Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
File: dy-5SkWdO3XOi_uPErTPcZgsY0M.mft (raw, json)
Hash identifier: m3waRierdcnmuGKgoLiduKl2la0GMzssmz5KpBa5FL4=
Subject key identifier: AB:1F:19:15:87:EF:58:73:8A:47:C1:D4:DC:CC:F6:AC:F5:03:15:53
Authority key identifier: 77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43
Certificate issuer: /CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
Certificate serial: 019D37C093B96BBC945906766DF0C3DE757E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
Manifest number: 0415
Signing time: Sun 29 Mar 2026 04:01:00 +0000
Manifest this update: Sun 29 Mar 2026 04:01:00 +0000
Manifest next update: Mon 30 Mar 2026 04:01:00 +0000
Files and hashes: 1: dy-5SkWdO3XOi_uPErTPcZgsY0M.crl (hash: hqo+kBymWclDEY7dmaoK6xXban7zzg00omIQzFCXNo0=)
2: xPQUYz25Kw5OqjEMvXe5mrzD17U.asa (hash: yVaACJvXdwB+QYqWE/blK7XRzmJJaal8sDFXluTDI0c=)
3: yZwwxHdq2mwMvEKhuZrOFRDdPXg.roa (hash: 0MUPEijqaOiMb0pbzOVVpFzyA1GqgLhChQvRIq7H260=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:93:b9:6b:bc:94:59:06:76:6d:f0:c3:de:75:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
Validity
Not Before: Mar 29 04:01:00 2026 GMT
Not After : Mar 30 04:01:00 2026 GMT
Subject: CN=ab1f191587ef58738a47c1d4dcccf6acf5031553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0f:55:02:db:29:8f:27:3d:3d:6e:49:b3:9f:
ab:03:8f:27:9b:a0:24:81:8d:c7:41:33:a3:fd:70:
be:65:fa:be:98:66:db:af:ef:57:2d:94:bf:5d:ca:
87:9f:f2:1c:3e:c9:80:10:7d:04:03:9f:30:10:73:
dd:60:67:cf:d0:a4:56:7e:ef:15:c6:1b:0b:c7:06:
48:a8:cf:3b:8a:0c:75:5d:cd:33:27:32:33:bc:d1:
ca:23:21:b6:96:25:72:43:cb:4c:14:eb:df:76:42:
be:96:d6:cc:dd:2b:73:7d:1b:a1:a6:8a:ce:47:94:
7e:1e:57:bc:00:43:4a:13:b8:2e:ea:ce:11:06:2d:
eb:ca:71:31:8e:97:d7:90:f5:50:46:94:99:0f:8f:
40:63:38:d4:13:f3:e1:8b:7f:19:e4:80:47:b5:13:
e1:08:6f:c0:8c:92:f0:dd:fb:d7:54:df:b4:74:81:
3f:19:57:a2:4b:86:af:30:57:46:30:91:3a:6f:9b:
d5:d6:e9:7a:bb:9a:9a:4f:22:ed:a1:e7:9a:f8:e5:
3a:61:c5:36:b0:9c:90:5b:88:b1:97:f0:5f:3f:f0:
12:9a:47:e1:37:ab:b1:91:6c:2c:df:43:fe:c8:3f:
53:9e:f8:de:93:f7:83:13:af:81:38:83:ed:e0:f7:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1F:19:15:87:EF:58:73:8A:47:C1:D4:DC:CC:F6:AC:F5:03:15:53
X509v3 Authority Key Identifier:
keyid:77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c9:cc:0c:93:21:4e:6a:64:0e:6f:05:f2:b4:cb:02:ae:2f:
2e:a3:45:2b:43:e1:1e:9f:85:26:2a:3f:c6:ee:41:6d:65:5f:
b7:3e:2f:ac:24:3f:8a:60:39:15:6a:01:e5:13:55:97:84:68:
62:8a:9e:3a:91:a0:76:a6:3c:21:22:c6:81:e2:a5:72:c6:67:
d5:42:62:1d:f5:bf:c6:18:29:ab:a5:94:3e:60:31:53:6d:d9:
58:97:a4:90:0b:4f:06:24:ae:bb:df:66:3a:10:82:f7:ae:fd:
de:8d:5c:29:59:0d:dc:3f:91:d0:c5:2c:64:dd:e4:33:b4:81:
56:65:7f:85:2a:98:57:bd:8d:39:02:0c:d5:5d:62:29:df:8d:
25:9f:4b:c2:a1:08:4f:15:18:f4:e5:25:05:61:25:b4:38:8b:
7f:f3:02:56:55:15:09:c4:77:b2:ab:b6:49:a9:bb:be:ab:ce:
b3:9a:24:dd:96:4f:7d:1e:b7:57:ad:4a:bf:92:b0:c4:27:20:
db:5a:05:c6:ce:55:08:4c:af:da:d3:a3:6b:f9:b3:0b:b7:04:
c5:1b:e7:3c:15:c1:a4:18:05:21:37:26:21:ff:d2:ad:59:63:
90:cf:cb:71:57:2e:a0:f8:4e:c3:cd:97:5c:af:7f:0a:77:1b:
91:93:97:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:51 2026 by rpki-client