Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
File: dkyOsD7yMmpiDfEAVI0fBth0VRo.mft (raw, json)
Hash identifier: tuFJmiHWObFBYEoQ5XG4V/qMdHY8m8VHkHg4t5xBJKY=
Subject key identifier: A0:15:0A:34:F8:E2:CB:55:DD:43:63:75:81:FF:A8:78:C7:FB:6B:97
Authority key identifier: 76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
Certificate issuer: /CN=764c8eb03ef2326a620df100548d1f06d874551a
Certificate serial: 019D36E5270475D26A3C11B5A9D4A65E58FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
Manifest number: 1144
Signing time: Sun 29 Mar 2026 00:01:20 +0000
Manifest this update: Sun 29 Mar 2026 00:01:20 +0000
Manifest next update: Mon 30 Mar 2026 00:01:20 +0000
Files and hashes: 1: dkyOsD7yMmpiDfEAVI0fBth0VRo.crl (hash: tTFcgzkNhy5do7biD7mc16/5ACh7FCx1txq7t6qpCEw=)
2: lM6EAL5jH7m-VanbJUJalubT-ik.roa (hash: QmjnVhkdEYUR4RGhNidEfs1iFjkT7cSO1WErzN3tuIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:27:04:75:d2:6a:3c:11:b5:a9:d4:a6:5e:58:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764c8eb03ef2326a620df100548d1f06d874551a
Validity
Not Before: Mar 29 00:01:20 2026 GMT
Not After : Mar 30 00:01:20 2026 GMT
Subject: CN=a0150a34f8e2cb55dd43637581ffa878c7fb6b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:2b:2e:93:7c:c1:2f:d5:76:70:3e:9e:3f:
3d:51:31:e6:1a:dd:cb:54:76:24:0c:39:c8:42:cc:
4e:b1:cd:fb:10:2c:69:e9:f5:d9:18:07:df:93:7a:
78:f2:d6:e6:ad:82:10:35:d2:3c:e6:53:d2:21:91:
65:bf:bd:82:c8:45:05:f6:c9:b0:96:b9:2a:2c:e4:
60:4f:a8:74:b6:26:a6:d3:c8:82:79:26:d2:f5:33:
54:76:31:21:5a:38:f2:21:14:93:6a:b9:ce:4d:0b:
1d:ef:35:ba:45:29:0e:7f:30:4b:99:44:dd:e7:fb:
05:48:65:63:ac:02:b4:46:41:a6:e6:62:04:a5:b3:
a9:b8:0b:63:ba:4a:0d:58:92:ac:30:9a:e4:e8:2b:
3e:86:42:ab:04:e0:d8:97:58:21:60:9e:a4:56:cb:
4e:55:f4:d5:6f:c8:a6:e3:1a:ca:5b:0a:ee:ec:45:
69:6e:dc:a8:b9:f8:1e:76:5e:2a:27:0d:93:aa:99:
78:21:be:59:98:64:37:f1:97:01:80:46:6b:c3:f3:
aa:de:ae:db:44:11:aa:1f:ec:f2:87:5d:21:b2:2e:
c3:c6:e4:e1:7a:74:89:de:46:73:3e:e6:8a:1b:70:
5c:b6:ec:73:fb:4d:7f:ac:f9:7b:14:36:ae:83:71:
c5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:15:0A:34:F8:E2:CB:55:DD:43:63:75:81:FF:A8:78:C7:FB:6B:97
X509v3 Authority Key Identifier:
keyid:76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5b:8e:ed:93:47:41:05:85:d0:fe:8e:ab:2f:a7:6d:df:63:
98:f1:a5:ab:09:9f:2a:80:46:4b:e0:8b:37:f9:cf:26:1e:81:
2a:fb:b3:c7:6c:41:00:85:64:7c:aa:ee:d0:16:ed:8f:df:05:
d7:03:ce:e6:f3:71:4f:ec:86:e2:9b:e0:fe:10:45:76:b8:7a:
cd:27:5a:09:fb:26:31:6e:bd:ab:fc:de:0e:91:0e:3a:fe:ec:
b0:cd:0d:59:b4:6a:20:75:61:e7:1c:e3:12:80:2b:e9:72:21:
91:53:f2:7a:2e:78:88:e7:b4:d7:c6:ff:f1:bd:e8:47:db:d0:
f6:1e:db:de:c6:14:3e:53:f4:ad:18:4b:58:04:34:91:85:ff:
db:68:58:2d:59:45:9a:69:a7:ac:b5:d4:32:e7:18:b4:92:c0:
fb:a1:b3:d8:b3:6b:d7:e6:e7:19:23:f8:74:ac:7d:d3:88:51:
58:9a:8d:f0:dd:b1:2c:88:26:4b:90:69:65:30:c7:0f:38:11:
2c:0d:3b:ff:c6:4f:cd:b5:3f:d1:8a:34:8d:e1:6d:6d:67:7b:
43:bd:aa:9d:c3:74:b5:ef:fc:3b:ca:71:90:1e:03:58:7d:d2:
2e:30:94:85:22:7f:9a:62:87:01:66:9d:df:2c:1f:31:ae:e3:
2b:ea:cb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:40 2026 by rpki-client