
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
File: dYYhYjrGyrj2veVSbnopMdYm_ow.mft (raw, json)
Hash identifier: QYf0O7P6hUID0mFsWMGK0pcL1jkjfGlZGDRdTuE6Qpk=
Subject key identifier: 3F:10:3A:2B:13:B9:89:5F:55:6D:55:21:E8:D2:90:2A:66:B8:2C:D9
Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
Certificate issuer: /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Certificate serial: 01A1705C32AC4C7C744F0AF252D66E8EBC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
Manifest number: 1A52
Signing time: Sun 25 Oct 2026 00:00:52 +0000
Manifest this update: Sun 25 Oct 2026 00:00:52 +0000
Manifest next update: Mon 26 Oct 2026 00:00:52 +0000
Files and hashes: 1: EXopuR5ESiK7_JfMXbRvvwemOwM.roa (hash: /csuVRW3pPg52UWTPGC8VigLMZFh8XPz4sQJGV29ruU=)
2: dYYhYjrGyrj2veVSbnopMdYm_ow.crl (hash: CZ7+l9cfmFD/BrUQN1Mw+2mU8woGEK81oszeoQGWkOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:5c:32:ac:4c:7c:74:4f:0a:f2:52:d6:6e:8e:bc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Validity
Not Before: Oct 25 00:00:52 2026 GMT
Not After : Oct 26 00:00:52 2026 GMT
Subject: CN=3f103a2b13b9895f556d5521e8d2902a66b82cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c4:52:68:b3:a1:a2:87:2e:6a:3d:0e:f7:10:
09:18:29:50:ee:62:26:a3:8d:d3:8c:60:e1:e4:65:
95:79:66:96:e3:b4:bb:7a:b5:3f:76:ed:2f:87:19:
47:8c:31:26:f6:64:39:6d:b6:20:92:68:b3:2a:9e:
dd:8c:93:1d:43:63:7d:de:6d:41:6f:92:3e:b3:36:
ff:cb:65:84:92:ab:c1:aa:e8:3e:f4:13:1a:9f:c9:
71:1b:43:95:c5:3c:5d:b9:89:fb:1f:d2:d0:2c:2c:
8c:be:b1:cb:13:77:ad:e2:e3:0d:97:31:7e:94:fc:
1e:6d:d2:28:e6:b0:dd:4f:2c:a0:71:fa:7a:9a:22:
5b:93:0b:0e:68:b1:3c:88:ca:7f:fa:34:7c:85:b8:
c3:8b:41:30:4a:59:8f:12:ba:47:34:cf:35:29:e7:
45:aa:39:3f:3b:46:0a:9d:e5:62:f2:48:cd:c5:43:
1b:c4:57:4c:22:71:95:18:a7:1f:56:12:bb:64:e8:
3b:66:c8:ed:41:80:b3:39:af:b7:9d:06:8a:0b:7e:
4f:33:2c:a6:c3:99:20:58:28:eb:17:0d:9b:86:9a:
8a:2e:ef:9c:39:62:8e:8e:cd:9c:ab:50:02:cf:a8:
04:92:1b:13:38:f4:83:32:96:3e:e5:2c:cf:94:c2:
a3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:10:3A:2B:13:B9:89:5F:55:6D:55:21:E8:D2:90:2A:66:B8:2C:D9
X509v3 Authority Key Identifier:
keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1c:f2:7d:1c:e1:c7:2f:1a:8f:0c:6b:48:c2:4c:e2:4d:43:
81:08:ce:36:ff:f6:50:e3:c4:aa:e6:e1:4a:66:54:2a:30:cd:
da:d2:69:58:4f:3d:15:75:7c:13:7b:c7:02:bf:bc:86:bf:58:
fe:eb:5e:ac:83:44:c7:f2:dd:27:02:98:7b:c9:52:af:bf:1a:
0f:3f:42:ce:8d:b4:70:23:96:dc:f2:18:54:39:89:cb:4f:48:
30:a6:66:30:f1:82:b6:09:b4:d8:5c:fc:3e:ea:81:54:89:45:
81:fb:ab:71:16:d5:cd:6a:cc:bb:24:90:b0:5c:51:0d:73:6a:
c0:98:fc:78:91:d6:e0:f1:14:8a:80:23:48:94:61:b3:13:92:
4a:99:b6:f2:62:c4:c9:4d:ae:6f:e2:37:70:f7:55:4a:37:d0:
c1:18:fa:83:c7:17:8c:54:8c:ca:95:23:a5:e5:f4:68:a8:a1:
62:23:b4:ed:c8:55:23:a4:87:fa:bb:1f:4d:0e:3f:30:2f:b5:
fd:04:32:ea:73:03:a2:f1:a1:de:50:bb:47:fe:f3:fb:26:9a:
d1:6d:99:c9:53:81:ae:91:86:1e:0e:8f:53:02:b2:40:ff:45:
d3:db:19:bd:f2:e5:20:68:09:a3:32:3a:19:46:a7:27:5e:4c:
09:62:47:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:17:10 2026 by rpki-client