
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.mft
File: DY05iX3-Ia7thQlskKRzlvyknUE.mft (raw, json)
Hash identifier: JiXWCwYcutzBm1/3GgimGv/yrjul2zFRg/ZtkGPn5xA=
Subject key identifier: C2:D3:34:7F:1E:55:45:77:0D:0F:67:BE:B6:E7:5B:75:D8:D1:57:57
Authority key identifier: 0D:8D:39:89:7D:FE:21:AE:ED:85:09:6C:90:A4:73:96:FC:A4:9D:41
Certificate issuer: /CN=0d8d39897dfe21aeed85096c90a47396fca49d41
Certificate serial: 01A00100DF891720C7F488813232819D3AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY05iX3-Ia7thQlskKRzlvyknUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.mft
Manifest number: 198E
Signing time: Fri 14 Aug 2026 16:00:29 +0000
Manifest this update: Fri 14 Aug 2026 16:00:29 +0000
Manifest next update: Sat 15 Aug 2026 16:00:29 +0000
Files and hashes: 1: DY05iX3-Ia7thQlskKRzlvyknUE.crl (hash: klkZXwFg/2HDzLCI9gFhsaTWFquwi04lhxwYONVB09Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY05iX3-Ia7thQlskKRzlvyknUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:00:df:89:17:20:c7:f4:88:81:32:32:81:9d:3a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8d39897dfe21aeed85096c90a47396fca49d41
Validity
Not Before: Aug 14 16:00:29 2026 GMT
Not After : Aug 15 16:00:29 2026 GMT
Subject: CN=c2d3347f1e5545770d0f67beb6e75b75d8d15757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9f:fa:9e:c3:7f:93:90:3d:dc:69:54:34:76:
90:db:b3:59:fc:da:0b:df:7f:f9:d9:60:5c:bd:d5:
c4:ee:fc:f9:41:33:10:9b:22:fc:1c:d7:26:94:42:
5b:f3:10:17:97:13:1f:d7:72:58:16:97:05:01:de:
a2:8c:19:f8:7a:f3:8b:d8:bd:91:39:ae:3e:e5:f2:
4e:6c:df:4e:81:a3:4d:f6:1f:cc:0c:4a:05:00:2a:
b5:ce:b8:c5:e3:22:4d:28:e1:53:00:ab:ff:b8:59:
2b:88:b0:5b:d5:89:a6:3d:d8:28:dd:e5:86:77:a0:
2a:27:ee:3d:46:12:4f:23:b7:24:7b:ca:bf:8e:4e:
ae:ac:94:9c:94:b2:e5:5f:12:84:8f:33:70:37:93:
25:c4:be:0e:e3:85:0a:85:b6:bb:93:87:a4:fc:cf:
31:a7:5e:d2:69:8d:1e:5f:72:7f:cc:48:2e:4d:3b:
05:5b:7e:73:4c:f4:98:f7:f2:90:78:04:28:6a:98:
9f:a0:eb:08:7d:06:1b:f4:48:78:47:d4:4a:70:49:
db:a4:7f:82:5b:ff:a2:ec:93:ee:a6:e2:c6:85:ec:
55:24:95:d2:5a:de:b6:37:c9:cc:b6:5c:43:fb:d1:
54:87:96:38:ec:da:5a:7c:f0:a0:be:8c:8a:8f:6f:
27:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D3:34:7F:1E:55:45:77:0D:0F:67:BE:B6:E7:5B:75:D8:D1:57:57
X509v3 Authority Key Identifier:
keyid:0D:8D:39:89:7D:FE:21:AE:ED:85:09:6C:90:A4:73:96:FC:A4:9D:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY05iX3-Ia7thQlskKRzlvyknUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:22:5b:ea:49:b3:07:c0:f8:41:3f:bb:39:58:3e:aa:fb:b4:
f2:30:55:c8:98:f7:4d:82:ce:ec:ff:b9:e5:7d:7f:f0:88:96:
6a:26:cc:83:1d:14:3d:6f:27:17:27:54:65:82:73:ba:1e:57:
dd:c7:8a:2b:2b:4e:a2:35:40:7a:34:b8:f2:99:46:71:b3:3e:
fa:5c:8f:10:2e:88:ab:ac:24:59:b0:55:45:a5:95:cb:76:d3:
7a:75:ab:7e:39:94:aa:ae:e2:a6:76:c5:3c:b2:1e:e1:30:9a:
82:7a:bd:81:43:d8:b5:87:b8:41:2c:24:3f:a2:bc:7c:34:c6:
38:32:7a:71:34:cf:b5:5d:4d:df:36:9b:da:02:9e:a5:ec:93:
06:84:57:89:3a:97:d0:27:35:9d:26:fa:2d:9a:e5:d4:bd:c5:
54:af:d2:11:98:34:5a:8d:3e:b3:31:c5:71:67:4c:de:a3:d2:
0c:cb:6b:4f:3d:79:94:94:8f:f5:60:54:05:ce:9a:0c:48:7a:
0a:a7:e9:15:1d:be:84:fc:19:e4:82:a9:45:b9:3c:20:58:06:
f6:b2:14:24:3d:c7:75:e9:80:95:47:e8:2b:b5:08:bd:27:7b:
07:49:af:90:01:c3:12:01:08:6e:2f:03:4b:97:3b:03:32:92:
30:15:1a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:32:04 2026 by rpki-client