2MWExM2FjYWJlZTYw
OTBhOTYwHhcNMjYwMzI5MTgwMDMwWhcNMjYwMzMwMTgwMDMwWjAzMTEwLwYDVQQD
Eyg5MjlmMDJjM2MzNDU1OTg5ZDhiZGZkMDVjNjIyZDE3Y2IzYmY2YjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW1w9VSB/QPhNj1v8oEfcbyWbOFL
FlafedaCCTlCaAUNyowKMYBT9rKHo/iLUKGECPA33nHRr5kK4sVi9JaqvZFJzwHY
X+tRodq/BinR8O/s+Q5CsklbcWIXeuK48hS43doyQO/QmrICnlJu6OOs5yYvUcas
V4gniCH5j7ELMZrv1qSsdVe/LI+HxDGVsQFWZli8TrZS/oy4Za7xgcUSxsIOyA3N
9oRAwc++vWmC/jLEjuL/pZZNM1Fqx2zkO2vDhggCdLVo9R8PxrZl5ydDLUcbefTZ
Zjxib5s+o12I2XxT+9bU4RKqyoRfYOqBC4ydENVmrnHjkh1r7JZyjnLRgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKfAsPDRVmJ2L39BcYi0Xyzv2saMB8GA1UdIwQY
MBaAFHcvjiV4Q3Muxe0PYaE6yr7mCQqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHktT0pYaERjeTdGN1E5aG9Uckt2dVlKQ3BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mNzQxMTEtNTQxMy00MDQ4LTlhYjkt
OTZjYWM3ODc1ODJiLzEvZHktT0pYaERjeTdGN1E5aG9Uckt2dVlKQ3BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9mNzQxMTEtNTQxMy00MDQ4LTlhYjktOTZjYWM3ODc1ODJi
LzEvZHktT0pYaERjeTdGN1E5aG9Uckt2dVlKQ3BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7zrCWdV
y4PYjdaRUCZA2+xT10fwu01jFMccwRAg5kr3dt6PMkLtbunMI6Wp4nxgf1qOCVcZ
5eJOlCPBtQr7VxoLg3NA40kbKiBnDxNZrTS/CVcsLW22rZeWE7gf9tNErUngPtFX
oS8updh1osoeaFAmtxXNL9V78DK3BRZhTkirbh0zgnILZQuHLUmnrsz6PIOREZIr
DVuG1ViOyMMojmRXoZ6/rCqmznva9S9cA8L6t6JcVt1hJ87gqecsvjoWwzbo1UJW
RwDyQP0Ht8WnzD3dL7N46i2PqOmQxeFUSy9cLEbVsKaXXGMJMGveix989EFtXueX
VGf7PMMDywfKUQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:09 2026 by rpki-client