Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft
File: dy9wNcKJOyjNBP0amzys0kKMjf0.mft (raw, json)
Hash identifier: PRqhtbtLGvi90W0g/LaFjdY6AJq4ofXUfDdQZQ22Eco=
Subject key identifier: 2A:FB:08:82:C0:7B:45:CF:BD:59:BB:A2:83:69:B2:90:02:AA:A3:A6
Authority key identifier: 77:2F:70:35:C2:89:3B:28:CD:04:FD:1A:9B:3C:AC:D2:42:8C:8D:FD
Certificate issuer: /CN=772f7035c2893b28cd04fd1a9b3cacd2428c8dfd
Certificate serial: 019EC2C911E4F9072214F96A12CA23782A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft
Manifest number: 0678
Signing time: Sat 13 Jun 2026 21:00:17 +0000
Manifest this update: Sat 13 Jun 2026 21:00:17 +0000
Manifest next update: Sun 14 Jun 2026 21:00:17 +0000
Files and hashes: 1: 8Qo74UQPSqvugCWFfb9DBf7wKqE.roa (hash: M/pOvg/hdX2EdZ83UmfDv3mPILFnj+u5MLVly1CyGXs=)
2: NZYrDqHNM7w06ZqIbetRmQuvkI8.roa (hash: aqDX81Tnke9g7oa5zcmS5K2aP4v9bwtCbdPJWZIvsEE=)
3: dy9wNcKJOyjNBP0amzys0kKMjf0.crl (hash: ONevAZoijKf0euGmBKrnYmQS5qMkU+1VitFlOQjmhIo=)
4: j7E0VOUyJDRGY1mXB_LTgfCHtec.roa (hash: DmIJX6VYUzzGV5IX9wpqM+xTHY2Teuv8gdmzrljcdLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:11:e4:f9:07:22:14:f9:6a:12:ca:23:78:2a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f7035c2893b28cd04fd1a9b3cacd2428c8dfd
Validity
Not Before: Jun 13 21:00:17 2026 GMT
Not After : Jun 14 21:00:17 2026 GMT
Subject: CN=2afb0882c07b45cfbd59bba28369b29002aaa3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:c8:2a:80:2a:d2:4d:be:9c:6f:af:20:07:
3f:f6:c0:35:8b:d2:29:7d:50:37:e2:c9:37:13:76:
e5:4a:5c:ef:cd:39:ea:4a:8c:34:9f:ba:54:b7:6d:
a3:7b:43:4e:f8:3b:31:cc:e3:6b:78:d2:e7:d1:ae:
ca:2a:04:8d:16:b0:86:23:fb:67:d4:c1:b4:40:e3:
46:47:2f:da:27:65:15:c9:c0:50:4d:0b:21:c1:20:
29:71:9a:0c:64:35:c3:62:50:ee:cc:7a:30:ab:97:
bb:a8:01:04:62:0a:30:0e:37:50:4d:00:1d:80:af:
f5:3b:64:89:06:d7:af:3a:dd:a0:79:be:56:5d:4d:
78:27:b5:bc:b7:84:d2:f9:c4:f3:6e:d8:3b:ca:48:
42:33:34:ea:a1:4c:a9:1a:32:c6:5a:e8:38:13:db:
24:d1:7e:07:93:b6:38:2c:9b:72:b8:01:01:fd:b2:
a7:c9:e8:22:36:38:67:20:e6:01:58:cc:e9:fe:87:
7a:6c:e3:53:2f:de:da:aa:c4:bb:40:3b:fa:76:88:
de:55:7f:7e:6e:e2:7a:65:33:0a:f5:5b:da:57:a4:
da:e7:e5:dd:39:22:13:5a:74:a0:ef:9c:ab:ba:19:
7b:d5:16:f7:54:57:df:cb:20:5d:f2:fb:b6:b6:a2:
e5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FB:08:82:C0:7B:45:CF:BD:59:BB:A2:83:69:B2:90:02:AA:A3:A6
X509v3 Authority Key Identifier:
keyid:77:2F:70:35:C2:89:3B:28:CD:04:FD:1A:9B:3C:AC:D2:42:8C:8D:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3e:37:71:d5:23:71:37:15:a3:9b:90:e1:d1:21:a7:cb:a9:
a9:d4:79:e5:85:9f:9e:65:2b:b8:1f:7d:19:05:9e:a9:45:35:
92:5d:5a:d3:32:e0:a9:c0:ee:af:d8:2e:bd:83:eb:2a:52:77:
d3:c9:6f:c6:09:f6:5a:89:a5:37:ba:32:0a:03:12:a2:d0:23:
7b:ee:4f:58:b7:ba:fa:55:c4:d6:e4:1b:48:c0:ae:7a:ea:37:
ab:1c:57:f7:91:2f:2f:04:d3:d6:84:83:83:e5:c0:33:51:4d:
40:9f:6d:70:22:73:77:dd:48:02:49:e8:22:c1:cb:14:46:57:
5d:d1:51:24:c2:11:af:45:4a:9d:6b:21:ef:b0:56:d0:25:0d:
58:95:5c:14:39:c2:3f:82:04:36:59:66:8c:9f:0d:9e:81:72:
e1:10:0f:43:5b:fc:2d:bf:60:d7:84:db:e3:3a:6e:4a:1f:2e:
c6:db:d8:ab:64:99:0f:85:d9:5f:23:76:a1:d8:f4:9f:c2:c5:
85:69:c3:23:d2:83:db:5f:d9:ca:57:01:5e:e1:76:d0:28:09:
78:08:4d:c8:70:16:9c:09:e2:15:f4:05:ea:d4:19:9d:fa:cf:
42:02:cd:54:b7:b0:01:26:28:4c:17:e9:9e:af:f6:3b:40:d2:
b1:98:a3:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyRHk+QciFPlqEsojeCp/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MmY3MDM1YzI4OTNiMjhjZDA0ZmQxYTliM2NhY2QyNDI4
YzhkZmQwHhcNMjYwNjEzMjEwMDE3WhcNMjYwNjE0MjEwMDE3WjAzMTEwLwYDVQQD
EygyYWZiMDg4MmMwN2I0NWNmYmQ1OWJiYTI4MzY5YjI5MDAyYWFhM2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ/IKoAq0k2+nG+vIAc/9sA1i9Ip
fVA34sk3E3blSlzvzTnqSow0n7pUt22je0NO+DsxzONreNLn0a7KKgSNFrCGI/tn
1MG0QONGRy/aJ2UVycBQTQshwSApcZoMZDXDYlDuzHowq5e7qAEEYgowDjdQTQAd
gK/1O2SJBtevOt2geb5WXU14J7W8t4TS+cTzbtg7ykhCMzTqoUypGjLGWug4E9sk
0X4Hk7Y4LJtyuAEB/bKnyegiNjhnIOYBWMzp/od6bONTL97aqsS7QDv6dojeVX9+
buJ6ZTMK9VvaV6Ta5+XdOSITWnSg75yruhl71Rb3VFffyyBd8vu2tqLlyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCr7CILAe0XPvVm7ooNpspACqqOmMB8GA1UdIwQY
MBaAFHcvcDXCiTsozQT9Gps8rNJCjI39MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHk5d05jS0pPeWpOQlAwYW16eXMwa0tNamYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80MWVhZTAtNmI3Mi00NjI0LTljMjQt
ODMwMzVhZmU0YTM3LzEvZHk5d05jS0pPeWpOQlAwYW16eXMwa0tNamYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80MWVhZTAtNmI3Mi00NjI0LTljMjQtODMwMzVhZmU0YTM3
LzEvZHk5d05jS0pPeWpOQlAwYW16eXMwa0tNamYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVT43cdUj
cTcVo5uQ4dEhp8upqdR55YWfnmUruB99GQWeqUU1kl1a0zLgqcDur9guvYPrKlJ3
08lvxgn2WomlN7oyCgMSotAje+5PWLe6+lXE1uQbSMCueuo3qxxX95EvLwTT1oSD
g+XAM1FNQJ9tcCJzd91IAknoIsHLFEZXXdFRJMIRr0VKnWsh77BW0CUNWJVcFDnC
P4IENllmjJ8NnoFy4RAPQ1v8Lb9g14Tb4zpuSh8uxtvYq2SZD4XZXyN2odj0n8LF
hWnDI9KD21/ZylcBXuF20CgJeAhNyHAWnAniFfQF6tQZnfrPQgLNVLewASYoTBfp
nq/2O0DSsZijKQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:45:31 2026 by rpki-client