Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
File: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft (raw, json)
Hash identifier: wEGcYeePoiKKb4wTmdsXgu1Pifyhy93D9LEiP4JAhJo=
Subject key identifier: B4:8C:99:98:8D:61:4C:22:60:D7:DC:F1:A0:2B:17:57:F6:ED:44:6A
Authority key identifier: 77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
Certificate issuer: /CN=772f8e257843732ec5ed0f61a13acabee6090a96
Certificate serial: 019D9D3F3F8ECE28E45641644859DB12FEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 21:01:00 +0000
Manifest this update: Fri 17 Apr 2026 21:01:00 +0000
Manifest next update: Sat 18 Apr 2026 21:01:00 +0000
Files and hashes: 1: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl (hash: jDeNszjA5oMgBNIZAH6WOWkZPzfulF++EiQ3z/X+tqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:3f:8e:ce:28:e4:56:41:64:48:59:db:12:fe:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f8e257843732ec5ed0f61a13acabee6090a96
Validity
Not Before: Apr 17 21:01:00 2026 GMT
Not After : Apr 18 21:01:00 2026 GMT
Subject: CN=b48c99988d614c2260d7dcf1a02b1757f6ed446a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9d:0b:40:94:17:67:84:ac:21:03:1c:a2:61:
be:d8:9b:58:e2:3c:3c:01:88:64:d8:38:63:64:4e:
48:82:09:59:8e:1f:3e:3c:a5:c8:b7:3b:65:0e:4c:
61:20:47:96:79:15:2b:89:02:68:28:c5:0f:50:aa:
49:f7:90:f0:e0:e9:60:71:d2:d4:1e:f9:41:99:0b:
8d:e5:24:9a:03:b2:15:45:b3:b0:54:bb:55:45:9d:
e0:73:73:2d:3c:b8:2a:73:db:ca:69:60:b0:45:3f:
ed:bd:ad:b8:dd:76:4f:c5:d2:6f:e9:0f:d0:d6:16:
c0:f0:da:1f:17:39:58:5a:86:6f:30:17:c9:83:ef:
4a:6a:04:7b:06:20:5e:01:b8:09:c0:94:5c:e7:9d:
ed:6c:45:9a:95:b6:5c:09:c2:75:40:b1:5e:49:a1:
82:0a:66:ca:d4:40:2c:cc:77:84:14:49:0c:75:93:
e6:a3:d6:88:90:8d:0c:36:71:ba:55:0b:11:f8:31:
75:55:9d:1a:b7:25:2c:9e:34:f2:3b:bd:14:eb:c6:
08:6c:7f:fb:c7:d5:8a:df:8f:ec:6c:f4:03:1a:e3:
fe:55:f4:ad:b9:c8:87:f6:90:9e:6c:a9:05:05:15:
46:b4:fc:5a:d0:c5:0c:65:4c:47:b2:5b:fc:4e:56:
64:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8C:99:98:8D:61:4C:22:60:D7:DC:F1:A0:2B:17:57:F6:ED:44:6A
X509v3 Authority Key Identifier:
keyid:77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:81:50:c0:06:46:81:d5:20:3f:0b:40:40:58:82:bb:df:4f:
12:9c:6d:a7:70:d0:8d:ce:3f:4e:a0:ee:7a:21:ec:00:bf:a4:
08:c4:39:4f:b0:a8:95:de:79:eb:91:25:2e:7d:3f:91:1c:67:
82:22:af:97:37:5f:d1:58:0f:c8:7b:a9:78:c8:d2:29:80:3b:
e3:81:67:e6:ee:17:c9:7e:8e:d8:71:24:c3:f4:3f:17:81:71:
31:3b:da:93:6f:8e:7a:9f:59:c7:08:d5:62:c9:e0:50:eb:1b:
af:4f:ab:ce:9c:ca:07:4d:bd:fb:8c:a8:73:e2:87:a8:64:28:
b4:b8:3e:3e:b9:5c:9c:79:67:4d:3c:3a:9e:62:b4:9c:3d:c4:
ca:4b:f6:41:6d:16:f8:58:4e:14:96:38:04:42:2a:6e:34:95:
95:19:57:41:a9:3e:bf:09:78:88:e5:aa:6c:c9:56:e2:2a:23:
d9:ca:86:46:d0:4a:e8:62:a6:09:01:fd:f9:b6:34:9b:b7:75:
28:fc:64:c6:24:c6:01:b1:3c:93:36:c9:e8:c9:64:42:57:b4:
79:55:92:bb:d5:0e:bd:1d:0c:ea:42:85:38:87:36:16:f9:d1:
64:0b:b2:4f:6d:59:91:b6:13:aa:b6:86:75:31:33:60:ef:25:
64:f5:f9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:03:49 2026 by rpki-client