Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: jI0izEmvKZDlzIl7P5UvLBVJcVCXzSWFIyTZu4yF8R8=
Subject key identifier: C7:1A:10:BF:77:D7:1F:5D:0E:42:10:01:7E:43:72:28:94:29:FE:48
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 01A0024B4CD10C0764DAB85EBB3637C92A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 1997
Signing time: Fri 14 Aug 2026 22:01:24 +0000
Manifest this update: Fri 14 Aug 2026 22:01:24 +0000
Manifest next update: Sat 15 Aug 2026 22:01:24 +0000
Files and hashes: 1: 1xBlob06V4OZHwqAUkwFisJ8hbE.roa (hash: fUNS9n+gbfLHDdSyjCsCUEORZD+YjwBO+Q4C1PMroB0=)
2: JchC90yjmUCoGpTy_G9JV_hpnDA.roa (hash: y6rgHhMgSwSF+hb/ru1il5IUm+2sXbyrH9l61ZHVZEc=)
3: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: Lvhqh1xFT12ff+I/OL9Rqhz1MAJ8ZIRwkwbj0eeLlYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:4c:d1:0c:07:64:da:b8:5e:bb:36:37:c9:2a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Aug 14 22:01:24 2026 GMT
Not After : Aug 15 22:01:24 2026 GMT
Subject: CN=c71a10bf77d71f5d0e4210017e4372289429fe48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:07:02:7f:88:04:43:2e:d5:fa:12:35:5f:
60:e6:2c:91:69:54:08:16:cc:6a:b3:24:c3:fd:41:
a2:14:e0:df:c3:51:e5:5e:a3:5b:7c:4b:23:fb:ba:
f3:b1:47:56:3f:3d:e2:76:0d:e2:a4:4f:e5:14:df:
36:9a:f3:ba:a4:b4:09:04:42:34:ea:03:39:ab:01:
2b:0c:8d:81:fb:a7:6e:84:0b:35:f1:38:ff:ad:13:
8a:81:ef:4f:ad:38:74:0d:c8:40:d9:ac:0d:06:90:
55:e0:7f:e4:e4:47:f6:ef:cf:3c:8f:44:6e:29:05:
f7:54:88:a6:26:d6:b6:5e:ad:79:9b:da:e5:55:03:
12:d0:ba:a1:89:87:2a:a2:10:12:20:0d:78:f6:bd:
24:61:a1:4a:86:be:13:3d:92:3b:d7:aa:91:03:fb:
25:6d:c1:48:4c:ce:ce:f9:61:84:cc:8f:0e:27:37:
d7:78:74:31:1c:4b:3e:33:cd:cc:ec:78:05:a8:03:
37:f5:75:a5:b8:a5:c2:58:da:40:00:98:38:fc:a4:
e2:33:8b:8e:62:72:03:bf:52:a5:1c:1d:7d:1a:4c:
af:9e:3b:66:af:a3:80:79:55:8a:80:17:16:bd:41:
df:fe:67:52:58:b9:b9:b0:e3:d2:b4:67:16:16:5b:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1A:10:BF:77:D7:1F:5D:0E:42:10:01:7E:43:72:28:94:29:FE:48
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ef:eb:a0:e7:98:9b:3a:be:ae:fa:32:3f:e5:b5:ab:01:45:
9c:2a:0f:88:b0:42:50:0a:01:18:f3:c0:9a:3f:98:9b:e3:a9:
6e:d7:f6:46:62:8a:c2:01:f5:d4:e0:df:e9:ed:c0:8e:f3:84:
59:47:33:d1:1b:d8:c4:4a:d1:e6:74:29:b9:ea:86:80:d0:59:
bf:88:c4:89:1f:22:0e:3f:58:c6:55:15:35:80:23:4b:86:43:
0a:f1:72:23:64:e8:4c:98:6d:9b:ed:1b:3e:82:e8:3b:ff:05:
dc:3e:d2:44:76:70:a8:55:3f:80:88:0c:6f:00:0d:79:55:a1:
94:3a:04:4a:b2:72:09:7b:04:b3:27:fb:95:6d:e2:db:cb:e6:
f5:3e:8f:60:9a:66:ba:aa:b2:d5:52:d0:25:97:b2:be:f4:71:
95:58:41:81:45:3d:b2:21:3a:d2:97:98:e7:7d:70:b1:aa:54:
ff:4d:68:e8:9d:f4:ac:a3:6c:38:8e:ae:20:f2:0b:aa:83:58:
ed:4c:55:0d:ad:6c:62:b3:56:1b:77:d8:ba:bb:4a:0d:78:08:
0f:b9:57:32:57:03:5b:7d:71:1d:ca:d0:df:fe:4f:63:fe:83:
d6:7c:d1:7f:d3:09:0b:82:ad:05:2a:d9:b8:be:7e:42:a6:2e:
06:2d:a1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:28:14 2026 by rpki-client