Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
File: DYGcnS5S2Ereot5MLeZLd4mFjrI.mft (raw, json)
Hash identifier: FYm7qFgRCjVFwN0H8YfCXykilYSKto8dh9U8Kyz1yIU=
Subject key identifier: C2:24:E8:A2:8F:64:CF:5B:53:92:58:3C:2E:CB:49:4B:98:CC:73:C5
Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
Certificate issuer: /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Certificate serial: 019CF23B3075F70939F084EEE510F07A02A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
Manifest number: 0BC8
Signing time: Sun 15 Mar 2026 16:01:31 +0000
Manifest this update: Sun 15 Mar 2026 16:01:31 +0000
Manifest next update: Mon 16 Mar 2026 16:01:31 +0000
Files and hashes: 1: 4mvw711lnQzyvs4Hvdkp66DN8WA.roa (hash: cOfCZrF6cE78BmpoYXmsaMPC6thd3G27U3oDjezLwXY=)
2: DYGcnS5S2Ereot5MLeZLd4mFjrI.crl (hash: iCFDd69/Iw7i8OhBhJ0rttbEonGHJsxfld6EshcKId4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f2:3b:30:75:f7:09:39:f0:84:ee:e5:10:f0:7a:02:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Validity
Not Before: Mar 15 16:01:31 2026 GMT
Not After : Mar 16 16:01:31 2026 GMT
Subject: CN=c224e8a28f64cf5b5392583c2ecb494b98cc73c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:f1:1e:a9:6b:42:e3:ab:60:4a:2e:7c:06:
cf:b0:df:a8:af:3a:c7:4f:75:72:14:76:37:5d:d7:
1d:41:fc:26:2c:c0:78:7a:e8:2a:e5:82:04:af:ea:
dd:53:ab:81:c1:73:3d:9b:49:d2:8d:3e:13:14:c9:
70:cd:17:97:03:3b:90:1c:1a:60:5a:3c:c0:a8:b3:
da:14:c1:07:c4:3e:76:b4:09:79:9a:d6:de:1c:64:
58:6e:91:4f:a2:b1:39:f2:06:be:47:04:53:7d:d4:
1a:ca:72:0a:da:f4:3b:0d:06:0f:3d:b3:9d:a7:4c:
10:8a:7f:3c:40:26:14:18:9a:51:01:ab:be:fc:b4:
19:8d:69:49:59:93:41:33:c0:d9:57:09:41:76:e7:
d9:5f:47:31:4b:de:2a:17:03:8a:b6:fc:62:3b:49:
ce:73:d5:a7:95:51:8b:74:b0:3a:8e:ca:46:b6:39:
ad:6b:7e:1c:03:18:5d:f8:29:2c:2c:2c:6c:ba:ea:
98:ff:df:9b:38:ea:f3:b8:e1:60:ce:20:94:c2:99:
8f:a3:a3:13:c4:06:46:df:2f:ce:55:a0:98:d2:a1:
ff:dd:82:34:5e:cd:f1:dd:35:23:1c:69:61:60:8f:
49:1b:26:d8:82:14:2e:89:8f:24:82:0f:fb:82:f5:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:24:E8:A2:8F:64:CF:5B:53:92:58:3C:2E:CB:49:4B:98:CC:73:C5
X509v3 Authority Key Identifier:
keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b6:35:78:cf:ce:43:22:75:7d:d2:56:a1:4b:97:05:fc:f0:
df:9f:81:d1:57:95:5a:95:15:52:7d:7f:52:22:d6:5e:14:6b:
4b:57:12:85:1f:1c:a8:ea:2d:18:6f:1e:de:3e:33:80:f6:8c:
7d:84:76:38:ae:bb:7a:85:c0:95:ea:55:87:ce:f0:24:2c:90:
73:92:2d:37:06:3a:8a:b8:ce:c9:27:64:34:c8:e9:0e:2e:fb:
05:91:70:e2:47:b4:6f:91:b5:4b:a3:3f:dc:4d:13:e7:6a:13:
39:f6:37:7e:a6:cd:bf:15:08:5f:9c:5f:93:00:ff:d3:61:86:
f3:cf:68:04:6e:8e:0c:b9:e6:4d:99:7f:85:30:c6:ac:99:2d:
39:e0:bc:82:16:70:2e:a4:0f:f6:aa:b4:13:29:66:c6:71:92:
03:0b:f7:a0:0c:ac:bf:4e:30:91:23:d0:45:14:c7:f2:7f:1e:
c2:64:98:ba:75:ed:f7:0a:70:24:16:67:59:13:46:8d:61:ea:
b7:04:d0:15:0e:40:50:22:f1:1d:ac:81:51:e5:05:77:77:86:
53:eb:de:f0:a1:9c:d1:a0:33:f0:58:95:11:8a:35:a7:b7:a3:
cb:22:72:97:c6:ad:39:ee:fe:05:26:ce:81:63:87:ca:14:99:
45:df:28:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 01:50:17 2026 by rpki-client