Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File: DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier: UcdPBZ3ApdJniIeTbR2+Tk4pQ7LjDxxAKAb6dXkUBhI=
Subject key identifier: 40:7C:6A:7B:C8:63:17:34:76:EA:F8:9C:F9:AF:54:B9:BD:C0:0C:6A
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer: /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial: 019D371BB681DD5D89C113E2B561B9A063CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number: 1068
Signing time: Sun 29 Mar 2026 01:00:56 +0000
Manifest this update: Sun 29 Mar 2026 01:00:56 +0000
Manifest next update: Mon 30 Mar 2026 01:00:56 +0000
Files and hashes: 1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: FCMJkWtpDcrU6+XnkVMuElQ60apAmujKotJNqSUzc5Q=)
2: EAp4uNAc6f0HymDOmRK8myDrjdo.roa (hash: pmfGtVbkHJrjhdQXgKEkAIluH1FlB2AL+HRSoa36574=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:b6:81:dd:5d:89:c1:13:e2:b5:61:b9:a0:63:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Validity
Not Before: Mar 29 01:00:56 2026 GMT
Not After : Mar 30 01:00:56 2026 GMT
Subject: CN=407c6a7bc863173476eaf89cf9af54b9bdc00c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e0:62:5a:a2:a1:d5:4f:52:c7:da:ab:a8:49:
27:d2:90:04:08:5a:5f:26:ee:a0:bb:08:b8:ac:4f:
69:01:bf:60:91:b5:06:e5:cb:f0:44:9e:2d:3c:ce:
3a:ae:a6:2f:9d:2f:63:b7:0f:66:17:7e:51:ee:9f:
76:ed:f9:2f:ea:a2:8e:c7:20:48:f5:36:63:62:f8:
4b:c0:4b:e1:d6:6b:a2:8b:9e:9b:ca:71:d2:7b:4e:
5b:8b:ee:a7:85:8f:4b:3a:c2:aa:2c:64:71:44:59:
e1:92:18:14:f4:e2:2c:26:cb:87:5e:01:5f:35:b9:
b9:36:97:b6:0a:8b:38:cc:fd:97:fc:2e:08:e6:c3:
58:24:5f:5c:ec:f7:51:36:af:d3:74:5b:24:9f:0b:
0b:ee:7c:83:40:6c:9d:f3:0f:3c:89:10:d3:7c:5e:
99:68:28:db:32:b0:69:16:bc:49:5c:c4:b9:36:0c:
05:bc:c2:d4:86:df:6b:24:d4:32:b4:a9:73:61:a3:
f8:dc:4b:bb:3f:7e:2a:0a:8d:9e:c2:78:53:ea:74:
51:d2:75:13:54:86:52:b5:8b:c9:b0:ed:a2:25:32:
8d:23:e4:6e:7a:2c:d6:4a:f7:cf:7c:ac:13:fc:77:
ef:35:6f:bc:2d:02:d4:bf:0b:b0:04:58:16:c5:a6:
25:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7C:6A:7B:C8:63:17:34:76:EA:F8:9C:F9:AF:54:B9:BD:C0:0C:6A
X509v3 Authority Key Identifier:
keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:80:6e:4a:45:55:0e:8c:83:37:83:c0:76:6a:a5:96:00:0d:
1f:11:df:cf:88:8d:fd:99:32:3b:93:5e:2e:81:7e:09:a0:52:
26:82:73:85:b6:d2:44:93:17:9f:ba:3b:5a:2b:67:ed:27:be:
4c:99:96:e0:de:c6:44:87:d6:57:64:eb:78:02:2f:71:30:7f:
8f:5c:c4:a6:fc:e3:cb:f5:70:61:8e:c5:19:b0:7d:eb:e8:ae:
b2:3a:a9:9d:49:66:fb:ad:b3:e5:1f:56:aa:ca:35:26:d0:0d:
26:7a:0f:83:fa:14:56:f4:6c:cc:f8:02:f2:33:92:4d:0b:27:
e8:16:2d:3c:0e:73:7f:1a:04:ff:08:e1:3f:24:d8:65:0c:a3:
9a:8b:e9:ac:f8:7d:e1:45:bc:47:3d:48:d2:d7:58:29:1a:2c:
62:71:bb:cd:37:19:4d:a2:0a:89:da:4e:9c:1e:23:13:43:d6:
72:20:0c:52:44:01:fc:75:e8:db:d8:6a:47:8e:58:6e:74:de:
b6:fb:d5:00:46:c0:6a:4f:d5:ce:94:86:16:a2:54:4c:02:11:
36:33:ff:d0:33:8d:cf:69:ff:14:0c:f9:57:50:a7:6d:3d:10:
76:e2:39:8d:6c:21:91:f2:ae:da:aa:45:b8:a2:fe:95:31:97:
c7:83:48:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G7aB3V2JwRPitWG5oGPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOGZjOGRmODRmYmYyYWI0MDQxMmU2ZDRhZGZmN2MxYjg0
YTViMmYwHhcNMjYwMzI5MDEwMDU2WhcNMjYwMzMwMDEwMDU2WjAzMTEwLwYDVQQD
Eyg0MDdjNmE3YmM4NjMxNzM0NzZlYWY4OWNmOWFmNTRiOWJkYzAwYzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eBiWqKh1U9Sx9qrqEkn0pAECFpf
Ju6guwi4rE9pAb9gkbUG5cvwRJ4tPM46rqYvnS9jtw9mF35R7p927fkv6qKOxyBI
9TZjYvhLwEvh1muii56bynHSe05bi+6nhY9LOsKqLGRxRFnhkhgU9OIsJsuHXgFf
Nbm5Npe2Cos4zP2X/C4I5sNYJF9c7PdRNq/TdFsknwsL7nyDQGyd8w88iRDTfF6Z
aCjbMrBpFrxJXMS5NgwFvMLUht9rJNQytKlzYaP43Eu7P34qCo2ewnhT6nRR0nUT
VIZStYvJsO2iJTKNI+RueizWSvfPfKwT/HfvNW+8LQLUvwuwBFgWxaYlrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEB8anvIYxc0dur4nPmvVLm9wAxqMB8GA1UdIwQY
MBaAFA2PyN+E+/KrQEEubUrf98G4SlsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgt
Njg4NzYyYmI5ODVlLzEvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgtNjg4NzYyYmI5ODVl
LzEvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYoBuSkVV
DoyDN4PAdmqllgANHxHfz4iN/ZkyO5NeLoF+CaBSJoJzhbbSRJMXn7o7Witn7Se+
TJmW4N7GRIfWV2TreAIvcTB/j1zEpvzjy/VwYY7FGbB96+iusjqpnUlm+62z5R9W
qso1JtANJnoPg/oUVvRszPgC8jOSTQsn6BYtPA5zfxoE/wjhPyTYZQyjmovprPh9
4UW8Rz1I0tdYKRosYnG7zTcZTaIKidpOnB4jE0PWciAMUkQB/HXo29hqR45YbnTe
tvvVAEbAak/VzpSGFqJUTAIRNjP/0DONz2n/FAz5V1CnbT0QduI5jWwhkfKu2qpF
uKL+lTGXx4NIUQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:31 2026 by rpki-client