Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: ttjyHyeBa1STkxPxhU+7XzGPjzpEsRWbhOFzfNA1nlE=
Subject key identifier: 5D:98:42:7A:55:29:54:6C:FB:54:A5:8A:DC:BF:BE:79:E9:E9:51:86
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 01A1751526D9BEC3C031AA9981D5383769D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 1A57
Signing time: Sun 25 Oct 2026 22:01:22 +0000
Manifest this update: Sun 25 Oct 2026 22:01:22 +0000
Manifest next update: Mon 26 Oct 2026 22:01:22 +0000
Files and hashes: 1: 1xBlob06V4OZHwqAUkwFisJ8hbE.roa (hash: fUNS9n+gbfLHDdSyjCsCUEORZD+YjwBO+Q4C1PMroB0=)
2: JchC90yjmUCoGpTy_G9JV_hpnDA.roa (hash: y6rgHhMgSwSF+hb/ru1il5IUm+2sXbyrH9l61ZHVZEc=)
3: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: OkNczIdAaz+k96DtDU1pjjg4B1LDejSu8s5yFLk/4pM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:15:26:d9:be:c3:c0:31:aa:99:81:d5:38:37:69:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Oct 25 22:01:22 2026 GMT
Not After : Oct 26 22:01:22 2026 GMT
Subject: CN=5d98427a5529546cfb54a58adcbfbe79e9e95186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:a1:c1:12:69:43:a1:72:8e:59:b3:f3:9c:
4b:4d:24:74:cf:12:6b:ae:10:64:54:56:ad:6d:d7:
ab:e9:bd:dc:79:62:62:eb:ab:9b:0d:9f:42:92:c7:
34:ac:e0:f1:8b:6b:73:81:20:0c:53:e9:ff:bc:34:
e8:8a:ed:21:d2:1c:9d:5a:6a:70:81:be:8a:b6:25:
b9:77:42:2c:a5:97:61:0a:54:86:a8:bb:92:73:85:
70:a3:06:5f:74:46:77:02:8f:15:c5:be:f9:c6:d1:
b2:31:71:63:21:9a:84:f4:fc:52:0d:24:5f:1b:fc:
93:df:22:f8:a6:96:fa:ec:bd:0e:f2:c8:42:f9:25:
78:50:35:7a:3f:77:67:f6:d0:4b:6c:9d:db:f4:f3:
81:97:7a:ee:0b:2c:95:9c:9a:1a:14:cf:49:91:0a:
9b:05:a9:02:10:ac:ee:4c:e9:24:c9:3e:ca:4f:9a:
17:1e:22:63:e5:d6:ed:af:b1:98:bd:b8:ae:ba:b9:
6d:07:17:0f:ad:6f:a4:9b:d0:ee:5d:98:9e:4b:b6:
7b:aa:57:95:5a:79:f1:89:d7:43:c8:c7:28:2b:11:
3c:c1:e0:e4:06:8f:cd:55:d7:4a:1e:bc:41:33:3b:
e2:c4:17:60:30:8d:6a:2f:64:aa:a5:a8:51:b3:83:
95:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:98:42:7A:55:29:54:6C:FB:54:A5:8A:DC:BF:BE:79:E9:E9:51:86
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:79:a9:f8:80:ea:e7:19:a4:44:16:70:5f:7b:67:84:4f:80:
5e:e6:03:0f:80:b5:53:2d:bb:e5:1a:1a:55:3f:f3:f6:c0:43:
e0:16:59:0a:3c:db:9f:91:fd:9b:4c:23:48:a3:5f:18:8c:97:
e3:66:53:82:bc:66:2d:86:fe:79:70:32:0d:0e:20:41:79:7b:
fd:3c:7b:dd:30:62:d7:f6:0c:dc:8b:99:26:86:7e:5e:88:b9:
16:84:52:06:21:4f:c6:e4:2e:b8:e0:72:d4:86:b7:dd:a3:cf:
97:54:5c:3b:3c:a7:9b:fb:58:69:75:46:ed:58:99:7b:69:f3:
57:e3:bf:a6:95:b8:5e:e0:ae:71:d8:c4:d9:ef:8a:c5:30:2e:
40:45:ac:7f:29:bb:69:cb:3d:05:7c:51:51:07:86:02:e9:16:
b4:ff:bc:2a:f7:1e:c9:ed:3b:4f:4c:45:45:2e:99:4f:6d:ba:
3f:72:64:a7:15:e8:7b:b3:74:91:55:ce:b1:48:26:27:a2:59:
c0:2c:a1:03:b9:c0:53:54:53:4d:a1:8b:36:c9:eb:16:ae:82:
ea:40:4b:3f:4e:2c:4f:25:26:6c:5a:24:cf:99:e5:b0:94:97:
a8:ea:d0:f2:cc:a7:a6:89:ad:64:57:b1:af:a9:f9:71:c6:db:
91:94:70:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:33:46 2026 by rpki-client