Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
File: DYGcnS5S2Ereot5MLeZLd4mFjrI.mft (raw, json)
Hash identifier: WmFmYcyvOe11f+ZGNlG9Fjh/hSbp1CVXTUvVa1b6qa0=
Subject key identifier: 25:07:27:51:CE:9B:19:62:C6:B5:E7:94:B6:BA:D9:C9:73:2C:94:BD
Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
Certificate issuer: /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Certificate serial: 019FCC38D3E2D76BBC69EB4B7535591A9AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
Manifest number: 0D42
Signing time: Tue 04 Aug 2026 10:01:44 +0000
Manifest this update: Tue 04 Aug 2026 10:01:44 +0000
Manifest next update: Wed 05 Aug 2026 10:01:44 +0000
Files and hashes: 1: 4mvw711lnQzyvs4Hvdkp66DN8WA.roa (hash: cOfCZrF6cE78BmpoYXmsaMPC6thd3G27U3oDjezLwXY=)
2: DYGcnS5S2Ereot5MLeZLd4mFjrI.crl (hash: eHquzVAyo8LUhFKUkCJyvnDIHMDdkUsMNiHyqhlyWoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:38:d3:e2:d7:6b:bc:69:eb:4b:75:35:59:1a:9a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Validity
Not Before: Aug 4 10:01:44 2026 GMT
Not After : Aug 5 10:01:44 2026 GMT
Subject: CN=25072751ce9b1962c6b5e794b6bad9c9732c94bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5b:f8:d9:2c:5e:02:bc:3e:ae:12:d4:4d:bb:
5a:7c:e8:7e:e8:59:76:69:39:dc:fa:f1:b3:c3:7d:
38:d2:1c:42:eb:fc:5d:21:60:dd:ee:80:41:cb:96:
4f:ec:a2:e3:5e:b7:93:cb:90:cb:92:f3:f3:f8:36:
8d:f8:b1:d4:fe:70:0d:c1:d2:17:cd:df:45:e2:2b:
69:88:d4:a8:bf:51:fc:59:05:02:fb:28:c7:7a:cc:
cc:de:18:91:dd:07:85:81:83:25:ab:90:65:68:b8:
8a:3c:4d:24:61:f8:b7:27:dd:22:a5:af:33:9a:2d:
2f:98:28:29:d6:43:ce:95:18:10:1e:55:24:97:18:
e5:86:32:87:b8:bb:92:ad:8d:05:9a:e4:57:3f:70:
b2:c0:fa:3d:d8:b7:1a:8b:d4:2b:35:0a:64:42:a8:
63:3e:5e:73:ad:ed:e6:31:6e:0a:a9:82:c7:39:89:
51:2c:32:d4:dd:61:0a:22:79:c7:0f:e9:f0:dc:71:
d5:ac:f7:98:90:74:0e:48:1d:87:82:e3:f8:9b:e4:
5b:d5:7f:a1:65:d7:b9:2e:6e:1c:60:a3:60:98:c4:
7e:18:22:70:5b:5c:94:1b:0a:b8:4c:7f:65:56:b7:
83:2a:17:38:87:33:4c:54:18:ab:f3:a4:11:94:a8:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:07:27:51:CE:9B:19:62:C6:B5:E7:94:B6:BA:D9:C9:73:2C:94:BD
X509v3 Authority Key Identifier:
keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ff:48:6d:9c:e9:3d:21:22:b8:cc:fd:f9:0e:bd:7f:f3:bc:
98:a7:43:75:cf:a5:82:bc:22:9c:a8:26:c0:22:d6:ff:74:84:
11:8d:a1:9b:2f:77:ac:15:b8:b0:be:d0:04:4c:4e:d2:b3:5d:
27:e5:fa:2d:00:7e:6b:fa:f1:e2:3f:67:b3:41:14:33:70:58:
57:1c:d0:8e:ee:f0:81:66:b9:c8:50:9a:78:42:fc:f1:b2:a9:
dd:a9:24:c3:79:c8:e5:7f:6d:60:ba:f0:aa:eb:06:82:e7:65:
1e:ca:e3:07:0b:71:c0:d7:de:aa:0c:9d:f4:f5:1d:7c:8c:0f:
1b:fc:1b:89:22:df:b5:bd:9f:a2:a1:4b:5d:41:53:4c:6d:38:
e2:03:07:77:d1:51:b2:8b:2d:5e:ba:ee:05:cd:aa:a8:bf:1b:
12:8f:3b:84:81:26:2b:b9:12:11:f3:11:f6:bc:07:64:d8:86:
c2:39:c7:6a:41:31:d9:36:f4:2d:62:a8:52:8e:dd:22:15:e7:
96:fb:d7:2e:fc:f7:ea:54:57:e0:93:f9:66:93:dc:4f:1e:8c:
69:9b:95:b8:70:45:28:61:b9:16:1e:37:32:bd:01:6b:dc:46:
61:c4:3d:fb:ae:24:f1:9f:27:32:fc:90:ab:0a:8b:76:5d:6b:
11:45:fa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:57:26 2026 by rpki-client