Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
File: Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft (raw, json)
Hash identifier: UPpvtU8wYpX2JEANZQwiZJS6aJ8NcPB9h1tRd4UjmQI=
Subject key identifier: 29:2C:E3:B2:F5:97:5C:54:AF:DA:89:BE:11:9E:A2:52:04:FF:96:08
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 019F190CAE0C3A0BA86E75E0EE9E6F5B592B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
Manifest number: 1238
Signing time: Tue 30 Jun 2026 15:01:28 +0000
Manifest this update: Tue 30 Jun 2026 15:01:28 +0000
Manifest next update: Wed 01 Jul 2026 15:01:28 +0000
Files and hashes: 1: Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl (hash: Cbj6zzrzZo1cbTlGTeqoRI1tz9pdRi2mlhu3bnh0u0A=)
2: PsWp9xa53jWoAHdPeTK2Ik_zisE.roa (hash: FqYGJ8eq8LBylqBU2znfr/5XrCV20Sm8u8t86Ik5QN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:ae:0c:3a:0b:a8:6e:75:e0:ee:9e:6f:5b:59:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Jun 30 15:01:28 2026 GMT
Not After : Jul 1 15:01:28 2026 GMT
Subject: CN=292ce3b2f5975c54afda89be119ea25204ff9608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:7e:d8:03:ae:7b:e7:2f:52:f2:49:47:34:
14:90:52:d7:3c:9d:61:e6:e6:4d:0d:ab:46:5a:b7:
b5:28:22:0b:f8:0b:0a:c5:99:a4:d5:ca:bf:a3:c3:
b7:b4:5e:cb:41:48:75:77:65:29:fa:26:8e:d5:6d:
35:a7:57:2e:fc:43:b8:2b:5b:68:12:af:93:8b:4f:
93:11:53:88:05:24:06:eb:9a:12:ce:63:5b:61:29:
59:35:50:ed:f2:ba:93:a4:96:0f:25:4c:0f:a9:9e:
87:31:ed:fa:2a:83:30:99:23:ee:f1:c8:c7:25:32:
79:5b:cc:80:db:1c:43:d2:6f:33:a7:cc:0f:9f:83:
cf:b5:28:88:9b:34:9e:dc:f5:7b:4b:54:ca:05:e4:
e7:c4:d6:76:e3:91:21:fc:6d:df:aa:3e:fa:04:f5:
6b:42:5a:7d:1f:7d:06:ed:28:87:ed:e1:fe:9d:0a:
66:5a:b5:52:a3:7c:4d:60:4f:b3:c5:55:93:33:4b:
f0:2d:fd:20:a2:4f:6a:79:c1:10:0f:0c:f0:a3:08:
23:7b:51:bf:5e:64:14:27:77:b3:43:10:6f:e9:f8:
9a:c9:a3:ce:6d:d2:9c:62:3d:c5:94:5b:32:0e:a4:
83:19:bd:65:25:59:b7:49:15:cf:fa:1f:f4:35:51:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2C:E3:B2:F5:97:5C:54:AF:DA:89:BE:11:9E:A2:52:04:FF:96:08
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:51:68:21:50:9d:b6:5a:19:17:97:34:84:06:69:50:a9:97:
0c:34:4b:b6:de:46:03:cb:c1:df:b3:0c:94:ab:17:f4:7e:1a:
c6:35:41:de:7e:ec:aa:25:fb:f5:45:36:84:35:8f:f2:8f:96:
87:f1:9d:c5:cc:98:5d:fb:37:5f:cf:9f:83:94:a3:3c:57:65:
95:e3:87:a3:17:b8:7d:16:66:45:ce:2a:92:09:86:f4:2f:79:
5a:cf:6b:41:f0:b3:c0:63:77:b0:53:f0:0c:92:db:68:e8:63:
98:52:e8:8d:08:fc:80:2b:d4:fa:2f:e3:a7:3e:03:b6:55:cc:
f7:49:b8:da:63:98:dc:e3:ae:b8:80:76:73:74:19:a6:f6:cf:
a4:59:8c:6a:7c:67:7f:e3:08:03:b7:df:e7:5e:6c:cf:61:59:
9f:79:69:34:53:a7:a7:f9:ea:aa:24:b1:93:54:08:2b:1e:ff:
a4:1f:7f:aa:0e:21:73:4d:b6:8f:40:0c:33:f1:ed:78:da:2f:
f5:5d:92:65:d1:14:26:33:ef:ee:89:29:17:df:e8:15:d3:9c:
33:8a:ad:c2:35:70:df:b2:89:a4:4d:a4:46:ab:ff:bb:11:dc:
65:39:27:1a:49:46:77:56:93:34:e2:d8:0f:d3:d3:50:3d:18:
07:4d:a6:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDK4MOguobnXg7p5vW1krMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMmY4YjJiOTQ3MjFlOTI4ZjYxODhiNWNmMTUwNTMxNDRk
ZWRmOGMwHhcNMjYwNjMwMTUwMTI4WhcNMjYwNzAxMTUwMTI4WjAzMTEwLwYDVQQD
EygyOTJjZTNiMmY1OTc1YzU0YWZkYTg5YmUxMTllYTI1MjA0ZmY5NjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJN+2AOue+cvUvJJRzQUkFLXPJ1h
5uZNDatGWre1KCIL+AsKxZmk1cq/o8O3tF7LQUh1d2Up+iaO1W01p1cu/EO4K1to
Eq+Ti0+TEVOIBSQG65oSzmNbYSlZNVDt8rqTpJYPJUwPqZ6HMe36KoMwmSPu8cjH
JTJ5W8yA2xxD0m8zp8wPn4PPtSiImzSe3PV7S1TKBeTnxNZ245Eh/G3fqj76BPVr
Qlp9H30G7SiH7eH+nQpmWrVSo3xNYE+zxVWTM0vwLf0gok9qecEQDwzwowgje1G/
XmQUJ3ezQxBv6fiayaPObdKcYj3FlFsyDqSDGb1lJVm3SRXP+h/0NVFc+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCks47L1l1xUr9qJvhGeolIE/5YIMB8GA1UdIwQY
MBaAFA8viyuUch6Sj2GItc8VBTFE3t+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHktTEs1UnlIcEtQWVlpMXp4VUZNVVRlMzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80ZTU5MDItZTI4My00OTE2LWEzM2Mt
NzIyNmE4ODQ1ZTAxLzEvRHktTEs1UnlIcEtQWVlpMXp4VUZNVVRlMzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi80ZTU5MDItZTI4My00OTE2LWEzM2MtNzIyNmE4ODQ1ZTAx
LzEvRHktTEs1UnlIcEtQWVlpMXp4VUZNVVRlMzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVFoIVCd
tloZF5c0hAZpUKmXDDRLtt5GA8vB37MMlKsX9H4axjVB3n7sqiX79UU2hDWP8o+W
h/GdxcyYXfs3X8+fg5SjPFdlleOHoxe4fRZmRc4qkgmG9C95Ws9rQfCzwGN3sFPw
DJLbaOhjmFLojQj8gCvU+i/jpz4DtlXM90m42mOY3OOuuIB2c3QZpvbPpFmManxn
f+MIA7ff515sz2FZn3lpNFOnp/nqqiSxk1QIKx7/pB9/qg4hc022j0AMM/HteNov
9V2SZdEUJjPv7okpF9/oFdOcM4qtwjVw37KJpE2kRqv/uxHcZTknGklGd1aTNOLY
D9PTUD0YB02m0g==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:51 2026 by rpki-client