Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: 47CQF25jaOTa5MFzjqBFdnBbjHSwQGafoMB1SwQpeAc=
Subject key identifier: 8F:A0:DE:F5:E1:21:4D:B6:DD:B6:BD:DF:E7:E4:B1:CD:7D:08:5E:8B
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 019E30730DEE6E95B5DC333637BE486DC23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 098E
Signing time: Sat 16 May 2026 11:01:47 +0000
Manifest this update: Sat 16 May 2026 11:01:47 +0000
Manifest next update: Sun 17 May 2026 11:01:47 +0000
Files and hashes: 1: AMaU2fzpygF41S188jpF5PCtFow.roa (hash: AWYDQzHyjmYoYUtXrgToOGpkyPi31WYjmrREJ5IO1nU=)
2: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: Oj4q0vvyvuz9+fUQYrJvvLhLB3eesdUsV6TlFFTJ44Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:73:0d:ee:6e:95:b5:dc:33:36:37:be:48:6d:c2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: May 16 11:01:47 2026 GMT
Not After : May 17 11:01:47 2026 GMT
Subject: CN=8fa0def5e1214db6ddb6bddfe7e4b1cd7d085e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:45:1e:5d:aa:7a:a8:a0:c5:68:92:ed:80:
73:d8:bf:87:bf:80:65:7c:b7:9f:2f:f1:0a:46:d3:
f4:1d:69:b5:dd:66:0b:a8:62:87:be:f8:f2:d5:c0:
eb:03:e4:01:53:80:50:fa:f2:b5:aa:f2:0f:e1:0e:
23:92:87:b3:3c:33:0f:b6:72:b7:65:ee:f8:e8:ee:
4a:77:68:9d:cf:d1:46:e2:4b:84:f7:7a:10:0a:c6:
c0:a6:3f:99:29:23:83:19:d5:cc:27:39:50:43:ca:
c9:c3:59:bc:15:e0:c0:86:1b:69:9b:0d:ef:77:ba:
58:60:a7:1b:08:1c:58:40:5e:b1:52:13:e9:41:2d:
9c:a5:61:4d:48:85:09:31:56:e8:d0:0d:45:16:49:
51:b5:fe:bb:35:69:20:b6:ae:34:cf:ea:c7:1e:39:
64:cd:66:3e:a7:bd:b9:d7:8a:60:be:8f:7a:5e:42:
ae:e8:e0:aa:78:2d:8c:2f:3d:b2:0a:70:a6:20:a4:
c8:f9:7c:4a:f7:aa:49:31:58:c4:a4:c6:37:f5:54:
a3:62:b3:e4:f8:82:8d:12:30:f0:94:3a:84:b4:47:
4c:d0:31:c9:38:c3:62:39:f9:99:3e:9f:a7:aa:38:
5d:7f:ec:54:98:6d:27:0a:0a:33:49:00:b9:9e:44:
82:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A0:DE:F5:E1:21:4D:B6:DD:B6:BD:DF:E7:E4:B1:CD:7D:08:5E:8B
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fc:e7:05:e2:9d:b0:e5:cd:77:79:37:8a:76:66:27:24:a7:
42:b8:13:c7:2f:4e:f2:30:1b:f4:93:38:9f:3a:40:1f:06:94:
dc:36:01:fe:8e:c9:ec:26:51:46:b2:c5:b0:8b:b9:68:d1:ae:
e2:fd:d3:67:81:27:77:0c:da:2c:d5:4e:93:59:53:5e:31:ba:
5c:b2:55:40:65:7e:ab:ac:16:61:3d:b4:ef:b1:1b:b9:07:dc:
6e:59:c4:c9:52:72:63:14:49:bf:69:3c:35:7f:fc:3e:9c:dc:
25:07:42:cc:f7:56:8e:f7:5d:9b:03:98:5a:9f:d9:1f:c9:21:
79:4b:ec:ba:e8:6d:c0:d8:dc:c3:02:5e:be:1c:e5:1a:45:c2:
87:8b:57:a2:5c:8e:81:e0:8d:67:3d:80:92:9d:f9:f4:d9:fc:
72:69:cc:d9:94:c3:9a:f1:f8:89:8e:99:bf:6e:fd:c5:19:53:
25:e5:6c:ab:1c:a4:2b:7d:61:3a:d2:90:82:37:f1:f3:42:c1:
ca:87:ef:b0:b0:97:ab:7c:a7:a7:75:a9:d3:ef:4e:06:be:3d:
1b:71:84:da:80:54:52:8a:b2:fd:bf:ee:32:bd:67:34:e6:c8:
3b:b3:a6:06:e3:8f:fe:0c:20:ef:e6:69:ef:87:7a:b7:a3:f9:
2f:f0:b0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:29:36 2026 by rpki-client