Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier: 5pFnn62hiRkcnJkYoB0MueXnm4zhTVcRBKZ3gkgwpao=
Subject key identifier: DF:B9:86:2D:8C:33:30:8A:51:81:E8:47:2F:78:E0:2F:4D:21:9F:EC
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 019D9DE3BCB3A24A738D806E189709E83631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number: 18D0
Signing time: Sat 18 Apr 2026 00:00:40 +0000
Manifest this update: Sat 18 Apr 2026 00:00:40 +0000
Manifest next update: Sun 19 Apr 2026 00:00:40 +0000
Files and hashes: 1: 0IWvtKpWz8nwzfyztFPG-10e-ec.roa (hash: M3DL2KpstDY4RX5irHxTIoQ7SYVzPk7eR23DZZrDMbo=)
2: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: htTIzP8y/od2A2aYsDtxvjGeE+k1YPY5lYB53LPbHK4=)
3: pYVSN2AB9mwBr8yDS1zYwXrTuMQ.roa (hash: xWYPQfiNQqIYcOLgwTTjRZ9fSTqKYlkmjs7r1ngIGF4=)
4: uXN7_MtPKMwhSTIFKpLUwo-V5P8.roa (hash: 8z/tTyMqQq524Fl02SLcRSjti3sQ0AEo40zN2vpCYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e3:bc:b3:a2:4a:73:8d:80:6e:18:97:09:e8:36:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Apr 18 00:00:40 2026 GMT
Not After : Apr 19 00:00:40 2026 GMT
Subject: CN=dfb9862d8c33308a5181e8472f78e02f4d219fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:3c:3a:55:52:01:a0:7e:1e:ff:21:04:32:
b3:e2:2c:3d:ea:9b:b6:10:96:d5:21:55:9b:86:9d:
83:83:a1:8e:b4:32:e6:99:32:90:6c:c0:53:a9:bf:
d5:b0:4c:ce:55:ee:35:61:c9:ba:7b:87:d3:ce:de:
8c:ac:97:b9:0e:c6:4b:b4:74:76:f4:0d:0f:eb:8b:
5e:d2:27:d4:03:27:6a:fb:2a:bb:cf:fd:a4:08:3c:
30:8b:42:b6:62:20:fb:30:4a:54:e8:f3:45:a7:e7:
e7:72:e9:a0:38:bf:37:e9:a2:e1:45:fd:2b:ea:d1:
c7:61:20:95:78:c9:5e:4f:59:49:09:cf:fb:02:51:
ad:ee:4f:76:cb:a5:ba:ed:0a:37:ea:da:1c:1e:e1:
29:de:14:cf:5a:b4:24:f1:24:eb:3e:55:ba:ca:e1:
37:e4:64:32:26:e8:17:03:a6:c0:6b:f3:65:aa:0c:
80:e2:9f:03:b9:ef:17:80:37:89:14:0e:fc:ec:da:
20:1e:88:07:53:2c:de:05:97:0e:44:f7:ef:00:fb:
f2:2c:90:3a:98:82:99:0d:f0:8a:c3:72:6f:a5:c9:
aa:76:56:cb:fa:92:8b:17:f7:18:fb:a0:aa:b9:d6:
bc:1d:5d:16:13:ad:aa:c8:85:5f:ba:50:b2:c8:a3:
60:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B9:86:2D:8C:33:30:8A:51:81:E8:47:2F:78:E0:2F:4D:21:9F:EC
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5b:be:30:8d:55:15:ae:03:64:3d:99:7f:e9:27:f9:05:17:
15:6a:55:36:fc:43:ae:b3:39:df:7c:ee:e4:e5:d6:63:0f:5d:
27:f5:94:65:e6:8f:79:ec:93:bc:db:5c:fd:fd:02:e5:99:62:
88:e9:71:e7:9c:28:f5:eb:2b:6e:7d:73:93:d9:b6:92:11:c5:
9e:a1:8a:63:3e:2b:08:47:71:1f:22:5e:e2:fa:14:13:b4:7d:
b0:44:cc:79:6f:af:74:a5:ce:c5:63:5e:b4:f7:89:62:b8:51:
ad:d4:05:a3:96:69:fb:7b:57:f7:a1:ac:40:96:b8:af:cc:85:
eb:56:e0:7c:6c:0e:90:58:d0:96:7f:88:92:36:52:b2:4b:cf:
65:08:3d:57:bd:b8:35:95:74:07:0f:ad:59:b4:1a:0b:10:1e:
f2:3d:98:82:87:4b:cf:8a:68:42:37:82:8f:9d:0a:6a:df:50:
b3:11:36:00:dc:cf:5f:63:a1:88:34:8c:0d:59:3d:2e:34:70:
4e:8e:78:52:bb:0e:2a:8e:f3:fa:df:85:1b:15:d9:40:63:f0:
8a:df:e8:2c:c8:b8:57:a4:04:7b:05:5b:53:5d:13:47:f2:59:
75:68:e7:0b:5b:47:48:dd:98:f6:35:e1:42:c2:4c:62:2d:87:
88:eb:49:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:23:10 2026 by rpki-client