Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
File: dygFKufRD9ImGiJI_ADSArDyVXQ.mft (raw, json)
Hash identifier: APcHrVgu7RqWBIvSKRo4EuQhTVqJdIVvD8ELe5LINaE=
Subject key identifier: 71:50:2A:EC:AE:05:E0:5F:65:5A:FD:9D:0F:86:B6:9C:BF:81:C4:57
Authority key identifier: 77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
Certificate issuer: /CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Certificate serial: 019D389C259AB874DC036542725469FF6F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 08:00:50 +0000
Manifest this update: Sun 29 Mar 2026 08:00:50 +0000
Manifest next update: Mon 30 Mar 2026 08:00:50 +0000
Files and hashes: 1: JNkr5sJ7ip69KbDdvD4kPrMRCFE.roa (hash: lOIWQDrAFB72tPTDRq9zpid9asQhjRi1A6BVV0mLQ0A=)
2: dygFKufRD9ImGiJI_ADSArDyVXQ.crl (hash: CWYsaZTPXINyyPe1oKrewreE5cSvNwR3Zk4H9pKD7B4=)
3: sfYPhQ6RD9htbpRLWND2pNFZgk0.roa (hash: Nx5iosy0Tc5xWKlypEqy7h/HiFr5i52nJ2YrifsLjWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:25:9a:b8:74:dc:03:65:42:72:54:69:ff:6f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Validity
Not Before: Mar 29 08:00:50 2026 GMT
Not After : Mar 30 08:00:50 2026 GMT
Subject: CN=71502aecae05e05f655afd9d0f86b69cbf81c457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:93:f2:da:cf:ec:20:e4:fb:38:24:e0:d1:f9:
99:c7:ce:79:b5:98:4b:21:5d:de:7e:23:85:68:1a:
c5:81:81:85:5c:11:32:d0:aa:f1:af:cd:c8:bb:d8:
6c:4a:ec:19:2c:54:c4:c4:ba:6c:c3:00:e1:ef:e3:
a5:c9:1d:42:78:8e:f7:7d:a7:e4:77:f0:59:85:ce:
15:34:a3:8c:55:c9:aa:e6:d5:88:62:61:06:9a:dc:
96:80:0c:d1:fe:df:da:6f:b1:5b:b1:44:b8:e7:1c:
97:7c:76:89:ec:ed:4a:bd:17:a0:70:3a:eb:89:2e:
40:7b:43:2d:50:1d:11:e9:e3:2f:41:5d:da:45:d3:
59:82:af:f7:a1:48:27:80:1c:2b:a0:25:e0:36:0b:
27:72:55:2a:c2:79:28:3f:f4:3a:28:2b:61:c9:43:
13:a7:9e:2c:ce:26:ab:97:22:23:3d:c1:ee:db:fa:
c3:07:00:3e:5d:f0:67:66:9e:44:35:dc:a8:34:d0:
be:76:f6:1a:96:b3:2d:80:86:09:43:38:9f:e0:42:
21:fc:3f:c4:e4:7b:6d:6d:9d:06:19:e5:0c:80:00:
57:fe:8a:16:22:8c:cc:c4:82:9c:ca:89:0e:37:f9:
fe:3e:10:42:36:b2:3a:f5:98:55:9b:bc:f7:06:1c:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:50:2A:EC:AE:05:E0:5F:65:5A:FD:9D:0F:86:B6:9C:BF:81:C4:57
X509v3 Authority Key Identifier:
keyid:77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b9:0d:a4:ca:df:4b:21:ec:41:8c:26:de:a6:02:a3:44:4c:
32:b2:12:d4:fc:c6:ee:9c:ed:1a:84:d5:d4:fc:dc:6e:9d:52:
60:30:29:92:19:3d:53:9f:90:26:29:79:2a:7c:31:b4:b1:07:
2a:20:29:06:de:9a:cb:40:75:50:28:8b:6e:d9:93:12:7b:b4:
2f:a3:da:16:e6:b4:67:37:d8:b7:8d:0f:d8:8a:fb:4f:81:b7:
a0:66:de:fd:81:cb:85:cc:da:d7:2b:98:6d:df:64:0b:ea:e2:
91:40:d5:fe:80:24:99:27:fe:e2:4f:38:71:91:2e:a6:22:2a:
c8:c8:ca:6e:1d:13:62:06:d9:6b:51:51:a2:01:09:ea:41:21:
2f:a3:0e:f9:6d:b0:2d:55:59:53:12:55:3a:83:6c:8e:60:cf:
aa:ad:b3:08:8f:92:9e:60:32:43:9e:cf:09:7f:2e:a9:9f:6c:
29:65:9d:47:2a:0d:e2:7f:91:6b:79:b7:8f:2a:39:f1:61:19:
e0:ce:ff:ca:73:5d:55:35:98:51:98:5e:17:2e:7a:6e:90:6f:
1f:a3:49:54:57:db:33:42:30:60:69:80:25:85:1d:b2:0c:47:
20:63:3f:ac:f6:c5:8c:d4:55:f0:8a:43:b5:84:7c:fd:97:89:
40:a1:66:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:47 2026 by rpki-client