Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
File: dygVWFa4zk2F-NpPbTWwVbMNvTw.mft (raw, json)
Hash identifier: W3sAkmH7yv/K/N18+KtA56W3lP6MLjVG231R4h+FBcA=
Subject key identifier: 44:C0:B7:32:A0:5A:B4:3C:42:9C:1D:9A:B0:14:86:2C:7E:3F:EE:F1
Authority key identifier: 77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C
Certificate issuer: /CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c
Certificate serial: 019D2B16FEABB84F056196398F56CEF70594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
Manifest number: 0133
Signing time: Thu 26 Mar 2026 17:00:20 +0000
Manifest this update: Thu 26 Mar 2026 17:00:20 +0000
Manifest next update: Fri 27 Mar 2026 17:00:20 +0000
Files and hashes: 1: IUXK5owGJRJBQqIOmgn7bKscCRQ.roa (hash: 3cmce/T6z+IA9rzyeoaTbVrr0D6UCYaIjKkeAxLWn1c=)
2: dygVWFa4zk2F-NpPbTWwVbMNvTw.crl (hash: OKIiNRF3K3gNDLzgz6c9g7IKWq4sEHzaijpXOwBsmkM=)
3: ymLzZ-VhmhqNEGONzE9KW-m04rM.roa (hash: RinsNGJ2DGv43ndnKRTv8Ja4sLQDd8GhBHpIm7eFfCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:16:fe:ab:b8:4f:05:61:96:39:8f:56:ce:f7:05:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c
Validity
Not Before: Mar 26 17:00:20 2026 GMT
Not After : Mar 27 17:00:20 2026 GMT
Subject: CN=44c0b732a05ab43c429c1d9ab014862c7e3feef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:51:5b:d9:5f:09:47:83:e7:52:25:a3:e6:
93:e7:98:61:29:b2:7e:66:84:a6:f1:15:0a:5c:e7:
75:6b:7b:4c:30:d8:2a:1e:94:5a:ad:56:e5:94:90:
5a:34:ab:e7:84:d8:62:ac:44:66:f3:4b:77:1d:7f:
70:4f:38:e2:ae:65:56:63:2e:cf:21:5b:b3:48:a0:
b2:0a:65:44:67:59:86:4f:60:89:4b:1f:98:be:9b:
59:70:2e:aa:c9:93:fa:f0:0c:0a:49:8e:5e:7d:df:
07:46:78:4e:79:61:25:32:6d:27:c9:4a:27:df:0f:
93:08:fa:d2:32:86:33:b0:76:bb:42:23:b4:36:c4:
82:bb:4b:44:26:ab:28:4a:26:8a:8c:d0:58:c4:21:
a6:67:b0:14:23:33:2e:46:dd:c6:43:0a:6f:9d:7f:
29:84:97:3a:37:b1:a0:11:fd:d7:07:60:b6:51:a5:
ba:58:fc:7a:50:a6:a7:9c:4b:72:66:eb:d2:d7:8f:
ec:24:39:36:bd:83:3e:fb:9f:51:c0:c7:2c:30:b8:
08:4f:73:66:79:1f:57:89:29:a4:b5:b3:d4:74:4e:
45:2f:7c:4f:f9:4b:c4:e3:2e:6e:00:86:0a:f4:d1:
3f:29:67:db:08:cd:16:71:26:ea:b6:3a:4b:bf:64:
66:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C0:B7:32:A0:5A:B4:3C:42:9C:1D:9A:B0:14:86:2C:7E:3F:EE:F1
X509v3 Authority Key Identifier:
keyid:77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:77:75:12:e9:83:5c:b1:74:51:8e:08:78:31:3a:12:a1:e0:
ce:4d:90:13:2d:46:42:c9:eb:2f:57:0c:b2:4b:4c:4f:30:13:
3d:fc:d1:89:8e:b6:3f:e3:62:bf:41:bf:08:1f:a0:a4:24:ef:
6b:01:e6:7c:14:54:dc:33:02:49:00:34:cb:71:91:df:f3:41:
07:3c:21:b2:4d:85:c5:12:68:6d:68:05:d6:87:19:d7:f0:a7:
7a:c3:85:27:9a:4f:9a:04:ca:a3:dd:75:06:8c:90:0c:d4:ea:
16:96:57:e2:5d:d7:97:56:8a:14:84:9d:0a:9c:c2:ea:08:fc:
ea:51:7f:a7:ed:fb:51:be:f5:9a:f6:42:91:eb:3a:dc:6d:1c:
9a:03:e2:65:ef:d6:92:28:70:2b:92:24:04:73:c9:f4:62:12:
03:ba:fe:36:21:12:52:7a:87:f8:e2:f4:7a:bc:26:25:f6:5f:
58:81:89:b5:b2:81:91:da:56:fd:44:83:bd:9c:e6:6f:e1:44:
03:c3:b0:6a:a4:0a:63:ce:35:f8:9d:bf:0b:39:1a:46:fe:3e:
70:69:53:c8:f9:db:fb:c7:26:b9:bd:cf:a4:1b:01:1f:93:4e:
61:ca:e6:00:0f:b6:0b:e6:06:71:22:01:8a:bf:c1:18:82:c2:
25:53:ce:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:09:41 2026 by rpki-client