Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
File: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft (raw, json)
Hash identifier: EsCMFqfzU6gTvoo4S7FYWbwFm4OMXKHAcwDqZWUBFfQ=
Subject key identifier: BB:91:A8:BD:07:30:D7:5A:D6:59:32:0D:C9:E5:9B:98:EB:A7:62:37
Authority key identifier: 77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
Certificate issuer: /CN=772f8e257843732ec5ed0f61a13acabee6090a96
Certificate serial: 019CABD9A79A577161D548FF8142B2CD01B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 00:01:33 +0000
Manifest this update: Mon 02 Mar 2026 00:01:33 +0000
Manifest next update: Tue 03 Mar 2026 00:01:33 +0000
Files and hashes: 1: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl (hash: iS6VLTl3nY8YuVEdKpaZ+KGcfDL2XdOzyvoxA26pOps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a7:9a:57:71:61:d5:48:ff:81:42:b2:cd:01:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f8e257843732ec5ed0f61a13acabee6090a96
Validity
Not Before: Mar 2 00:01:33 2026 GMT
Not After : Mar 3 00:01:33 2026 GMT
Subject: CN=bb91a8bd0730d75ad659320dc9e59b98eba76237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:79:23:f3:18:61:f5:d8:39:3e:61:07:e6:
6f:40:24:eb:e0:e1:31:74:3a:63:ed:9e:90:12:8d:
8b:21:c0:46:6b:79:83:6d:b8:4c:05:60:42:74:d2:
ec:bf:f7:8f:d9:eb:74:25:b6:c6:4a:16:01:91:52:
58:58:c0:e8:49:9d:a3:58:55:32:87:aa:0a:8c:83:
75:69:b4:04:e6:27:0f:ff:2c:7a:d7:3f:bf:af:86:
52:b1:e2:81:e5:6e:e1:d2:14:d1:70:19:ac:3c:eb:
28:14:e9:19:44:a5:31:ba:0d:d4:bf:fd:d1:99:7e:
52:32:bd:29:27:fe:8a:2b:35:31:fc:e2:48:64:10:
8d:78:da:80:5c:8f:42:4e:05:b3:69:f9:95:a5:e6:
fd:f2:52:53:27:07:8e:9a:39:50:2c:d7:ab:a1:1f:
30:db:17:a0:a6:07:4e:5c:d3:9a:2b:3e:9d:ec:10:
c2:6a:c4:5d:a4:9e:db:33:e6:df:3e:d6:12:dc:43:
0a:8a:b9:df:5d:60:65:e7:cf:b9:a9:b9:2d:8f:4b:
0e:6c:1e:b9:9b:83:eb:fc:c5:c6:1e:4a:70:83:2e:
de:10:6a:e1:97:c6:8f:85:1d:e4:f6:a7:61:f7:0c:
ac:c2:ba:e5:07:ee:76:1e:36:59:e1:15:47:f7:9a:
4c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:91:A8:BD:07:30:D7:5A:D6:59:32:0D:C9:E5:9B:98:EB:A7:62:37
X509v3 Authority Key Identifier:
keyid:77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:23:65:db:13:53:d5:ed:ac:a4:f6:d5:91:30:6f:32:ff:c6:
ef:15:0e:ab:b5:24:38:41:d6:86:a4:e8:3d:e8:ce:74:0f:f8:
d7:e2:ac:5e:e1:43:22:df:f6:fa:bb:fd:09:ea:79:82:ec:d1:
e6:ca:7d:ff:af:f2:09:e7:05:95:ce:49:5b:84:32:b3:80:b3:
39:07:80:4a:26:a3:a9:9e:f5:92:f9:ad:f3:2e:4d:a4:29:59:
0e:d2:b6:b8:46:8a:71:2b:a7:6e:2e:cd:64:53:a6:34:a3:0a:
75:df:0f:40:18:4e:82:49:3b:fa:a2:31:b6:6d:30:5b:b3:8c:
21:43:16:33:54:0c:e0:30:6f:8e:36:b1:c9:82:b3:1e:b0:7c:
44:8d:3b:75:41:98:6a:2a:83:55:40:02:f9:56:d0:e3:cb:03:
1d:8a:6a:15:0c:20:99:aa:43:34:63:62:fa:57:3b:e7:b7:75:
96:ba:e7:4c:e7:f2:e9:33:0b:a8:c9:64:03:32:b1:2e:b0:12:
72:6d:f3:2c:e8:9b:b4:d8:d3:e5:67:65:a4:77:5d:e2:c3:4f:
be:4c:a6:cb:30:bd:cf:84:e1:65:5b:29:bd:eb:a9:ff:c9:16:
ed:e5:1e:37:34:7d:9a:d6:de:f2:bf:2c:f1:ea:06:14:14:e6:
04:ea:47:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:47:55 2026 by rpki-client