Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: Vj0GlaJ9aYaj9hfrxVksyIy4XXWo37lXRVuf3K7wr3Q=
Subject key identifier: A2:F3:F6:96:92:24:66:12:1C:F8:69:CF:1E:52:EE:31:5B:E4:67:16
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 019DD051328D9EEAD9CF3CBFD876DE5F4148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 1874
Signing time: Mon 27 Apr 2026 19:01:15 +0000
Manifest this update: Mon 27 Apr 2026 19:01:15 +0000
Manifest next update: Tue 28 Apr 2026 19:01:15 +0000
Files and hashes: 1: 1xBlob06V4OZHwqAUkwFisJ8hbE.roa (hash: fUNS9n+gbfLHDdSyjCsCUEORZD+YjwBO+Q4C1PMroB0=)
2: JchC90yjmUCoGpTy_G9JV_hpnDA.roa (hash: y6rgHhMgSwSF+hb/ru1il5IUm+2sXbyrH9l61ZHVZEc=)
3: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: LadWQLYXw9zEnstycjfmlF9V3gx6ikccVdxnv1GXhGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:51:32:8d:9e:ea:d9:cf:3c:bf:d8:76:de:5f:41:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Apr 27 19:01:15 2026 GMT
Not After : Apr 28 19:01:15 2026 GMT
Subject: CN=a2f3f696922466121cf869cf1e52ee315be46716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:f7:6c:39:e3:90:41:7a:9d:cc:2d:55:59:
d0:23:84:70:de:39:c1:8a:17:3d:e8:a6:b8:61:e8:
5f:34:15:93:30:a2:e1:b6:2f:6f:5c:b5:61:76:31:
14:ac:3b:b3:16:00:c5:7e:06:82:39:d6:ca:72:c3:
96:90:fd:93:d8:a2:8e:69:05:6a:28:9c:1a:c3:4f:
2b:fc:fd:b8:0c:88:5c:7e:a8:cb:66:c8:3c:12:19:
bd:bc:f5:d1:57:a6:09:e4:fa:0f:6e:73:74:93:f7:
cb:97:19:5a:f7:f1:45:7a:4e:f6:f7:94:7c:98:9e:
df:7b:9a:6c:41:35:88:27:a8:35:e2:98:92:8b:e5:
cb:42:d4:33:a3:4b:2e:6f:6b:8b:f4:39:2e:9e:2b:
cf:06:50:1a:8c:46:4f:e1:fa:03:49:d0:0a:f6:41:
25:78:94:f2:c9:fb:ce:dc:24:9f:eb:a1:8d:d8:91:
ca:19:a3:f6:8e:2d:d3:a6:b9:01:fa:72:ce:28:b1:
65:d4:2d:17:be:d4:40:e5:a8:85:3f:ee:e6:9e:ef:
af:73:78:2b:60:eb:8d:97:24:99:6f:75:f2:b0:6e:
41:36:14:58:db:8e:20:a6:0d:c4:3a:d3:fc:c7:bf:
96:12:90:02:76:c5:f2:da:7b:bc:eb:72:eb:41:6f:
0f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F3:F6:96:92:24:66:12:1C:F8:69:CF:1E:52:EE:31:5B:E4:67:16
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:71:98:ab:bd:9a:f4:9c:d7:af:75:18:fe:ce:c3:2f:2f:d3:
00:f0:a1:c8:6e:1f:b8:ac:1e:d2:91:a6:6e:05:7d:e2:93:d2:
5a:3b:cd:73:d5:a4:28:e6:dc:3a:f2:f8:47:22:e1:42:4e:00:
17:6b:05:c7:5c:07:ec:cc:bc:4c:32:18:bd:27:25:af:5f:7a:
4a:ea:13:40:76:c4:3b:53:4c:f7:c3:e4:0c:b2:22:38:4f:52:
e0:d5:e7:a7:b4:56:d1:32:47:81:08:f6:0e:a6:e4:a2:91:2d:
0d:20:a7:f8:32:db:a1:b3:0c:be:e7:89:7c:11:1d:42:95:7a:
31:f7:41:03:43:0a:c0:f2:68:f9:ee:03:ae:8e:66:e7:ba:71:
4a:30:44:8d:a7:fe:f2:28:f3:2b:00:f0:71:6a:a5:89:81:bb:
b9:f0:f2:3e:b2:6d:36:f7:4c:10:e4:73:b8:07:b2:98:17:84:
e3:17:53:f9:83:cb:5f:95:d1:fe:21:fc:4c:de:69:fe:e7:77:
d3:f4:3f:f6:ca:7a:65:84:6f:2c:d3:9d:dd:59:c0:18:c4:df:
f0:49:e2:f3:a1:ee:e5:3a:93:8f:8b:41:63:92:f4:1d:8e:76:
d4:34:f3:23:54:9c:48:87:2f:f6:99:38:de:54:76:14:99:4d:
dd:18:c0:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QUTKNnurZzzy/2HbeX0FIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MjkyZGM2MzcxOGVlYmM3MDRhYjAwMmVjYjgxZDNkNTJk
NGQxYzMwHhcNMjYwNDI3MTkwMTE1WhcNMjYwNDI4MTkwMTE1WjAzMTEwLwYDVQQD
EyhhMmYzZjY5NjkyMjQ2NjEyMWNmODY5Y2YxZTUyZWUzMTViZTQ2NzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfj3bDnjkEF6ncwtVVnQI4Rw3jnB
ihc96Ka4YehfNBWTMKLhti9vXLVhdjEUrDuzFgDFfgaCOdbKcsOWkP2T2KKOaQVq
KJwaw08r/P24DIhcfqjLZsg8Ehm9vPXRV6YJ5PoPbnN0k/fLlxla9/FFek7295R8
mJ7fe5psQTWIJ6g14piSi+XLQtQzo0sub2uL9DkunivPBlAajEZP4foDSdAK9kEl
eJTyyfvO3CSf66GN2JHKGaP2ji3TprkB+nLOKLFl1C0XvtRA5aiFP+7mnu+vc3gr
YOuNlySZb3XysG5BNhRY244gpg3EOtP8x7+WEpACdsXy2nu863LrQW8PbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLz9paSJGYSHPhpzx5S7jFb5GcWMB8GA1UdIwQY
MBaAFHcpLcY3GO68cEqwAuy4HT1S1NHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEt
ZDljNWQyNjQxOWIyLzEvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEtZDljNWQyNjQxOWIy
LzEvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHGYq72a
9JzXr3UY/s7DLy/TAPChyG4fuKwe0pGmbgV94pPSWjvNc9WkKObcOvL4RyLhQk4A
F2sFx1wH7My8TDIYvSclr196SuoTQHbEO1NM98PkDLIiOE9S4NXnp7RW0TJHgQj2
DqbkopEtDSCn+DLbobMMvueJfBEdQpV6MfdBA0MKwPJo+e4Dro5m57pxSjBEjaf+
8ijzKwDwcWqliYG7ufDyPrJtNvdMEORzuAeymBeE4xdT+YPLX5XR/iH8TN5p/ud3
0/Q/9sp6ZYRvLNOd3VnAGMTf8Eni86Hu5TqTj4tBY5L0HY521DTzI1ScSIcv9pk4
3lR2FJlN3RjATg==
-----END CERTIFICATE-----
Generated at Tue Apr 28 01:43:38 2026 by rpki-client