Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: 07MHzQi8AsMXMR5/qASkRIi+bBgBuiRLxIWd+GqZ0Tw=
Subject key identifier: 15:18:B1:8C:9A:97:6D:CF:CA:B7:45:1F:48:1F:0F:CB:55:68:58:01
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 01A165A26D3DEE965339ED8B4883A6435EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 1A4F
Signing time: Thu 22 Oct 2026 22:01:45 +0000
Manifest this update: Thu 22 Oct 2026 22:01:45 +0000
Manifest next update: Fri 23 Oct 2026 22:01:45 +0000
Files and hashes: 1: 1xBlob06V4OZHwqAUkwFisJ8hbE.roa (hash: fUNS9n+gbfLHDdSyjCsCUEORZD+YjwBO+Q4C1PMroB0=)
2: JchC90yjmUCoGpTy_G9JV_hpnDA.roa (hash: y6rgHhMgSwSF+hb/ru1il5IUm+2sXbyrH9l61ZHVZEc=)
3: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: /SWqMutSWpiVvSJNJ6UwaEg/LdzeW3D+EBsbkzm6YlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 22:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:a2:6d:3d:ee:96:53:39:ed:8b:48:83:a6:43:5e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Oct 22 22:01:45 2026 GMT
Not After : Oct 23 22:01:45 2026 GMT
Subject: CN=1518b18c9a976dcfcab7451f481f0fcb55685801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:17:06:14:92:32:d2:bf:b0:1b:45:04:e8:
50:d2:dc:2e:58:ed:03:b2:ee:88:de:75:af:9c:88:
64:af:7f:ff:3c:10:ba:92:e7:5d:1b:2e:2e:09:2f:
d9:86:58:b9:c8:5c:a7:76:9d:db:33:69:d6:36:de:
25:9f:9c:af:49:da:7a:6c:60:be:d6:2d:bd:19:7f:
44:98:68:e3:b3:67:ec:86:a4:47:d6:39:fd:bb:79:
0c:d2:a3:ef:31:28:39:63:9d:b4:68:e0:75:bd:5f:
1c:14:4c:de:56:4e:9d:1a:90:77:e8:8b:62:a2:35:
28:29:16:db:e3:c6:a7:b1:a5:42:d4:2f:f7:d9:f6:
35:52:e0:10:a9:88:36:5b:e3:69:65:cd:32:c9:15:
0f:16:3d:27:fa:85:a9:e9:c8:8d:17:a5:f3:e2:3a:
b0:d6:0b:22:94:17:80:63:92:fa:2f:aa:e8:2c:b7:
8a:04:60:f0:91:3c:74:f6:fc:0f:a9:fc:76:bf:d2:
f2:50:b7:ba:71:48:85:89:d0:04:c8:c2:72:ad:95:
60:6c:5a:df:56:62:86:e0:29:61:64:62:fd:c0:27:
7a:b8:15:e0:a2:cc:44:74:e3:c6:b5:6c:42:18:11:
a9:30:27:cd:2b:2f:21:61:c0:3b:12:02:e6:61:2a:
13:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:18:B1:8C:9A:97:6D:CF:CA:B7:45:1F:48:1F:0F:CB:55:68:58:01
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:19:6d:c2:e3:37:13:91:01:4f:a2:87:44:ec:ba:e8:34:47:
fa:33:e2:a0:c7:5e:82:cd:03:8c:50:8c:ba:54:f8:b6:5a:00:
b6:ea:d2:f4:5f:ed:b5:b2:8e:db:4c:b7:14:14:39:ae:89:28:
b8:49:1d:f4:1d:be:e5:cc:27:68:cd:b9:c9:75:bc:21:85:d5:
db:21:71:92:16:dd:18:17:d7:c4:1e:f7:6f:26:fa:95:84:75:
69:d8:94:c8:95:12:03:74:fa:50:2a:04:88:f8:43:42:ec:d4:
a3:cf:5a:64:c8:30:76:20:e2:81:d3:af:08:85:87:b5:6c:5e:
31:4f:8f:cd:5e:04:1a:ec:b7:11:c4:f8:ae:32:c1:64:bf:58:
b5:4c:cb:75:ff:df:90:d4:5c:5c:ff:de:35:3b:17:47:11:66:
eb:5a:69:cb:93:70:f4:2e:d4:40:69:1f:09:99:09:b0:e0:6b:
51:8a:c9:cc:c6:e0:5d:50:7a:89:d5:45:cf:a8:e5:3c:46:c6:
d1:55:af:2a:3a:10:96:b2:13:7b:76:4d:ff:20:6e:d0:c1:cb:
64:8b:fd:a2:f7:01:cc:df:e9:a3:0c:8b:31:ee:6d:a6:08:43:
59:17:df:9a:78:cd:78:4b:64:cd:9c:39:1c:f4:70:15:9d:eb:
ab:d9:86:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:09:43 2026 by rpki-client