Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json)
Hash identifier: 9KBELGO1tkxtr77ww5VYdxhdwB3CnhmW/DqNqYvym18=
Subject key identifier: 02:B7:FD:6A:06:E8:09:A3:50:44:C7:82:AE:93:49:EA:A8:11:D6:7F
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 019D3977790CF8BB40711CB2F41682CD51D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
Manifest number: 0F78
Signing time: Sun 29 Mar 2026 12:00:24 +0000
Manifest this update: Sun 29 Mar 2026 12:00:24 +0000
Manifest next update: Mon 30 Mar 2026 12:00:24 +0000
Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: ZRgVg2iiGbLpCj5B8MnAPuqVNnlt3gbEfpXPG28lqyc=)
2: XpDHF6qNAfRig2NmPZIIBwNiNAU.roa (hash: 9bFU4KF8zp5CMrxC2WFBFW2SFIScv756NVWyJZFeI1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:79:0c:f8:bb:40:71:1c:b2:f4:16:82:cd:51:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: Mar 29 12:00:24 2026 GMT
Not After : Mar 30 12:00:24 2026 GMT
Subject: CN=02b7fd6a06e809a35044c782ae9349eaa811d67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:86:6c:c8:fe:35:77:c2:c1:2a:7c:19:73:
3b:32:f7:ac:6b:5c:63:3e:31:00:5c:5f:65:32:59:
7c:6f:11:3a:d8:44:44:45:10:04:54:22:25:74:f3:
cd:9c:06:ba:4b:eb:07:f7:7a:87:24:06:6d:20:b9:
83:d8:fb:14:a0:35:f0:37:b8:23:21:7c:38:12:78:
14:c2:b9:70:de:c9:e1:4a:a3:87:d1:6f:72:47:ca:
f2:da:da:ec:4b:12:9a:4a:17:22:1e:23:b7:31:1c:
e5:83:00:64:d0:05:a6:a3:d6:24:ab:9c:fa:3f:5c:
09:c0:04:89:19:74:89:da:56:36:6c:ab:ac:46:15:
1e:a6:5e:8f:b0:a1:3c:0e:d6:db:56:05:97:8e:3b:
24:d3:b3:38:5f:7c:4a:b8:98:5c:33:c5:f3:c0:b5:
94:26:92:b7:1e:e1:94:1b:72:c3:e6:fe:d2:31:b9:
d6:be:8a:41:1c:22:6e:b0:4d:5e:5f:e6:be:43:50:
6d:56:2a:85:fa:f2:50:5e:14:44:c0:ff:5b:8d:43:
a6:b8:49:0e:c0:98:bf:a0:b7:73:39:76:b9:cf:50:
5d:c0:de:5a:87:8a:6d:98:7e:de:23:3d:17:8f:87:
18:d1:a9:90:1e:72:c6:ca:66:c7:6a:85:29:6f:fe:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B7:FD:6A:06:E8:09:A3:50:44:C7:82:AE:93:49:EA:A8:11:D6:7F
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:17:c8:7d:95:9b:c0:a4:01:29:26:9c:9f:af:83:a7:a5:75:
99:d0:18:1f:86:5a:2a:74:2c:16:86:aa:2f:e5:7b:7b:62:7a:
c0:8d:71:6b:e0:33:ed:99:0c:d6:8a:fc:c1:bd:9c:28:af:85:
e3:6c:e6:75:a2:29:bc:b7:11:e4:dd:44:85:bb:70:65:b1:7d:
40:87:b6:d4:99:96:f9:49:d7:83:91:1a:50:4a:48:6a:50:30:
87:1c:8f:fd:8e:98:fc:ea:ec:60:a7:a7:a9:5b:c1:d2:da:ed:
55:45:1e:f0:4d:9d:fd:4e:08:19:8d:ae:68:99:28:f5:f2:8f:
84:e0:b3:0a:7b:4f:3e:70:09:dc:bb:3d:8f:08:4b:3e:45:e0:
f4:55:05:e6:f4:b1:99:2b:b9:ac:72:be:cf:8b:a9:c8:ac:6e:
98:3f:84:62:f1:bd:0b:6a:ec:7b:c7:5e:5b:ae:50:f6:a0:b7:
bd:c5:09:cb:61:a3:81:f9:15:45:69:7c:5c:19:23:a6:4e:0a:
98:70:c8:9e:ac:b9:bb:bb:2d:f1:37:7c:f3:9e:c7:2e:0a:a2:
ae:49:99:be:a6:9b:b3:f3:a5:88:3b:fe:e5:64:ac:72:76:71:
b7:a8:ab:5f:c6:0b:87:8a:7b:e9:74:d8:b1:ee:05:f6:da:00:
85:af:cf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:11:21 2026 by rpki-client