Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
File: Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft (raw, json)
Hash identifier: 9BOl2qk9oGe2xO1lZZL4FGj6nauOpw2a2QqoMgiYuGU=
Subject key identifier: 0F:46:7A:C4:74:91:BC:4E:97:FC:16:9C:B3:89:30:38:DB:A0:4C:A1
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 01A13D80E0DAFBF3D08CA82C374550CBAD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
Manifest number: 1354
Signing time: Thu 15 Oct 2026 03:00:18 +0000
Manifest this update: Thu 15 Oct 2026 03:00:18 +0000
Manifest next update: Fri 16 Oct 2026 03:00:18 +0000
Files and hashes: 1: Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl (hash: XIW1qxszgNUURjC88xBq7F+0z/LI5lIy7dOsaaH10PM=)
2: PsWp9xa53jWoAHdPeTK2Ik_zisE.roa (hash: FqYGJ8eq8LBylqBU2znfr/5XrCV20Sm8u8t86Ik5QN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:80:e0:da:fb:f3:d0:8c:a8:2c:37:45:50:cb:ad:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Oct 15 03:00:18 2026 GMT
Not After : Oct 16 03:00:18 2026 GMT
Subject: CN=0f467ac47491bc4e97fc169cb3893038dba04ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:d7:3e:31:98:20:34:7b:31:a5:e3:59:58:
87:b4:e3:84:eb:03:96:35:e2:55:85:ca:6e:5a:62:
ee:01:b0:80:3b:73:98:9f:df:52:c2:25:9e:fd:d0:
af:34:5f:bb:2c:df:6d:4e:f9:e5:87:62:4f:e0:b1:
16:ba:6e:60:d5:ba:21:a1:d8:98:85:d6:7f:64:9d:
fe:9e:3f:a2:81:80:5d:44:4b:9e:9d:03:04:4b:de:
9f:03:14:d8:51:11:6a:30:83:c2:d3:91:43:3b:48:
29:97:19:89:ad:0b:4d:17:f6:0f:ba:0c:f4:06:4f:
eb:a6:2e:0d:bf:75:b1:3b:af:a8:43:cb:cb:36:08:
3a:00:89:9e:55:fb:b2:5b:2e:fc:7b:7c:c5:09:b5:
f4:93:69:f4:45:aa:c2:7e:a9:45:b5:62:99:66:05:
23:bd:53:3a:a6:1b:ee:ad:19:93:6a:be:19:06:c4:
73:1c:89:e0:ef:d4:eb:8f:ea:91:48:5f:f3:00:84:
18:cd:33:e7:92:1c:ba:79:6b:9e:30:16:1a:19:73:
28:8c:92:cf:b4:73:dc:cb:b7:39:a7:19:97:2f:31:
88:0d:60:d3:43:91:0e:8d:03:45:d4:0d:56:16:2b:
44:53:13:14:f6:fd:d9:66:c5:ba:b6:f4:43:d4:3f:
5f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:46:7A:C4:74:91:BC:4E:97:FC:16:9C:B3:89:30:38:DB:A0:4C:A1
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:08:3a:fd:fb:b4:4c:89:52:53:79:06:20:54:9b:5a:73:54:
e0:7b:34:60:64:4d:eb:38:39:df:0c:51:0f:95:06:b1:28:a6:
6e:28:04:9e:0a:2b:e3:bc:64:85:6a:01:a6:9c:e9:0f:03:53:
2e:99:3d:be:63:aa:70:1d:70:c0:a9:51:ee:aa:00:57:10:ae:
f7:4b:59:5a:ac:dc:ee:87:7b:9f:74:65:3b:9f:fe:77:87:37:
d3:9d:ff:90:51:ff:02:3e:2e:02:f4:ec:ac:b4:5a:24:de:68:
37:1c:e3:67:68:b6:6b:3a:26:60:b0:0d:b8:52:64:ff:ab:bf:
53:02:1e:9e:bd:ea:95:54:05:1e:7a:8d:b5:81:63:89:18:17:
8b:ac:d9:0b:c1:b8:9a:6e:56:d2:b7:3e:32:df:35:8b:b4:c5:
dc:eb:b8:01:4b:84:b0:11:b4:8f:67:ab:e0:ee:44:e6:bf:1a:
a9:a5:d9:d4:67:f6:50:c3:35:b4:7b:a6:75:e6:cc:da:ce:a4:
30:d7:54:1c:3f:0d:83:d0:e7:4b:25:5d:08:fc:d6:55:f0:b7:
05:2a:94:98:af:49:7f:b6:67:d7:6c:7f:11:de:e9:3d:89:5a:
b6:e2:62:06:d7:23:fc:58:c7:f1:48:69:c8:9a:81:c4:b5:2c:
32:56:b6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:06 2026 by rpki-client