Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
File: dy9i9-iZgXRBGAk19CuCo5mAotw.mft (raw, json)
Hash identifier: YfZWZ9U0+a9LhxdJ0cWr6OO2l/9AGt5BTPqKYdrHq8c=
Subject key identifier: 2B:03:D5:29:E9:7E:C1:BF:03:F8:6E:94:8D:DF:2C:AE:F2:FC:ED:DF
Authority key identifier: 77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
Certificate issuer: /CN=772f62f7e899817441180935f42b82a39980a2dc
Certificate serial: 019D37BFF86FC2C2E9A4A56C584EB5917A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
Manifest number: 073A
Signing time: Sun 29 Mar 2026 04:00:20 +0000
Manifest this update: Sun 29 Mar 2026 04:00:20 +0000
Manifest next update: Mon 30 Mar 2026 04:00:20 +0000
Files and hashes: 1: 6yY6DHXCUp0-mtoCCLRQRpOy0Lg.roa (hash: 2i0eUBbBDwosjWl+pJkRt8nwBhZb81HA+7BnLWvezVQ=)
2: 72o1zQG6O8_8WQS5xWxLLwedUHA.roa (hash: hxPUIpJCQ0HNeMfrnwSBVOj6gd6VpV7h2c++shFRmY4=)
3: dy9i9-iZgXRBGAk19CuCo5mAotw.crl (hash: f09OL0eROhhQDnmcOeFDIb74Uj6KwflgsgGsByQg9kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f8:6f:c2:c2:e9:a4:a5:6c:58:4e:b5:91:7a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f62f7e899817441180935f42b82a39980a2dc
Validity
Not Before: Mar 29 04:00:20 2026 GMT
Not After : Mar 30 04:00:20 2026 GMT
Subject: CN=2b03d529e97ec1bf03f86e948ddf2caef2fceddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:27:33:cd:c2:33:08:b4:7a:4b:f4:d4:a4:
69:ea:29:95:69:48:c0:75:dc:6b:7d:94:1a:e8:91:
4a:6b:62:7a:37:33:78:63:a5:78:7f:a3:f2:8a:74:
70:a4:7b:02:2d:4b:1f:d9:7b:ec:e3:33:80:dc:e8:
d5:32:f0:f3:3a:6f:9d:ca:e0:47:63:c8:79:ee:1c:
07:c0:01:9c:c8:94:f4:14:06:4d:f2:2f:4a:fc:af:
8a:da:15:58:5d:bc:d7:50:af:bb:92:ff:45:11:a5:
ae:fd:8b:a1:0c:86:47:16:54:d9:c8:38:26:5c:f7:
f7:d8:5d:a0:5b:65:b4:ac:67:cb:fe:42:e2:68:99:
1e:f4:76:7c:eb:c8:c2:92:7e:86:93:4b:6f:e5:b0:
d5:a5:c2:d3:6d:42:50:09:77:44:b8:69:8c:8e:1c:
98:41:3f:f2:b6:83:7f:67:1c:f8:9a:d3:bb:cf:ad:
70:63:2f:f0:40:f3:32:14:8d:10:1d:e2:1a:17:64:
49:ce:33:9c:62:e9:ad:ed:fe:ab:c9:3d:0f:b6:93:
ae:82:51:e8:e8:71:7c:6b:d7:14:76:3c:1c:6d:8b:
00:64:26:59:ad:a0:51:35:42:14:a5:93:a6:91:d6:
4f:d5:6d:fb:37:e2:d8:4d:28:74:3c:9a:e5:56:65:
8e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:03:D5:29:E9:7E:C1:BF:03:F8:6E:94:8D:DF:2C:AE:F2:FC:ED:DF
X509v3 Authority Key Identifier:
keyid:77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:fe:07:13:df:b0:35:34:2d:4d:b8:b6:0b:c7:4d:f9:91:b5:
2b:40:6b:19:63:66:ec:16:5b:bf:75:ab:a5:41:55:1c:9a:38:
ee:0f:89:78:35:10:69:8f:43:cb:c7:15:ee:ef:61:10:88:1e:
96:14:96:30:40:2f:9a:fb:70:66:d8:fa:3e:92:7c:86:62:7d:
d9:a9:e8:9f:ee:73:d8:fa:0d:8a:78:2f:70:65:02:47:5c:aa:
86:43:5b:bd:15:66:10:53:18:55:96:be:b7:d6:f0:52:a9:38:
a5:ed:2d:5f:bb:52:7d:79:2c:86:d9:e6:15:cf:52:18:36:c9:
db:7b:b3:b5:0a:c5:e5:b8:cd:34:4c:21:b2:f3:34:c3:07:c1:
f9:3f:15:df:8d:c5:89:36:82:bd:6a:eb:d1:81:b6:86:af:e9:
c5:d3:cc:e7:22:8e:0d:69:ba:6b:da:71:0a:d8:7a:77:4e:b9:
ea:df:90:8c:90:91:28:ab:f9:e1:68:2a:cc:46:83:a9:93:ae:
b8:2a:24:5d:32:f8:6a:fa:c1:ee:f8:8a:bf:a3:8c:c0:d5:29:
cf:d7:97:e5:17:39:f5:a1:80:43:7c:f4:67:0a:57:cd:cd:71:
6f:47:69:c5:95:f0:98:cb:07:5f:4b:e7:c9:00:b0:07:1f:67:
0c:ca:3f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:27 2026 by rpki-client