Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
File: DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft (raw, json)
Hash identifier: Tc6UAODW3SXPKWyHOjtOy0wC1sCM1iOLxWU1M/TrACU=
Subject key identifier: DC:D6:1B:7C:18:83:3A:92:D9:C6:28:45:FA:73:36:72:43:70:4F:28
Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
Certificate issuer: /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Certificate serial: 019DB2101399FE5B706A5664DFCCA202C8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
Manifest number: 1864
Signing time: Tue 21 Apr 2026 22:01:31 +0000
Manifest this update: Tue 21 Apr 2026 22:01:31 +0000
Manifest next update: Wed 22 Apr 2026 22:01:31 +0000
Files and hashes: 1: CbfPnzkIg630GLdNxKGZc9evepo.roa (hash: OlSSfeY+x6XajlxSO7XTBJeyZDwUAJ2psAjSHgtLxx8=)
2: DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl (hash: FVzyhgVb9kh5WRxObWvO+s/sHHRJ21uN4jz3CIM/JHE=)
3: KaCfEz66BVobYaD4JAQbgoR-gKg.roa (hash: y8noCaUxD0ZZ36hzHL6X++bGHmSgDwDhVDPA3PlLSas=)
4: e48dFNX7wc3SQhgi8G26wWhECzY.roa (hash: XEOD2QcK006EDHPh16ax+CiiGNzK5DlFCvCqDs8JPY8=)
5: gQm12kL8qC8G8fld0ndxKWB7Le4.roa (hash: DZyw6qHuuDne2cu+Q2hXVAXkBqKQX9CgYl0ktuHs/9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:10:13:99:fe:5b:70:6a:56:64:df:cc:a2:02:c8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Validity
Not Before: Apr 21 22:01:31 2026 GMT
Not After : Apr 22 22:01:31 2026 GMT
Subject: CN=dcd61b7c18833a92d9c62845fa73367243704f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9a:9a:05:b1:40:72:29:2a:f3:e6:30:b7:06:
93:ba:3f:82:d2:d6:73:d0:ec:80:d4:ef:c8:b6:6f:
0b:1c:54:1b:01:ac:40:92:df:65:a0:69:18:3e:5e:
e9:32:7c:ed:9b:f8:f8:2c:06:27:ae:ab:55:43:83:
5a:8f:c0:1b:a0:53:17:ca:0b:6b:5b:e8:ee:82:05:
b2:dc:55:4f:e9:33:df:65:30:5d:70:43:a2:06:5f:
28:ea:72:f4:99:d4:1b:c1:d8:12:50:6f:17:67:23:
4f:e1:16:28:4a:1f:31:bb:7b:98:2b:36:0b:0a:cc:
df:a1:d2:b0:df:9e:ea:ed:18:14:12:69:16:49:07:
59:cb:99:e8:9b:3f:5d:68:fd:5f:33:3c:d1:1d:14:
95:e9:d0:5e:5b:26:28:d2:9a:cc:a9:17:9a:a5:76:
1c:3b:d9:08:d1:fb:c5:95:2f:79:a6:28:c5:96:c8:
0b:9a:53:ed:25:ce:a9:e5:c3:18:fc:94:cd:54:d9:
99:c4:07:1d:6b:e2:0d:1b:e1:d8:4e:eb:f0:f6:88:
e2:84:dd:d2:50:9a:5e:a5:98:75:e4:e8:13:e9:cd:
5a:ea:fd:64:33:10:5e:0d:11:df:38:c3:3e:a8:0b:
e9:76:3f:11:b0:a7:03:00:13:09:51:d6:d7:b9:13:
9c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D6:1B:7C:18:83:3A:92:D9:C6:28:45:FA:73:36:72:43:70:4F:28
X509v3 Authority Key Identifier:
keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:a2:1f:90:df:8e:51:38:1b:69:ac:fe:ff:b6:16:bc:51:cf:
dd:e5:a6:d6:a9:44:42:c5:34:50:8c:02:db:da:c7:da:0b:d0:
a1:1d:e0:62:31:0a:7d:c4:8b:34:eb:c0:2b:26:b6:85:8a:d6:
2e:d7:ea:97:01:d7:4c:3a:eb:e1:0c:44:fb:38:69:98:93:d6:
3a:5c:be:41:47:dd:09:d5:0b:94:a6:70:a6:d8:28:84:03:a6:
bc:ea:ed:31:0f:82:22:e7:02:cd:3c:f2:41:d1:c0:d8:e0:e4:
50:12:fd:26:94:f6:42:ea:6a:2a:1f:31:33:7d:09:2c:ec:64:
e2:b2:84:76:45:b2:a8:cd:57:2c:ed:25:3a:1e:87:7a:34:8e:
ce:6b:0b:86:16:c4:1d:65:0b:c7:a4:60:17:d0:61:dc:bb:51:
77:ba:a6:2e:93:d9:a7:45:58:cf:5f:be:0c:44:15:a9:dc:a0:
d1:47:f8:20:88:1e:af:a5:5d:cd:0b:ae:b8:ee:91:bc:2f:f3:
2d:d7:7e:31:fb:b7:d4:bf:94:67:fb:7d:6a:c5:88:a0:1e:74:
d9:d4:57:ab:f5:5b:ac:5f:0e:a1:86:3a:38:e7:a6:49:bf:02:
57:1c:0b:df:04:9d:80:24:ff:68:54:1d:f4:f6:2c:64:43:c4:
50:2c:eb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:15:58 2026 by rpki-client