Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: x222pAUCjWtU/Q285TbMlOq84l1p5GEV0qkaGIzPjJw=
Subject key identifier: A6:F7:D1:C3:B8:44:CA:9A:AD:82:AC:42:0C:D7:C1:51:D0:D9:72:D9
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 019CE6A4A6D8C2FC85587BF4327ADFD4B8B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 17FB
Signing time: Fri 13 Mar 2026 10:01:16 +0000
Manifest this update: Fri 13 Mar 2026 10:01:16 +0000
Manifest next update: Sat 14 Mar 2026 10:01:16 +0000
Files and hashes: 1: 1xBlob06V4OZHwqAUkwFisJ8hbE.roa (hash: fUNS9n+gbfLHDdSyjCsCUEORZD+YjwBO+Q4C1PMroB0=)
2: JchC90yjmUCoGpTy_G9JV_hpnDA.roa (hash: y6rgHhMgSwSF+hb/ru1il5IUm+2sXbyrH9l61ZHVZEc=)
3: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: OMRkodvJHtUkQoaTXznPtZfzMcbraDHHQH3TV8GRp/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:a6:d8:c2:fc:85:58:7b:f4:32:7a:df:d4:b8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Mar 13 10:01:16 2026 GMT
Not After : Mar 14 10:01:16 2026 GMT
Subject: CN=a6f7d1c3b844ca9aad82ac420cd7c151d0d972d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:80:f4:f9:ed:e1:f1:99:85:b8:4e:31:a8:7b:
67:bf:60:12:a3:df:fe:3d:80:af:a6:80:78:f1:cd:
48:38:d3:87:66:4a:6a:72:ed:82:7b:a4:26:e5:b2:
6a:e6:3a:8a:1f:46:8d:eb:87:87:53:d5:95:f9:60:
c2:2d:92:78:64:26:04:c8:0c:14:de:d9:18:a5:61:
47:f7:d5:c1:07:ff:d7:23:c7:9a:d3:bd:8d:a0:08:
8e:2a:c6:5c:77:d2:fd:db:a7:04:4c:be:a9:74:8e:
80:93:f6:5d:ea:1c:06:74:34:24:ea:c2:7d:32:81:
6a:41:d6:12:bf:80:73:f7:a8:2c:4e:57:c2:fe:bc:
3e:bc:f0:ca:fe:0a:35:c6:0f:02:b1:bb:29:f8:ae:
6e:8b:2b:57:76:e9:b2:5e:38:2f:03:e6:e3:3f:88:
f7:ba:98:f1:a5:3f:a3:fa:6f:5f:37:86:9a:c7:01:
2d:d3:f7:2e:25:c5:93:35:42:e1:32:2a:e7:26:36:
f9:ec:bb:df:58:ee:0f:5e:36:00:5f:de:85:4c:d5:
0a:73:b1:f3:70:38:78:8a:e3:bf:b8:95:79:0c:e6:
b8:f3:7a:60:71:d8:6a:0b:e8:8a:15:cf:2f:30:fe:
ac:db:01:71:15:34:e3:ea:2c:eb:ec:2e:8d:c2:21:
bc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F7:D1:C3:B8:44:CA:9A:AD:82:AC:42:0C:D7:C1:51:D0:D9:72:D9
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2d:7b:f0:89:07:2a:53:69:25:a2:72:31:59:35:6a:8c:6b:
1a:82:11:92:4d:6e:77:14:89:a1:62:2e:bc:67:51:8e:6c:52:
14:12:86:b4:3d:35:7a:7c:c1:de:f9:b0:9d:a1:0e:7c:36:91:
4d:c4:94:3c:bb:3d:88:1b:fe:41:54:5d:38:68:40:41:f4:72:
ef:65:a1:5a:03:29:3f:57:e5:08:c9:e4:22:ad:c3:ed:6e:aa:
06:b7:15:0f:d6:e1:dc:94:5a:1d:fa:0a:1c:d9:e4:ff:43:d0:
d0:cb:c4:9b:f3:66:56:9e:cb:01:e2:83:69:ff:53:16:d7:18:
b2:c0:14:6c:40:63:71:aa:10:3a:e1:78:f1:0f:3f:0e:e0:5b:
18:ba:12:cd:73:f7:60:1c:a2:a1:ef:1b:51:3f:80:43:f3:11:
5b:8e:91:f6:c1:e1:48:a8:62:8a:49:21:e7:9e:56:a0:ed:cc:
0b:d0:c0:d5:b5:0d:a4:4b:08:97:cf:d3:1e:2b:30:d2:8c:63:
6d:93:a9:6a:5b:a3:64:89:a1:dc:0d:62:de:52:c0:c6:82:25:
60:9e:a4:33:01:47:8e:0a:b4:4b:a1:c8:e6:02:9e:e9:79:b3:
19:f4:81:3a:c2:94:e0:d4:c5:0b:83:0a:73:38:40:e2:7e:e5:
c0:8e:0c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:37:46 2026 by rpki-client