Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: KIsQ6d3i5xNKoCdTm1LvS5OZ2CFgjNOTQJxhUgtsqno=
Subject key identifier: 0E:D4:09:2E:57:CB:68:41:B4:65:38:FC:97:D5:4F:D5:94:17:C3:CB
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 01A13E952DDF0A44E6DB2E38E944C2F02DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 0B23
Signing time: Thu 15 Oct 2026 08:02:06 +0000
Manifest this update: Thu 15 Oct 2026 08:02:06 +0000
Manifest next update: Fri 16 Oct 2026 08:02:06 +0000
Files and hashes: 1: AMaU2fzpygF41S188jpF5PCtFow.roa (hash: AWYDQzHyjmYoYUtXrgToOGpkyPi31WYjmrREJ5IO1nU=)
2: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: pL25sl8DsZa2OaDXmi24+fBIvP4ncUfzgptvODaYOSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:2d:df:0a:44:e6:db:2e:38:e9:44:c2:f0:2d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: Oct 15 08:02:06 2026 GMT
Not After : Oct 16 08:02:06 2026 GMT
Subject: CN=0ed4092e57cb6841b46538fc97d54fd59417c3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ea:53:af:f8:08:c1:f0:1a:f2:2b:66:5a:5d:
bb:85:3c:ab:cb:e1:95:e9:09:0a:aa:2e:74:14:8e:
2c:bc:49:ec:6c:e6:68:e8:77:f4:c7:be:cb:48:50:
a1:21:9e:1d:df:84:1e:c1:df:a5:02:0d:19:3c:a2:
53:08:f0:ff:28:f9:73:86:af:7b:43:1c:52:8d:ef:
36:b3:ee:c0:09:6e:a0:3e:ab:26:f0:52:86:b2:6d:
a7:2b:c4:a0:3a:59:39:96:c9:0b:a6:66:8d:f6:fe:
1a:70:d1:6b:54:4c:b2:0b:18:9a:43:c2:e2:90:68:
f2:09:d8:6d:18:e2:82:c6:7f:9f:a7:b6:93:2e:3a:
e7:c0:37:e2:29:c0:75:83:de:53:d5:75:dd:4b:e3:
38:46:08:1c:e4:6a:05:1f:88:ba:e1:98:55:c9:1c:
a7:d8:00:b4:11:04:5a:92:45:be:b0:0d:94:7a:fe:
36:4d:64:08:d3:ab:5c:98:80:ba:93:b7:8b:ed:11:
1b:d1:9f:b2:b9:23:2d:3e:c3:8c:02:c1:c6:33:71:
31:fc:86:ba:1c:7a:a5:81:a8:8f:97:30:c7:33:7f:
12:54:82:e7:4a:32:9c:c5:2e:9e:dc:58:0b:22:38:
48:f4:ca:aa:a4:72:b4:b1:5f:ee:22:d1:3b:ea:c3:
c3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D4:09:2E:57:CB:68:41:B4:65:38:FC:97:D5:4F:D5:94:17:C3:CB
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4c:2a:a4:b1:34:2f:57:8a:f4:70:e6:0c:77:25:35:95:84:
8d:4f:fd:5f:3f:a3:9d:3a:fa:14:20:4d:4b:ee:37:2c:f1:23:
85:3b:37:c0:f5:b1:c8:f5:df:69:b3:18:31:9c:3f:6a:42:7f:
37:73:db:74:62:88:b7:bb:17:4f:56:d7:20:67:fe:ea:77:f9:
19:85:43:a7:08:08:87:9a:22:0d:2a:2e:d0:e8:77:c0:bd:a0:
05:c0:bf:4d:ab:ab:29:2e:f0:cb:46:88:f2:a0:91:9f:60:71:
29:9a:82:ed:c9:c3:72:1b:5f:52:c8:a2:73:41:b0:1a:b7:91:
33:97:67:6f:59:56:00:23:cd:ff:87:2f:9c:39:18:90:7b:73:
2e:44:95:37:bb:02:1c:53:4b:48:e3:b7:7b:f2:99:68:3c:54:
d2:6b:9e:b1:ef:ef:12:3e:e1:8e:23:9f:64:a6:f7:17:ec:be:
29:f9:b1:12:cd:83:cd:48:63:79:f2:b0:60:9f:f6:bc:85:14:
64:ee:12:4f:fd:71:f6:3d:f4:04:b8:44:70:dd:ac:1b:1e:94:
fc:74:cf:0c:ec:54:19:4b:46:f6:91:04:19:7d:1e:c9:bd:e0:
a9:1d:be:4e:02:25:33:a6:13:2d:ed:02:5d:4c:40:72:38:6d:
c2:b6:fe:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:23:38 2026 by rpki-client