Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: wVpVdwn6TkxGKaLeH21SKvWxWYy0r4RvkL1/exNxSfQ=
Subject key identifier: E3:2F:1F:57:A4:55:26:38:78:27:AE:1E:4F:3F:F0:F1:0D:5F:FA:A7
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 019D3941773FBBBFBA698678C1A919A19797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 090E
Signing time: Sun 29 Mar 2026 11:01:24 +0000
Manifest this update: Sun 29 Mar 2026 11:01:24 +0000
Manifest next update: Mon 30 Mar 2026 11:01:24 +0000
Files and hashes: 1: AMaU2fzpygF41S188jpF5PCtFow.roa (hash: AWYDQzHyjmYoYUtXrgToOGpkyPi31WYjmrREJ5IO1nU=)
2: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: VZ7yWRVf8asyNuCZVEEOAlvQHdMWi05IIAQoXnpLm48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:77:3f:bb:bf:ba:69:86:78:c1:a9:19:a1:97:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: Mar 29 11:01:24 2026 GMT
Not After : Mar 30 11:01:24 2026 GMT
Subject: CN=e32f1f57a45526387827ae1e4f3ff0f10d5ffaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:de:0c:13:f3:7a:4f:fd:f6:8c:4d:58:5a:d1:
d1:6f:b6:f2:9e:f3:63:47:5e:bc:3e:f4:3d:0d:d9:
31:f2:80:c1:1a:99:8b:c1:bb:d6:fc:b2:c0:ee:44:
bf:4e:fd:95:64:c7:68:68:a1:25:e4:a5:b6:0c:92:
2e:4b:15:a9:ee:ca:c9:cb:14:a9:49:6d:47:52:9f:
e0:ca:d6:72:1c:f9:16:1b:3c:2d:9b:1a:1f:7c:c9:
ad:ea:f4:5b:52:7e:9c:cc:21:85:88:98:be:50:67:
4c:b2:5a:6d:47:9e:f4:8c:f4:35:73:58:89:09:ed:
e9:85:8d:d3:fd:f9:12:a3:9c:23:77:b8:c5:48:df:
da:10:db:bc:05:37:21:26:53:0b:44:81:6f:49:f4:
dd:7b:13:5c:ad:b7:9b:17:08:c9:54:20:2d:54:9b:
59:8a:4a:72:3e:88:34:6e:ee:6b:e8:68:14:3e:ce:
1f:e1:b6:3a:83:fb:d0:c4:ad:da:bb:84:ef:3c:d4:
c7:25:61:d7:d7:2e:9b:3a:a7:78:7d:4a:2a:10:c2:
67:4d:cb:ac:50:42:39:7f:cc:82:c8:ba:c6:1a:1a:
e3:55:1b:fc:ed:69:c3:f5:44:25:b5:ec:67:a9:b4:
66:1a:bd:b4:b0:e9:f7:f6:d1:7c:40:50:e7:fa:a8:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2F:1F:57:A4:55:26:38:78:27:AE:1E:4F:3F:F0:F1:0D:5F:FA:A7
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:48:c7:41:92:83:22:bd:59:82:22:68:a3:34:af:13:d5:0b:
e5:d5:0d:cb:a2:07:75:f6:35:51:bd:3e:55:d2:90:4a:fa:c6:
44:74:1e:31:b7:55:42:4c:47:f6:6b:25:6c:fa:bd:3a:9f:12:
4b:16:09:9e:d2:29:a7:67:b7:8e:bc:71:e5:da:02:73:4e:10:
9e:aa:56:b8:2b:26:e9:01:22:75:6a:4a:48:c9:2f:24:32:ac:
e0:ef:f7:a7:e8:80:ff:b5:a1:8e:38:89:02:6a:0d:67:36:41:
2d:f3:98:30:29:cc:84:11:fe:25:b8:51:63:a4:06:19:10:0b:
8f:c2:cf:08:cf:a4:7d:5d:4c:54:4b:ec:7d:ff:88:f5:1c:de:
68:d0:79:e9:f2:ad:a4:2b:d9:e3:19:57:4d:2c:4c:7a:61:77:
66:c5:dc:be:4b:f1:cf:5b:ae:25:61:9f:6a:37:f8:e9:dc:8b:
6d:6a:35:c9:60:73:a6:f9:32:9a:02:b7:10:1b:45:f4:11:d8:
41:a6:e9:38:8c:50:6f:79:75:86:8b:4f:26:4e:46:73:b3:d1:
b4:8a:49:87:8c:3c:33:0a:f9:89:1b:2f:02:42:68:7d:a9:4a:
f8:34:14:42:d0:f2:f4:ab:68:79:c4:83:54:23:f4:ef:80:d3:
de:eb:a5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:08 2026 by rpki-client