Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
File: dyDGcENNpRAiYQmdoQHyXdP3qto.mft (raw, json)
Hash identifier: Ncv9/HywtJXLVq23vhlC6RcVruvLQ7DmQzksPr8ft6Y=
Subject key identifier: BF:12:BF:F6:96:67:33:B1:C7:06:58:EA:65:65:4C:07:1B:95:23:00
Authority key identifier: 77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
Certificate issuer: /CN=7720c670434da5102261099da101f25dd3f7aada
Certificate serial: 019CACEBC6A04E80D02F7AFDCD833DCEE51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
Manifest number: 108A
Signing time: Mon 02 Mar 2026 05:00:58 +0000
Manifest this update: Mon 02 Mar 2026 05:00:58 +0000
Manifest next update: Tue 03 Mar 2026 05:00:58 +0000
Files and hashes: 1: dyDGcENNpRAiYQmdoQHyXdP3qto.crl (hash: 7G05XrxzyJzkg6oNa943rYxYfRzxUIXtgttQtfsFcQA=)
2: fxjDmBMtX4lZXvQ-w62aJNa_wcA.roa (hash: k9PdZxgspVP2JG6hPwNtH2QKs9wDWHLF4meodXKpQn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:c6:a0:4e:80:d0:2f:7a:fd:cd:83:3d:ce:e5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7720c670434da5102261099da101f25dd3f7aada
Validity
Not Before: Mar 2 05:00:58 2026 GMT
Not After : Mar 3 05:00:58 2026 GMT
Subject: CN=bf12bff6966733b1c70658ea65654c071b952300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cd:2a:c8:4c:50:59:98:7e:9b:1c:a4:f8:01:
0e:09:19:d7:02:58:30:c0:38:98:06:2d:46:5a:00:
fc:e4:d9:63:95:22:54:5f:fc:da:6a:6b:03:17:45:
22:57:db:dc:5b:12:db:e0:ce:53:92:91:3b:75:c8:
e7:19:da:42:9d:69:b1:b6:0b:05:f7:8b:b9:a8:96:
01:06:7f:f8:0a:74:a0:20:94:66:e0:f3:55:8b:f5:
95:3b:e0:a5:fe:06:4a:7a:a3:4d:1f:9a:d7:bc:b0:
29:3e:b7:e4:a8:9d:86:cf:59:41:39:98:f0:38:35:
66:01:83:95:4d:b9:43:f1:e3:26:23:1e:4e:b1:4f:
ea:94:2c:49:e6:2d:dc:76:c6:2d:ce:0c:0b:5b:0e:
37:09:03:e6:2b:5b:aa:ef:4b:f6:a6:32:6c:59:aa:
e2:db:3f:bd:ea:a6:fb:82:90:42:d8:ac:7b:bd:ca:
8c:d7:1a:b5:cd:07:76:57:ed:ba:66:c0:36:a1:c1:
81:8c:b2:78:48:3a:44:53:6c:74:bb:e0:fa:14:b9:
18:63:a1:b1:3f:ce:89:17:b7:6b:b6:e2:f3:a9:ad:
98:1d:ee:3d:6d:93:96:67:ee:7d:3a:21:65:31:67:
64:ce:d0:2d:6a:08:5c:9f:31:15:c5:19:8c:7b:ff:
51:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:12:BF:F6:96:67:33:B1:C7:06:58:EA:65:65:4C:07:1B:95:23:00
X509v3 Authority Key Identifier:
keyid:77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f9:cd:e4:1b:aa:d3:df:d6:49:a5:11:ae:4f:71:fc:40:6d:
8e:82:72:f0:ec:2b:4c:5b:69:0d:c5:03:a2:03:c6:b7:30:66:
66:7a:48:42:fa:b7:38:a3:1d:ba:8c:bd:77:18:fc:41:8e:fc:
3b:86:15:ec:d4:55:20:ad:df:77:9b:d8:25:4f:aa:d9:8d:73:
8c:c1:93:c3:f2:fb:d7:40:7e:d2:0e:3c:89:55:87:29:09:0b:
39:f4:21:db:3d:b4:28:db:a6:15:3f:e5:0c:71:59:c3:de:04:
51:54:91:41:7b:ef:76:18:27:95:54:96:40:98:6b:32:df:78:
b6:fe:c7:cf:9d:fc:a9:75:76:2e:5d:ba:5f:82:80:e0:7a:2e:
b5:96:85:c5:48:db:d3:eb:ad:ff:94:80:39:54:7f:0f:77:86:
b3:e8:bb:2a:98:83:45:43:28:e0:ab:03:fd:2a:31:cd:e0:2a:
79:57:71:e6:b0:a7:8b:a3:53:b3:b2:2f:2c:7f:19:e1:47:6b:
50:e0:01:7d:f7:ec:1d:62:e6:de:66:65:d6:00:eb:5d:65:a6:
ff:0c:41:fd:fc:bb:53:7b:35:57:45:e1:2c:e5:97:b9:84:4b:
01:61:19:0a:c8:2b:a8:d2:15:8a:4d:53:27:7f:5f:9d:d3:6a:
89:b7:42:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:15 2026 by rpki-client