Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
File: dyDGcENNpRAiYQmdoQHyXdP3qto.mft (raw, json)
Hash identifier: hDrfeAt0XU5C1xu6fq6sfRP21WHdRw2KQT2oNjc/5cU=
Subject key identifier: 4B:7A:21:82:67:0D:CD:AF:BF:71:4D:A0:9E:4B:4B:4F:93:81:EF:AA
Authority key identifier: 77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
Certificate issuer: /CN=7720c670434da5102261099da101f25dd3f7aada
Certificate serial: 01A0CD47CE7AF4A336AD2901B404A23DA94C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
Manifest number: 12AD
Signing time: Wed 23 Sep 2026 08:00:30 +0000
Manifest this update: Wed 23 Sep 2026 08:00:30 +0000
Manifest next update: Thu 24 Sep 2026 08:00:30 +0000
Files and hashes: 1: dyDGcENNpRAiYQmdoQHyXdP3qto.crl (hash: /ZqaJe5q+6ouXcfV+9lcR2df9+SgLW8kWq2JwWVlL1s=)
2: fxjDmBMtX4lZXvQ-w62aJNa_wcA.roa (hash: k9PdZxgspVP2JG6hPwNtH2QKs9wDWHLF4meodXKpQn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:ce:7a:f4:a3:36:ad:29:01:b4:04:a2:3d:a9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7720c670434da5102261099da101f25dd3f7aada
Validity
Not Before: Sep 23 08:00:30 2026 GMT
Not After : Sep 24 08:00:30 2026 GMT
Subject: CN=4b7a2182670dcdafbf714da09e4b4b4f9381efaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:87:4f:9b:e1:ef:d1:56:77:92:99:cc:e1:4c:
21:c4:a3:4c:45:e6:80:54:79:ec:05:07:a9:c7:63:
d1:39:29:26:9b:bb:e1:b1:58:3d:45:ca:6d:ea:2e:
7c:31:19:0d:80:1b:fb:ee:ab:8f:8a:23:5c:4a:fd:
91:d7:a3:af:66:9f:a4:10:8d:63:1f:39:eb:ad:5e:
56:6e:f9:85:ef:7c:cd:39:6d:c5:7d:b4:06:c1:61:
75:56:c4:ea:05:15:fd:a3:fc:3c:8d:e8:d7:cd:b5:
45:9a:01:5c:40:e6:84:92:0c:09:ab:e7:1d:58:4b:
ac:4a:c1:ad:05:f0:c8:02:81:0e:4e:6a:78:ca:ce:
5c:2f:07:6b:3c:09:82:c6:48:9a:64:f7:18:99:d1:
d3:6b:0d:29:ef:92:3c:b5:46:48:06:14:c3:2a:04:
e9:20:06:7e:0d:a7:45:49:ae:77:c8:db:bb:3b:e7:
1b:b6:18:59:83:15:85:fc:a5:2a:1b:1c:a5:87:25:
d3:f9:cb:63:d3:1e:13:32:ca:ae:6a:61:61:e9:df:
fa:d4:b7:bc:9d:af:20:ce:49:d0:8d:9d:ab:28:02:
04:07:e6:22:d5:b1:ac:f4:ff:0d:92:7f:ec:1e:fc:
5b:6f:18:6d:73:5c:42:a9:f5:39:96:bf:13:e1:ba:
02:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7A:21:82:67:0D:CD:AF:BF:71:4D:A0:9E:4B:4B:4F:93:81:EF:AA
X509v3 Authority Key Identifier:
keyid:77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:27:c6:a9:f4:e9:11:41:20:fc:a8:43:15:cd:97:48:31:39:
18:16:74:12:58:fc:e5:2b:3c:6a:2b:b4:1a:a2:2c:0d:29:b0:
1c:72:fd:1e:43:76:e9:31:a6:54:1f:83:b2:85:1f:34:5e:fe:
d4:20:35:82:0c:43:5f:9d:05:db:b4:37:af:53:7c:30:62:f2:
5f:9a:7e:4b:4e:97:47:44:62:9f:87:08:b6:b0:36:b7:fd:ef:
c2:54:c1:6c:f3:d6:5a:0a:6a:ce:c0:e8:fa:15:b9:8d:a1:62:
bd:34:5d:83:8c:3f:6e:40:c3:9f:9c:09:fe:54:08:d2:cd:be:
d0:a8:20:6c:d4:b6:ab:61:76:88:3a:cc:8e:0a:96:f7:d0:96:
94:2f:68:f9:26:58:e8:80:79:e2:0b:b6:d4:39:50:ce:22:10:
c3:e2:24:45:65:4b:cf:32:f1:6a:24:96:7c:22:3b:d6:e1:79:
13:d6:41:5e:40:2b:ed:6e:cd:23:0b:97:e2:2a:b9:d5:55:d5:
61:bf:31:94:9b:8c:0f:3b:8e:8b:59:3b:04:8e:49:f2:d6:2f:
18:2f:65:eb:d9:07:4c:32:f0:03:27:bf:46:1e:47:21:62:1b:
4f:c6:93:b8:82:77:1c:98:0b:32:21:d4:04:f3:40:08:6b:08:
9b:13:17:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:05:43 2026 by rpki-client