Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
File: dYeQLOemozSk4Ntz5yGYkBXWSJs.mft (raw, json)
Hash identifier: aCh1SRCXicxlZfP23Iii3E/1Cyku0iW3LFFaQ2SmTd0=
Subject key identifier: 28:E7:0B:AF:67:A2:CF:27:E8:1B:C2:69:A3:17:48:0E:B9:FB:1B:FA
Authority key identifier: 75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
Certificate issuer: /CN=7587902ce7a6a334a4e0db73e721989015d6489b
Certificate serial: 019D371B2C82DEECA840B4F7C8D25F58543E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
Manifest number: 1704
Signing time: Sun 29 Mar 2026 01:00:20 +0000
Manifest this update: Sun 29 Mar 2026 01:00:20 +0000
Manifest next update: Mon 30 Mar 2026 01:00:20 +0000
Files and hashes: 1: bVi4keCowD2fh_vLEGiCaZ_PG2E.roa (hash: PcIs7Ni9PquaFgRIU/Xw9DwjNZAbOaylXmPNW0BTawQ=)
2: dYeQLOemozSk4Ntz5yGYkBXWSJs.crl (hash: uzaDSG66QUoSmPAH7u9th76RA1MUbb1qWdiY9uwWAIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:2c:82:de:ec:a8:40:b4:f7:c8:d2:5f:58:54:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7587902ce7a6a334a4e0db73e721989015d6489b
Validity
Not Before: Mar 29 01:00:20 2026 GMT
Not After : Mar 30 01:00:20 2026 GMT
Subject: CN=28e70baf67a2cf27e81bc269a317480eb9fb1bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e4:8f:c5:59:d1:65:c1:01:a8:a6:fe:0d:a4:
20:71:18:61:52:68:a2:fd:f1:1f:30:ff:ff:bd:ca:
1d:c0:82:a9:d8:44:3b:86:04:42:9d:4c:8f:22:6d:
9d:33:d8:88:60:ed:1b:d6:df:fe:6a:c1:0c:5a:ba:
a8:8a:17:d2:2c:16:d6:4c:17:b4:6e:53:b5:5a:7a:
d1:5d:74:1f:2e:68:32:d4:5d:c3:29:c2:71:6c:19:
e7:78:d4:ef:db:70:19:62:17:56:51:bc:79:d5:bf:
46:8c:5f:9f:78:ea:4a:5c:8f:39:a1:29:67:df:ea:
43:69:b3:35:a4:ae:30:ef:78:ab:5d:fb:39:fe:4e:
ec:e5:3e:ca:0b:80:fa:6f:de:19:54:1f:6d:0a:bb:
68:35:14:16:36:2e:72:0a:a4:9b:e0:74:53:27:50:
46:b9:02:e9:e4:2f:69:7e:33:50:6a:b0:41:2e:a7:
35:8b:13:c5:58:3f:0e:58:c5:91:fb:be:7c:47:39:
4e:7f:97:07:b1:28:3b:b5:ed:83:11:58:fa:61:95:
c7:22:e0:7b:da:00:49:56:15:36:13:58:59:7f:33:
4c:05:ec:74:fa:63:2a:21:86:d8:09:b3:6a:b0:f6:
21:2c:d6:97:ac:c5:9a:1b:a1:b8:d5:7d:96:b4:cd:
56:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E7:0B:AF:67:A2:CF:27:E8:1B:C2:69:A3:17:48:0E:B9:FB:1B:FA
X509v3 Authority Key Identifier:
keyid:75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3d:d9:b9:0f:37:22:8d:51:98:90:f8:1c:a5:68:10:37:a8:
87:7d:61:e0:5e:2b:d3:dd:05:35:99:17:74:0d:f3:79:de:cb:
1e:cc:8f:e5:a3:7d:3e:df:c3:d6:08:40:d6:1a:c0:a1:cb:17:
26:bc:ab:54:76:24:59:30:25:a9:46:37:24:18:26:09:40:35:
a3:95:61:2a:e0:c7:ec:df:ec:75:10:84:c9:90:06:aa:3d:1a:
db:92:28:75:a1:43:2c:43:87:89:6c:ab:05:dd:ca:ef:45:96:
4f:2c:64:fe:ed:63:de:f0:56:ed:fc:62:f8:1e:b6:19:39:fe:
d0:cd:2c:7d:36:f0:f3:f4:ff:3c:bb:b9:7a:74:60:dc:51:3c:
dc:35:f6:ce:7b:40:be:31:60:a6:9d:8d:01:64:19:92:ea:2c:
c6:48:5c:92:fc:92:a9:b6:c1:9d:35:a7:aa:d1:31:7e:69:4d:
3d:76:f8:86:48:70:68:00:c5:c5:77:74:01:41:35:b6:2a:e5:
2e:a2:fd:a3:3f:cc:1e:05:2b:31:e5:8b:b9:1b:d2:d7:3d:f0:
a0:c5:4e:b6:23:ab:3f:6e:b3:e4:48:72:e9:c9:f7:0e:82:93:
10:26:7d:3a:9f:c4:80:6e:c5:89:74:35:a7:88:e0:68:7b:ac:
da:c9:00:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:44 2026 by rpki-client