Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
File: Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft (raw, json)
Hash identifier: XANW8CSW1pSoXBJoeBPuPC25rPEmOaM6u446dIQRySE=
Subject key identifier: 0F:75:1C:0B:9E:63:7F:67:44:02:49:F4:83:4B:D9:BA:41:EF:83:C8
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 019D382E87EA03262EABAD21E6ECB7FE9E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
Manifest number: 113F
Signing time: Sun 29 Mar 2026 06:01:06 +0000
Manifest this update: Sun 29 Mar 2026 06:01:06 +0000
Manifest next update: Mon 30 Mar 2026 06:01:06 +0000
Files and hashes: 1: Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl (hash: fAcgLW/JdDxNTI+LUBfECWB1EKdH2UBYJ6gToB6Fj6Q=)
2: PsWp9xa53jWoAHdPeTK2Ik_zisE.roa (hash: FqYGJ8eq8LBylqBU2znfr/5XrCV20Sm8u8t86Ik5QN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:87:ea:03:26:2e:ab:ad:21:e6:ec:b7:fe:9e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Mar 29 06:01:06 2026 GMT
Not After : Mar 30 06:01:06 2026 GMT
Subject: CN=0f751c0b9e637f67440249f4834bd9ba41ef83c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e7:8f:34:42:06:b3:3a:25:8c:3c:16:ec:28:
2b:be:91:57:ed:06:65:ca:cd:34:2a:30:cc:41:f3:
84:0c:60:3d:9a:4f:21:e3:b5:23:60:f2:c1:a0:40:
61:ad:4d:ee:14:29:53:7f:e5:b4:67:d9:ba:67:44:
7d:71:28:2b:bf:01:18:a7:e7:1f:ca:a2:33:65:e5:
39:b9:3e:6d:a8:ef:2a:19:28:fd:cb:a0:5b:d9:91:
24:5e:f7:e5:de:c5:a7:d0:e2:e4:f3:41:71:3a:47:
20:e4:33:cd:25:ee:cf:59:93:47:ea:eb:4d:32:bc:
c0:e5:c4:bb:2c:72:03:09:4e:19:5b:62:7b:54:0c:
f6:51:d5:15:dd:40:00:38:1b:01:4a:17:04:61:4b:
2d:2e:5f:a8:ad:6f:1c:5b:67:01:bc:be:0a:81:9d:
b5:9a:bf:8a:ef:74:97:9b:8a:eb:c0:5b:6c:f3:4f:
b1:dc:ff:49:bb:c9:e1:c8:5d:7c:3b:29:8b:eb:e3:
56:bb:25:0e:59:7c:5e:7d:cb:ec:85:3a:f8:52:f1:
74:12:ec:f3:97:bc:02:23:63:f6:c1:14:76:04:8e:
5e:2b:ec:a2:c9:52:68:f2:67:43:9e:e3:60:6d:cc:
15:23:db:81:96:b2:57:bc:71:c0:2a:cf:6b:63:89:
51:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:75:1C:0B:9E:63:7F:67:44:02:49:F4:83:4B:D9:BA:41:EF:83:C8
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:69:21:cb:fa:94:ce:49:cf:fa:d9:58:ff:17:57:b3:51:ca:
83:97:03:a0:8d:aa:84:be:33:ea:47:bf:b4:6c:8a:40:4c:f6:
13:40:af:8b:cf:36:6d:f1:a9:9b:cd:d6:31:d6:f9:72:04:a3:
7b:3a:99:1a:16:4b:f1:03:3c:11:d3:65:9e:d0:e3:e1:5f:b8:
c0:4e:34:fd:78:84:ff:4d:af:db:94:d2:43:a7:a1:c8:82:51:
4b:0e:03:19:64:51:d0:13:0c:7e:f1:d3:c8:76:47:09:f6:17:
a1:0e:ed:5a:6a:3b:ca:5a:22:48:aa:fb:2b:cf:79:ab:22:09:
d5:fe:60:f5:a6:6f:c4:4c:9a:c7:60:9a:af:16:f2:27:f0:77:
6b:ca:9e:24:07:ec:46:e0:98:3e:c2:be:07:ce:c1:e7:ae:97:
6f:50:31:f2:24:27:60:09:cf:66:65:8f:46:43:ec:02:fe:3e:
92:78:ba:7b:c2:8b:71:57:62:45:1d:e8:eb:87:5e:d9:f2:ae:
a0:c6:d3:81:ee:79:5e:1a:77:d4:7d:fb:d3:72:eb:98:70:2d:
33:e9:86:ea:4f:25:63:d5:08:53:1c:1a:ed:e4:af:23:71:c9:
b5:b7:c5:9b:b4:8a:ac:f0:90:dc:18:61:88:33:ee:fe:43:99:
0c:e8:b5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:06 2026 by rpki-client