Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
File: DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft (raw, json)
Hash identifier: Q0c1WcoItYEzEwDX+RIP7CF7RYWg5Wq4VdRxAiOpP1w=
Subject key identifier: 03:45:77:5B:DE:ED:62:24:59:A1:25:CC:BF:C6:D6:5A:8F:4C:B4:A9
Authority key identifier: 0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
Certificate issuer: /CN=0d814a5f08fb47711d7160b027f996dfb612f045
Certificate serial: 019D389C42A2119885F59E87639AEE1C2E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
Manifest number: 17D4
Signing time: Sun 29 Mar 2026 08:00:57 +0000
Manifest this update: Sun 29 Mar 2026 08:00:57 +0000
Manifest next update: Mon 30 Mar 2026 08:00:57 +0000
Files and hashes: 1: DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl (hash: Tf0EwIBJtmRHlml2EpJvdnpHfXj80UZBWZWSsvXBcV0=)
2: hvrAoDLP-O8bFZV3A8_RKQudOis.roa (hash: 5pvq3N7LVgKGxK7NA9zvvsccRO2dQ9fcZlkpsYmHI4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:42:a2:11:98:85:f5:9e:87:63:9a:ee:1c:2e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d814a5f08fb47711d7160b027f996dfb612f045
Validity
Not Before: Mar 29 08:00:57 2026 GMT
Not After : Mar 30 08:00:57 2026 GMT
Subject: CN=0345775bdeed622459a125ccbfc6d65a8f4cb4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:a8:e1:bf:1c:6a:a2:8f:00:4c:ee:86:5c:
96:36:12:a8:91:90:31:9a:8b:99:27:c4:20:0c:93:
57:64:a1:d1:fb:fd:61:65:91:51:ca:43:10:00:95:
9a:ad:7e:93:c8:26:40:e8:73:79:d4:3c:f0:4f:fa:
5c:e5:fc:c7:ce:1f:c6:db:af:ed:e6:af:ec:d5:54:
30:cd:c9:42:e2:89:b4:cd:a2:ed:56:6c:c0:f7:82:
43:a7:a8:7a:1e:e6:0d:b5:f8:e6:d3:46:6f:66:b1:
ae:61:61:1b:6c:ea:c0:84:0e:17:2e:56:be:0b:d8:
c4:ec:a0:a9:2c:b9:79:d0:2b:bf:5e:bd:c9:d7:d7:
97:c6:0f:72:a6:f8:09:2d:c1:f7:c7:ed:8e:b4:02:
dc:6d:88:ed:e0:53:42:d2:05:89:91:e7:b8:1c:9c:
3b:d9:eb:16:55:27:0d:15:7d:90:e2:c7:2b:79:3a:
36:44:7a:d4:97:a4:dc:e3:b4:a7:ff:5d:79:f2:42:
1c:9f:57:25:fd:c7:e5:b6:66:15:a9:d6:dc:ef:c2:
57:5a:81:fd:47:3d:ba:ce:09:3f:a9:0a:71:9f:8c:
00:27:d1:ce:a6:c4:2a:ed:f8:f1:f8:c8:a9:90:26:
12:a2:55:16:da:f0:5a:9d:09:0d:09:19:67:6d:09:
5d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:45:77:5B:DE:ED:62:24:59:A1:25:CC:BF:C6:D6:5A:8F:4C:B4:A9
X509v3 Authority Key Identifier:
keyid:0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:dc:17:67:b5:92:26:da:c5:f2:41:37:0d:0e:5a:d6:e4:16:
e5:5c:f6:33:cb:89:6a:b6:87:ca:b8:94:e5:50:66:66:62:1d:
43:99:fe:f6:63:6b:01:9e:ca:d8:37:5a:f4:31:a8:5d:98:e2:
73:ec:53:f2:28:34:20:cd:a3:98:37:b4:00:28:4e:68:85:da:
23:27:6c:db:4b:84:a9:fe:3f:85:ee:0d:e4:ab:b0:b0:c1:26:
89:92:28:22:f9:82:81:ba:05:e3:65:cf:f8:0f:4f:fa:02:55:
df:10:39:7c:f2:0b:19:20:f2:a5:50:3a:fc:ba:4c:25:9e:a5:
7b:9a:af:f6:95:89:0e:7a:c7:b6:33:17:b0:b4:f7:4e:11:d1:
c4:d4:29:8b:63:c7:83:cf:86:81:7f:74:a6:4e:20:27:8e:c8:
be:eb:1f:61:61:a4:9f:23:f2:3a:10:64:80:c2:62:ae:e7:de:
54:63:5e:12:1d:d7:13:b9:fb:88:ec:cc:e4:a2:a2:fb:3c:c5:
cd:d6:78:4e:7c:3a:e8:45:e9:cc:26:32:d5:c3:81:3b:27:48:
f9:fb:5b:8c:9a:8c:d6:0a:f8:c6:77:e5:1e:b7:9d:eb:1b:64:
c7:54:17:a3:c1:bc:c0:cf:07:f7:1c:94:42:2d:39:5e:bc:44:
68:45:c2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:46 2026 by rpki-client