Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: /7Lv4RQYn62UHellNCrDaADUmi96v1fX5QlQnXo/gUk=
Subject key identifier: F9:C8:D6:97:25:C0:4B:DF:00:88:EB:2C:D6:37:06:B8:47:18:B1:D7
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 01A001DD86CD21C7CC84CAFBF805B204533D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 0A7F
Signing time: Fri 14 Aug 2026 20:01:30 +0000
Manifest this update: Fri 14 Aug 2026 20:01:30 +0000
Manifest next update: Sat 15 Aug 2026 20:01:30 +0000
Files and hashes: 1: AMaU2fzpygF41S188jpF5PCtFow.roa (hash: AWYDQzHyjmYoYUtXrgToOGpkyPi31WYjmrREJ5IO1nU=)
2: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: adc2YipIzqS2cvF4WMYpzGjaD0UowaB3HOjU3irpkw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:86:cd:21:c7:cc:84:ca:fb:f8:05:b2:04:53:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: Aug 14 20:01:30 2026 GMT
Not After : Aug 15 20:01:30 2026 GMT
Subject: CN=f9c8d69725c04bdf0088eb2cd63706b84718b1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:0b:42:0b:96:b7:cf:d9:ce:46:78:b1:f1:
5d:57:07:5f:20:5b:57:98:b6:05:0b:b7:ca:df:04:
fd:18:e3:f3:77:43:5d:0a:b5:6f:3a:16:39:40:fc:
79:c3:1d:3b:e9:f5:49:55:eb:53:e2:f5:da:6a:ba:
93:8e:b4:fd:bc:db:35:1a:68:f1:37:7d:ba:f5:d3:
51:6a:e0:82:9e:44:ba:b7:b1:8d:c1:69:35:32:09:
d1:68:dc:d9:93:5a:99:cb:58:d3:a2:e8:c6:9c:bc:
55:06:cf:d5:6b:59:bf:11:65:aa:0e:ba:11:22:f0:
29:2e:b8:04:5e:4d:41:0d:a2:1c:2f:df:9c:c8:6f:
e1:05:e7:0c:aa:4d:83:66:8f:45:bb:f2:40:62:1c:
ee:4a:56:ee:ec:9b:4c:27:ee:cd:fb:2f:9b:39:32:
54:a6:52:e8:43:22:b0:93:55:b2:50:51:2f:8b:da:
45:98:0f:cc:b5:78:7f:38:11:04:1d:0e:d0:8c:9a:
1f:92:46:17:8b:07:ae:10:05:58:3d:2a:a2:d6:0f:
76:aa:8f:de:5d:b3:6f:93:b2:e7:47:de:2b:f0:14:
71:bd:50:f7:fe:38:b2:c7:01:76:3c:a6:f0:af:97:
82:ed:5e:eb:99:6e:8c:17:92:e3:3b:56:83:d2:53:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C8:D6:97:25:C0:4B:DF:00:88:EB:2C:D6:37:06:B8:47:18:B1:D7
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b8:78:8f:0c:a8:86:5f:0a:f6:b6:6e:49:b2:c5:6b:98:36:
ce:81:1a:e5:98:2f:19:c9:e8:58:4a:37:5b:e5:96:6a:57:91:
2a:ae:52:4d:96:01:2d:a6:d5:a0:8a:89:bc:13:f3:4b:29:85:
51:82:cc:89:cb:42:94:e1:2a:5b:1c:b1:fc:6e:98:d7:8d:51:
53:e4:ff:bd:8a:74:0b:82:f4:ae:ab:db:cb:c1:e8:47:1f:d2:
45:d6:91:47:48:f8:c1:13:cf:7b:04:59:ef:82:32:36:17:8d:
41:97:8b:8c:da:23:c9:69:f3:8c:67:e7:a2:ec:36:e2:44:e5:
db:f4:66:2c:b5:fa:57:d3:c4:dc:80:89:01:ea:f9:08:33:13:
5e:db:6f:8c:72:c3:e0:13:45:c1:8d:b1:6e:26:63:34:5a:f7:
74:d7:53:b6:09:e8:0a:d3:10:ec:e6:54:ec:16:4b:2f:55:b9:
85:a9:85:51:c2:43:7c:a5:f5:a1:a1:0a:1a:c7:dd:86:3c:11:
f3:19:b1:f6:7d:10:fa:bc:62:62:09:7c:78:a5:50:d0:6c:ee:
f3:db:cb:a1:31:6d:57:83:b4:cc:66:07:92:83:36:8f:0a:3a:
ee:82:5f:4d:c0:3c:e5:25:8a:c3:2d:66:df:74:36:52:fa:94:
5f:2b:e7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:20:53 2026 by rpki-client