Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
File: DYGcnS5S2Ereot5MLeZLd4mFjrI.mft (raw, json)
Hash identifier: rbnqsRUqqj9W6Lm/j4dm0MYSNbIh20Yvj6b0ee8eI/E=
Subject key identifier: EE:B3:39:FC:A1:FF:61:83:F4:83:9D:91:CE:5F:B5:14:15:A9:8D:4A
Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
Certificate issuer: /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Certificate serial: 019DDDD592362ECA308E6A98A7A4AEBD01AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
Manifest number: 0C42
Signing time: Thu 30 Apr 2026 10:00:54 +0000
Manifest this update: Thu 30 Apr 2026 10:00:54 +0000
Manifest next update: Fri 01 May 2026 10:00:54 +0000
Files and hashes: 1: 4mvw711lnQzyvs4Hvdkp66DN8WA.roa (hash: cOfCZrF6cE78BmpoYXmsaMPC6thd3G27U3oDjezLwXY=)
2: DYGcnS5S2Ereot5MLeZLd4mFjrI.crl (hash: 3KJ/ytGRLqN6JRWDcQKRxY21pJTv0QlULtjfM+QNphA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:d5:92:36:2e:ca:30:8e:6a:98:a7:a4:ae:bd:01:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Validity
Not Before: Apr 30 10:00:54 2026 GMT
Not After : May 1 10:00:54 2026 GMT
Subject: CN=eeb339fca1ff6183f4839d91ce5fb51415a98d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:0d:a8:db:32:b7:29:4a:f1:9c:e8:97:ff:
59:ac:fe:67:d6:37:d8:bc:24:de:c4:cf:89:4d:eb:
10:82:9a:2d:61:2e:7a:aa:b3:f1:1f:dd:01:79:3b:
e5:b2:fa:c6:2e:6f:f3:c5:93:3a:10:d3:6b:03:02:
0f:a1:67:13:1a:6d:ae:d8:98:80:e7:88:dd:a0:c0:
70:4f:90:44:65:7c:8c:55:d7:c6:d2:5c:12:8d:e9:
90:60:16:e4:0b:e9:59:c6:14:aa:8f:45:b2:da:f2:
d7:79:b7:6a:46:14:59:34:39:f2:7b:79:42:a6:88:
5a:52:e5:81:68:95:f3:07:03:87:e5:18:42:fc:4a:
6a:60:3d:1b:98:ae:15:4f:78:e7:15:88:10:5f:8c:
42:5d:c7:38:ed:2a:77:32:a5:08:41:c4:5d:7f:74:
35:b0:ba:f7:4e:3c:dc:67:43:bb:35:bf:0e:9e:86:
5b:dd:c3:10:bf:5c:ab:25:a6:47:7a:d5:86:eb:f3:
64:e5:aa:b4:35:58:a5:14:9e:41:7b:b7:86:62:f7:
e6:da:7a:f9:8a:6e:c3:a4:94:b6:3d:08:0f:f3:88:
60:67:e2:91:25:51:ea:f6:fb:57:77:16:f0:2f:f3:
2a:9f:b2:22:34:d7:31:b6:35:52:2e:09:f1:f7:9f:
e8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B3:39:FC:A1:FF:61:83:F4:83:9D:91:CE:5F:B5:14:15:A9:8D:4A
X509v3 Authority Key Identifier:
keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:7f:fa:ed:bb:17:43:c6:e7:57:5a:1c:c4:7d:43:df:20:f3:
7c:13:17:3b:20:e9:59:92:12:0a:49:23:1b:bb:12:bf:ed:0b:
9e:a0:f4:62:a5:30:08:af:33:18:b7:34:9d:8b:8e:b4:99:96:
99:a1:3e:3f:c8:8e:4e:34:48:af:05:92:27:21:26:92:b3:7e:
04:01:c3:1b:09:36:06:f2:33:16:9a:d1:39:5a:48:ed:a2:40:
2a:d2:96:e8:31:25:d3:89:af:ff:0e:1a:cb:1c:12:5f:63:c5:
6b:9e:cb:f2:f1:4e:11:8b:5b:18:69:38:21:1d:08:bd:0a:9a:
92:67:e4:2d:b9:af:d7:c6:a1:df:a3:45:0d:6a:95:19:7f:fd:
21:c7:35:b4:0d:3a:cd:f6:b0:20:b5:b3:af:64:26:d3:8b:40:
7a:ca:44:9c:cb:ed:46:42:6e:81:c2:11:8a:73:7a:9f:77:41:
a6:fe:2d:7e:70:c6:bb:86:d3:d6:3b:35:54:0a:63:8e:a9:88:
60:97:04:9b:1c:06:eb:f2:19:bb:bc:d5:ec:37:c8:0a:7d:35:
e6:e0:40:81:b9:cf:ff:0e:c1:38:e3:89:f7:8d:16:6b:4d:83:
b6:28:cc:61:57:3e:39:e5:f7:02:9c:72:06:08:ac:54:59:c6:
21:01:42:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:46:31 2026 by rpki-client