Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
File: DyKg7jvG4y2JLt3iV8u3mRefLNY.mft (raw, json)
Hash identifier: yL5CmxDHo6mm/Hl1IlF2zScCTssl1rI3enKsbllIuXk=
Subject key identifier: EF:FA:44:E7:06:74:9B:A3:A5:10:B7:D1:35:25:A6:60:A3:1F:73:94
Authority key identifier: 0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
Certificate issuer: /CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Certificate serial: 01A13D4A005745EF7E6B255B720DE5367D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
Manifest number: 0C0F
Signing time: Thu 15 Oct 2026 02:00:22 +0000
Manifest this update: Thu 15 Oct 2026 02:00:22 +0000
Manifest next update: Fri 16 Oct 2026 02:00:22 +0000
Files and hashes: 1: 6anxR7oWcscDd04QL41XaD9H2mI.roa (hash: HOaKAJ+9l8ZBJN2kLFM0Go13VYLLmXxM5vLOU8G4dHg=)
2: DyKg7jvG4y2JLt3iV8u3mRefLNY.crl (hash: vpMFv5ccnAalsQZ7+PPVt94mfj4LybhhJYxIqtJ9d5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:00:57:45:ef:7e:6b:25:5b:72:0d:e5:36:7d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Validity
Not Before: Oct 15 02:00:22 2026 GMT
Not After : Oct 16 02:00:22 2026 GMT
Subject: CN=effa44e706749ba3a510b7d13525a660a31f7394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:5c:3d:9c:3b:eb:65:8c:f0:22:d3:e1:24:
0a:88:6e:fc:76:4d:6e:ff:41:fd:f7:8a:7c:d5:0d:
5c:2b:b2:8f:b3:45:74:31:d7:f4:77:ff:02:41:b2:
7e:fe:39:33:a7:e3:67:4e:db:d2:d9:28:b7:40:5f:
a6:87:10:21:48:6a:85:bb:fa:5b:34:60:23:3d:eb:
d9:c1:84:c7:c4:2f:21:08:be:8c:3a:22:41:40:04:
4b:e5:cd:b1:c0:b3:ef:a9:b9:6d:f8:f3:8c:26:e1:
02:c6:bd:b8:ca:cf:01:70:b9:f6:63:d1:c1:ab:ee:
5a:e0:21:b1:4f:99:dd:00:99:5f:c4:9c:53:71:52:
52:85:2d:f0:e6:c9:02:a3:59:e3:53:96:3f:29:75:
c0:7d:c0:b5:49:4b:2e:85:d1:7b:e5:8c:88:d8:12:
e5:4d:b0:9a:31:6d:1d:f8:4e:22:fa:de:02:4a:d2:
e8:85:31:32:31:10:10:92:b1:36:67:54:b5:67:36:
b0:de:8d:a2:9e:bd:0d:0c:7d:69:18:d8:8f:26:2f:
92:71:5d:02:33:87:04:37:84:2c:0c:7a:bc:d7:bf:
cd:00:77:8d:6c:8f:ec:94:5b:f9:3b:ad:20:59:d8:
5d:52:d8:be:2d:d1:0d:17:2c:c0:0a:1c:c6:b1:4f:
4d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FA:44:E7:06:74:9B:A3:A5:10:B7:D1:35:25:A6:60:A3:1F:73:94
X509v3 Authority Key Identifier:
keyid:0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:bb:e0:88:96:89:09:e6:1c:99:f3:80:2b:69:fb:73:1e:8a:
cd:01:41:82:ea:08:0f:f6:6d:23:12:85:60:93:3f:e5:e0:61:
e8:aa:10:00:c5:e8:57:47:83:08:bc:f8:d2:74:ab:3b:c1:7d:
5c:27:bb:c7:02:94:ec:ac:6c:6f:eb:57:45:c7:ee:41:d2:b3:
16:f2:77:f9:ba:1c:3d:2d:a9:31:eb:11:56:9d:01:b2:ce:60:
ac:00:9d:26:a9:83:24:57:a1:cd:57:a8:5d:e7:22:c9:48:12:
d2:73:6a:89:f1:99:0f:17:fa:52:2e:2e:09:58:ec:f2:20:10:
6b:45:fb:bf:6c:8d:b5:b5:7e:f3:ae:c7:37:43:5c:93:2c:7f:
df:c5:07:af:db:42:c1:42:bc:97:97:8e:37:98:76:e4:b7:d5:
bb:4b:1a:40:1d:8d:b7:4c:c0:5f:47:ae:bb:86:de:97:5d:ba:
d5:25:d5:dd:2a:84:58:1d:65:6a:0a:19:bf:26:ec:b2:7f:85:
c2:91:52:55:d7:89:b0:36:08:08:99:2d:17:43:cc:f0:7c:ed:
a7:4f:1e:86:43:84:d9:6a:36:7b:8d:b5:6f:e5:46:56:ad:f6:
3f:0a:1d:8c:86:f8:46:26:b2:78:31:c4:46:75:4b:85:35:7f:
29:eb:b1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:58 2026 by rpki-client