Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier: r8SW4fc52nPHA1qrpJ/EPYyZ06rS/wyoclknWg7XNtg=
Subject key identifier: 39:C5:D1:BC:F3:81:B2:F4:59:DC:04:65:2E:0F:8C:B4:B9:5B:25:DB
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 019CAA8FFEC2A968060A28A2BF3D39919E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number: 1852
Signing time: Sun 01 Mar 2026 18:01:29 +0000
Manifest this update: Sun 01 Mar 2026 18:01:29 +0000
Manifest next update: Mon 02 Mar 2026 18:01:29 +0000
Files and hashes: 1: 0IWvtKpWz8nwzfyztFPG-10e-ec.roa (hash: M3DL2KpstDY4RX5irHxTIoQ7SYVzPk7eR23DZZrDMbo=)
2: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: 2g9x8g1C3L8i3zp4cuc26e0CpVlGQ+V5kQtB2jjyJRQ=)
3: pYVSN2AB9mwBr8yDS1zYwXrTuMQ.roa (hash: xWYPQfiNQqIYcOLgwTTjRZ9fSTqKYlkmjs7r1ngIGF4=)
4: uXN7_MtPKMwhSTIFKpLUwo-V5P8.roa (hash: 8z/tTyMqQq524Fl02SLcRSjti3sQ0AEo40zN2vpCYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:fe:c2:a9:68:06:0a:28:a2:bf:3d:39:91:9e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Mar 1 18:01:29 2026 GMT
Not After : Mar 2 18:01:29 2026 GMT
Subject: CN=39c5d1bcf381b2f459dc04652e0f8cb4b95b25db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:3f:e8:05:35:0c:be:02:e6:5f:f3:e4:e9:
3e:53:fb:a2:f7:09:06:80:47:e3:6d:b3:67:e6:77:
e5:7e:7c:30:ee:25:1c:c4:bf:28:ea:c8:06:35:75:
66:6d:b2:e7:79:24:c6:3e:20:1e:a2:3b:b4:ff:04:
fd:fc:6b:e0:75:c9:7c:db:1c:fb:a0:87:5e:db:18:
0e:ef:e8:e1:40:fa:4b:e6:ed:ee:4f:e7:fa:dd:ea:
12:76:90:e7:21:17:c8:d3:e3:47:0a:c5:76:04:34:
5d:e8:ab:76:70:d1:1c:49:5f:b2:7b:13:33:ca:cc:
51:67:05:17:1f:b6:6e:26:4f:7b:06:30:1e:4d:c5:
5b:b1:ab:b0:6d:b0:f0:ba:26:6d:5a:64:c9:d8:2e:
f8:dd:eb:c5:28:d3:3f:56:78:fe:6f:55:6b:cc:b5:
07:75:ba:6a:a7:a1:39:cd:5e:46:c2:bd:a0:c8:2f:
70:4d:88:5f:3a:eb:13:4c:62:44:1c:83:70:80:77:
e0:39:77:d3:ec:69:fc:4d:58:4e:20:9b:ed:3d:1f:
8b:8c:df:ad:29:a3:09:65:8c:7e:7e:bf:8b:d3:b0:
4a:39:07:b9:84:af:41:a1:f0:c0:a4:57:60:51:be:
78:bf:31:1d:60:78:f7:31:ec:a6:eb:e6:3e:7c:cc:
4d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C5:D1:BC:F3:81:B2:F4:59:DC:04:65:2E:0F:8C:B4:B9:5B:25:DB
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5e:cc:8c:06:a6:9b:28:38:83:1b:1b:4b:18:d9:b3:88:3a:
b1:75:b3:a2:c5:d7:7c:56:e7:68:c2:a3:4f:e1:e5:a4:a4:58:
1a:60:13:e2:b6:50:56:d7:17:2f:b2:21:d6:1a:fb:28:d4:4f:
33:ea:8b:fb:ea:b1:07:f7:dd:fa:75:84:47:87:42:26:37:d8:
29:4a:3b:a4:3d:14:ce:0b:fb:fa:2b:09:46:1b:af:5b:c9:e3:
c3:77:da:7d:73:50:93:86:19:3f:8c:3f:0a:f2:09:76:c7:04:
74:49:fe:36:26:98:3c:c0:a6:95:53:45:4e:ba:63:ed:6f:68:
3c:66:1e:2a:05:81:bd:a1:79:b2:e2:ec:e6:9a:8f:d4:86:18:
30:d7:67:f0:1b:d6:70:e7:ec:1b:9f:df:99:41:b7:6b:5f:76:
db:63:12:f2:ba:f4:72:b1:72:be:58:10:a4:35:a5:96:f3:51:
98:22:65:51:ca:e3:0c:f4:47:c2:d1:ea:07:38:ad:9c:f2:0a:
23:de:19:47:3a:47:72:38:92:f3:37:d5:45:b5:64:99:08:07:
9d:92:95:77:18:13:8d:30:89:81:ab:10:bd:87:04:db:d3:e4:
bd:a9:4c:7c:3f:63:9b:ea:b5:87:71:58:a9:c2:18:7e:cb:df:
4a:f5:94:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:51 2026 by rpki-client