Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.mft
File: DY05iX3-Ia7thQlskKRzlvyknUE.mft (raw, json)
Hash identifier: 7X1/m6+7ZKgSTRuA5rY1kKBLFvJaAXh7Htcxc/uDRcg=
Subject key identifier: A5:F2:85:E6:38:F0:0C:C3:09:21:91:9E:B7:F8:CE:37:5F:9F:D3:D4
Authority key identifier: 0D:8D:39:89:7D:FE:21:AE:ED:85:09:6C:90:A4:73:96:FC:A4:9D:41
Certificate issuer: /CN=0d8d39897dfe21aeed85096c90a47396fca49d41
Certificate serial: 01A13DB891253642E9088BAEAE98B4A95438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY05iX3-Ia7thQlskKRzlvyknUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.mft
Manifest number: 1A32
Signing time: Thu 15 Oct 2026 04:01:08 +0000
Manifest this update: Thu 15 Oct 2026 04:01:08 +0000
Manifest next update: Fri 16 Oct 2026 04:01:08 +0000
Files and hashes: 1: DY05iX3-Ia7thQlskKRzlvyknUE.crl (hash: nqy/Yk63Zc9XgU5vrBUNBxkT13sdSfA9U3q5fExQSlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY05iX3-Ia7thQlskKRzlvyknUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:91:25:36:42:e9:08:8b:ae:ae:98:b4:a9:54:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8d39897dfe21aeed85096c90a47396fca49d41
Validity
Not Before: Oct 15 04:01:08 2026 GMT
Not After : Oct 16 04:01:08 2026 GMT
Subject: CN=a5f285e638f00cc30921919eb7f8ce375f9fd3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e7:15:a0:83:c0:12:91:73:7a:18:03:7c:be:
49:09:b0:8a:0c:39:24:0e:be:18:19:57:e1:b2:74:
c6:e3:b6:8e:31:bd:f9:db:d3:a1:b0:50:7b:ef:7e:
53:d7:73:f2:d1:eb:c1:d6:14:78:bf:65:1b:ab:f9:
f5:2d:32:55:e5:5c:c2:62:40:c6:40:d0:82:0c:68:
cc:15:72:77:ba:a2:69:84:58:14:78:56:f3:6c:72:
0a:0e:e3:e7:34:be:e8:54:da:26:b6:c4:41:7e:24:
33:a1:2a:b2:87:d8:d2:05:39:05:2d:01:09:19:e2:
b5:14:47:a4:a2:ee:95:6f:39:21:40:3a:6e:2d:fd:
6e:2c:e1:88:ae:5e:04:ba:c8:e9:30:0d:70:67:98:
39:bd:5a:8a:34:35:49:5a:1d:a3:d7:47:60:53:f4:
f4:e0:fa:fa:b4:13:ee:c0:88:54:01:d6:64:73:57:
22:0a:72:3e:9e:34:74:23:ab:b2:36:6b:c5:bb:8a:
2b:eb:b3:4c:22:12:87:50:b3:45:18:e4:b0:8f:1c:
eb:52:66:2e:ea:a4:1a:7d:c0:a0:1d:41:1e:de:b0:
f4:f4:af:33:d4:4f:a5:95:81:94:3c:ed:23:bd:cf:
41:33:e9:e8:90:ab:54:a1:3a:e7:17:87:8f:bb:67:
ae:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F2:85:E6:38:F0:0C:C3:09:21:91:9E:B7:F8:CE:37:5F:9F:D3:D4
X509v3 Authority Key Identifier:
keyid:0D:8D:39:89:7D:FE:21:AE:ED:85:09:6C:90:A4:73:96:FC:A4:9D:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY05iX3-Ia7thQlskKRzlvyknUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:85:53:c5:36:1e:9b:90:bf:6c:27:99:5b:8b:48:68:74:79:
b8:50:2c:85:62:c3:cf:f2:c3:5e:bd:7d:c3:68:97:08:74:4c:
11:59:90:a8:5f:89:0c:fe:9f:65:31:be:b0:3a:2b:b1:f3:ad:
e4:20:5f:d4:30:35:9c:e5:8b:65:d9:65:40:31:5e:12:96:85:
37:a7:85:82:4d:20:8a:fd:44:3c:a5:f3:57:88:35:5e:a4:1a:
c0:3d:ab:90:16:8a:71:a7:21:68:3a:35:e4:a0:1e:be:92:24:
e6:d3:e1:4b:23:81:1b:d7:7f:23:f6:fa:f7:94:0e:e6:a2:c6:
6b:df:48:b9:b5:0d:f2:a1:65:f0:85:6e:ad:3c:78:c2:f7:10:
58:70:31:0a:1a:27:a3:b6:1f:39:54:85:0e:1e:6b:ef:f8:59:
28:8c:4b:2a:f6:67:ad:69:c2:96:fd:97:b9:e0:d3:6f:c7:9e:
e0:b0:e9:fd:e3:59:b4:ea:86:10:f0:29:0e:3a:fd:6b:4f:f0:
4d:65:4b:c0:22:b4:d8:22:fb:4f:93:26:ef:6c:37:cc:c3:68:
43:ad:51:f7:84:38:71:55:84:31:16:bb:43:16:a1:99:1e:ab:
12:29:31:6b:80:98:1c:cf:f7:de:2e:07:04:2f:0e:a9:8a:e4:
7d:64:d2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:21:36 2026 by rpki-client