Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: PmgATttoA7U4uiejffaNc3iCdNaEMqEbWODlp0ojSDo=
Subject key identifier: 0F:62:9B:5E:D3:F1:C8:70:C6:A5:71:C0:42:C4:E9:D2:03:86:8A:45
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 019D1D5D16A4D25BF920E936A980969FE232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 1885
Signing time: Tue 24 Mar 2026 01:02:13 +0000
Manifest this update: Tue 24 Mar 2026 01:02:13 +0000
Manifest next update: Wed 25 Mar 2026 01:02:13 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: VA0BY2zOWmv93GNrKweimhaevg09iZO3KXxHA74gnkA=)
2: xRmmdqH1-j--sEXPtnNY3Z-R5Zo.roa (hash: 3OUa7VjiPRdUyQdSMo547+vkOocCdI86key02w1U7/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1d:5d:16:a4:d2:5b:f9:20:e9:36:a9:80:96:9f:e2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Mar 24 01:02:13 2026 GMT
Not After : Mar 25 01:02:13 2026 GMT
Subject: CN=0f629b5ed3f1c870c6a571c042c4e9d203868a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:fa:a7:cb:c8:5e:24:cf:67:ef:65:3f:c1:
e4:f9:28:4c:31:31:d9:ad:8f:ca:7b:5b:f6:f0:6c:
cd:c3:db:01:ea:ae:59:b3:3e:52:4c:1b:b5:48:63:
d0:72:4e:b8:19:81:b0:ae:7c:28:1d:5c:0f:fe:22:
46:a5:3a:b9:af:6c:6f:7d:00:89:30:39:e8:21:7d:
93:2c:4b:7d:ca:b7:6b:ef:d1:fa:44:6b:71:26:92:
0f:65:9a:3e:e8:3a:63:cc:30:a3:c0:a0:6f:51:01:
8a:46:ae:e9:da:63:93:9a:a3:ad:69:04:7f:27:99:
66:c2:dc:6a:8f:a9:8a:b7:54:ea:1f:ec:69:35:a9:
e2:33:12:b4:e6:f6:85:3f:4b:bc:44:65:be:a7:87:
29:ee:6e:bd:b8:af:08:ce:90:65:24:af:f6:b5:c7:
8e:35:39:3c:08:a0:b0:ce:2d:b0:a9:c8:c6:24:d5:
93:41:d6:36:74:73:5f:e6:e4:d1:72:b3:5c:8d:ac:
14:b5:dd:45:da:0e:3a:e3:8d:6b:52:5a:25:7f:f5:
5d:1f:ec:77:0a:05:5d:53:3f:4e:f4:cd:cd:82:3a:
71:41:df:36:a4:bc:fb:38:cb:6b:4c:60:c3:04:9b:
76:8d:65:c5:2e:72:db:8a:a5:01:01:6e:d7:67:5f:
a7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:62:9B:5E:D3:F1:C8:70:C6:A5:71:C0:42:C4:E9:D2:03:86:8A:45
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ed:1e:17:cc:4e:d9:9b:a6:90:6d:30:19:62:f3:af:e0:91:
68:ed:f4:87:ed:59:c6:66:71:22:20:cd:75:0b:23:ac:91:08:
0d:5f:fa:d3:27:26:65:87:8f:ad:b8:62:34:c2:4e:cb:d6:dc:
09:cf:9b:73:a7:31:89:c2:a2:5e:59:83:55:38:c3:b2:cd:df:
d8:48:a2:b6:b7:53:98:26:77:46:aa:6e:e9:5b:1c:e3:99:26:
f0:ed:95:68:9d:32:f7:b1:61:36:09:33:55:de:2f:5f:22:70:
d1:c2:b3:a7:8e:f8:ba:24:f3:c3:bd:f5:1f:3b:72:ba:e2:ff:
ce:24:0e:dc:1c:c2:da:d0:79:90:2c:5c:96:32:10:14:a6:cb:
6d:f3:38:67:62:e6:f7:c0:ed:2e:28:9a:fc:b6:17:af:66:60:
b7:01:38:aa:af:2e:fc:88:6a:eb:73:81:8f:8b:14:f1:11:47:
96:12:59:ac:cc:27:ee:47:a0:a4:91:97:e1:97:54:ad:73:f9:
c7:d0:53:d7:92:00:17:45:84:c2:bf:7e:14:2a:e3:4e:18:93:
de:59:30:d1:c4:2b:73:41:d2:30:ed:de:3c:ca:c3:65:67:57:
6e:76:b6:8f:4b:ab:a2:b4:d0:3d:81:e7:56:64:09:d9:43:63:
17:e5:16:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 05:02:12 2026 by rpki-client