Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
File: DY087TLjYPzUbBY1Vt4oqigksZs.mft (raw, json)
Hash identifier: cO8LhwdYjU2kEjD7PGFzuZ/1kPgS4UH5fWMWxD4wi9I=
Subject key identifier: 36:8D:F7:CB:39:68:C0:0D:5A:C8:C4:A6:2A:0E:79:E4:61:A9:61:8D
Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
Certificate issuer: /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Certificate serial: 019D38661D890C3D33099D797B8CD1A6F59E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
Manifest number: 0368
Signing time: Sun 29 Mar 2026 07:01:49 +0000
Manifest this update: Sun 29 Mar 2026 07:01:49 +0000
Manifest next update: Mon 30 Mar 2026 07:01:49 +0000
Files and hashes: 1: 1-nukkIR6QW9cgqOuKheFLpvicPM.roa (hash: E0YmmZeDYH8nWMQd2BPTkT+OQ+zyRbNJxd4dp/aCenc=)
2: DY087TLjYPzUbBY1Vt4oqigksZs.crl (hash: kG+lObEyJzEcgqBzRtw1jy+gqzF10otQK4ilcSaXj5w=)
3: fW8Rb2ydTpsUsTrGa2SivBYDQlA.roa (hash: R0r5msaJunREx2IGezURTBwCC6OaeIbwcDABeHEl6S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:1d:89:0c:3d:33:09:9d:79:7b:8c:d1:a6:f5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Validity
Not Before: Mar 29 07:01:49 2026 GMT
Not After : Mar 30 07:01:49 2026 GMT
Subject: CN=368df7cb3968c00d5ac8c4a62a0e79e461a9618d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c5:cd:cc:8d:5f:b3:81:e0:37:8e:13:36:88:
9c:73:80:50:45:4f:52:6f:d3:a0:54:ba:c0:ce:1e:
16:e0:56:90:97:9f:db:7f:84:66:8c:6c:7d:cc:ca:
47:a2:a3:93:fc:69:52:8a:00:72:ce:16:58:9c:62:
30:6d:b0:79:35:2c:d2:9e:c9:98:91:ad:0f:1c:ac:
2c:ff:d1:c8:62:e6:db:23:d2:ac:00:e3:7d:ac:7e:
12:09:cf:6e:d2:68:55:73:84:c6:8a:82:1e:3f:d4:
95:71:90:80:40:c2:8e:24:1d:23:3d:86:c2:19:66:
54:f1:da:a3:fd:60:e1:d4:7a:38:49:f3:7e:42:75:
de:88:61:87:82:86:23:10:28:9a:da:14:ba:d9:b5:
ca:b2:d4:de:06:19:a3:a6:b1:46:f2:02:9c:20:58:
f3:cc:6d:1f:57:c1:85:90:2d:83:0b:dd:c7:e6:f6:
32:2d:3a:3c:5d:44:fa:51:10:98:97:b6:9e:24:cb:
25:f9:c9:cd:dd:e9:8b:62:68:83:e3:d2:fb:2d:6a:
fd:ae:00:2d:6f:4a:f0:c6:0b:f0:d0:fd:a1:b9:fe:
dc:17:0f:86:12:8b:d1:08:0c:44:f0:6c:1e:51:97:
08:c3:31:96:0c:8d:12:67:5b:9a:35:d3:62:bc:21:
4c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8D:F7:CB:39:68:C0:0D:5A:C8:C4:A6:2A:0E:79:E4:61:A9:61:8D
X509v3 Authority Key Identifier:
keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c1:ed:90:d4:09:e0:19:bd:ae:ca:16:b3:01:7b:c2:50:99:
de:fe:63:ab:b6:ba:cb:19:b0:7c:b1:6e:d2:ee:1c:2d:22:62:
d2:0d:7d:ea:af:01:47:80:47:96:c8:33:c9:b7:05:b4:25:7c:
e0:8e:28:d5:1b:34:26:a3:54:b6:48:11:44:15:11:60:af:88:
5d:9b:03:09:57:8a:5b:43:ca:3e:a9:a0:50:62:c6:3e:2f:f3:
10:c8:fb:a1:bf:fc:ea:91:3a:86:6e:10:9a:3b:8e:d7:2a:20:
26:90:95:92:3b:51:5e:b4:0d:b7:45:93:b5:25:84:cc:26:b8:
40:5a:b4:c8:8d:3d:e3:34:f6:3d:4f:09:4e:ed:5a:32:ce:f6:
67:2f:92:b3:18:14:0d:52:d5:df:e9:46:aa:79:87:94:4b:cc:
8d:37:f3:0e:04:0e:60:85:7b:8f:d5:e6:d4:99:fd:25:f1:32:
e1:f2:c2:44:80:b6:fb:86:14:b8:01:39:59:07:5f:51:c4:eb:
71:c0:46:93:8c:33:89:02:ee:30:88:b4:b2:1a:0e:47:0f:1d:
ea:5c:92:38:e8:a0:8c:4c:d6:0f:76:16:60:ab:36:a5:d9:22:
5f:21:5e:dd:f1:20:13:b7:3b:64:fb:4c:a4:19:a6:23:6d:cc:
d9:8f:4c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:56:21 2026 by rpki-client