Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json)
Hash identifier: q7+RaYmDSK9XkTzQ/WaOCI8aivj5AkqvCZuHIp2m9eg=
Subject key identifier: 8D:57:1B:45:4C:E8:C1:3A:B3:6B:4A:4D:58:E4:C8:D9:A5:CC:EE:84
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 019CAE6C7C2A57A8520300AC99FE9864016C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
Manifest number: 0F30
Signing time: Mon 02 Mar 2026 12:01:11 +0000
Manifest this update: Mon 02 Mar 2026 12:01:11 +0000
Manifest next update: Tue 03 Mar 2026 12:01:11 +0000
Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: +ahldAHgfvl+ghHW5h1MkNJW0btj3dqCB0svcKdRehw=)
2: XpDHF6qNAfRig2NmPZIIBwNiNAU.roa (hash: 9bFU4KF8zp5CMrxC2WFBFW2SFIScv756NVWyJZFeI1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:7c:2a:57:a8:52:03:00:ac:99:fe:98:64:01:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: Mar 2 12:01:11 2026 GMT
Not After : Mar 3 12:01:11 2026 GMT
Subject: CN=8d571b454ce8c13ab36b4a4d58e4c8d9a5ccee84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5b:00:5c:7e:d9:d3:79:48:b9:8c:0e:49:f1:
21:0c:a3:d8:b3:98:19:11:15:d4:bd:13:cd:8c:4f:
aa:32:b3:a1:dc:62:42:5b:12:cd:5e:5d:47:2b:08:
0e:3c:0a:5a:6b:87:2e:be:7e:6c:00:dc:36:b5:11:
59:a8:2e:7b:d3:b4:da:bb:8d:fb:ec:80:f5:c4:92:
39:11:12:3c:67:9d:8b:0c:94:5a:ec:f5:2d:bf:e5:
5e:08:03:0e:c7:16:61:52:f6:b7:47:47:53:3f:d7:
02:2e:8e:50:48:ac:33:78:da:92:94:3b:5f:da:4d:
ff:46:05:c3:c6:43:aa:04:25:7c:1c:5b:ea:3e:fa:
34:3f:7b:fa:f4:54:8f:6a:78:78:93:4a:99:f8:02:
0a:04:55:3d:c8:c9:03:31:83:e6:80:6e:db:8f:25:
6e:ee:22:69:00:e3:8c:cd:7c:1a:a7:c0:ca:a8:51:
25:d3:98:47:9c:a9:a9:5a:41:4a:1e:8c:fb:29:77:
e0:8b:16:41:c3:c7:21:bb:00:d3:1d:c1:45:27:4b:
6d:89:45:03:65:06:9a:87:30:75:6b:ce:38:f3:4c:
bf:11:e5:c2:6e:a8:45:ac:8b:da:81:37:9b:b4:18:
46:79:70:09:d5:12:47:87:dd:71:ff:02:95:d9:2f:
c9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:57:1B:45:4C:E8:C1:3A:B3:6B:4A:4D:58:E4:C8:D9:A5:CC:EE:84
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2a:7d:69:12:c3:da:28:e0:6b:3d:a0:a8:80:89:b9:d3:b8:
3f:2e:07:cc:b6:40:89:41:f1:e8:f1:6e:d6:49:a9:a7:86:29:
e4:0d:69:0a:1d:67:5c:19:c0:c3:fe:84:df:79:3e:d9:cd:5e:
29:b4:30:9f:9f:c2:e7:71:ae:bd:92:69:7f:2e:51:4d:51:24:
66:90:11:db:b2:52:54:f3:3e:4a:5b:d3:bd:4d:4c:f6:11:01:
57:d2:73:6a:c6:eb:fa:84:1c:3f:68:5f:ec:74:d9:1e:7c:3c:
a5:74:21:4c:bf:01:a1:29:9d:1b:3b:fb:b4:79:d5:49:f1:81:
c3:1b:0e:63:25:43:62:80:e2:c2:05:e1:25:b2:9a:bc:99:69:
8f:c0:a2:66:da:d1:be:f2:4a:a3:36:b0:ab:77:d4:e4:fb:7f:
ff:de:f6:e9:6d:6a:93:b5:7d:dc:7f:c3:10:da:a0:7a:62:06:
b8:fd:39:0e:4b:a3:a8:3f:4d:f4:5b:63:a3:de:d6:d1:7b:23:
f0:9e:03:b9:cb:1f:54:dd:0e:2d:f7:7a:b5:9a:7c:48:ff:96:
f2:df:21:06:2f:2c:45:c8:c8:8a:50:ba:9c:4c:2f:61:ad:06:
2f:ce:dc:c8:b2:34:a8:05:d7:50:d1:4c:59:b8:99:8c:75:1e:
f1:9c:92:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyubHwqV6hSAwCsmf6YZAFsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkODg5ZmFkYWU3YmYyMTA3MmZhZGIzMmUxZWE3NjNiMGMy
OTk0OGUwHhcNMjYwMzAyMTIwMTExWhcNMjYwMzAzMTIwMTExWjAzMTEwLwYDVQQD
Eyg4ZDU3MWI0NTRjZThjMTNhYjM2YjRhNGQ1OGU0YzhkOWE1Y2NlZTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFsAXH7Z03lIuYwOSfEhDKPYs5gZ
ERXUvRPNjE+qMrOh3GJCWxLNXl1HKwgOPApaa4cuvn5sANw2tRFZqC5707Tau437
7ID1xJI5ERI8Z52LDJRa7PUtv+VeCAMOxxZhUva3R0dTP9cCLo5QSKwzeNqSlDtf
2k3/RgXDxkOqBCV8HFvqPvo0P3v69FSPanh4k0qZ+AIKBFU9yMkDMYPmgG7bjyVu
7iJpAOOMzXwap8DKqFEl05hHnKmpWkFKHoz7KXfgixZBw8chuwDTHcFFJ0ttiUUD
ZQaahzB1a84480y/EeXCbqhFrIvagTebtBhGeXAJ1RJHh91x/wKV2S/JMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1XG0VM6ME6s2tKTVjkyNmlzO6EMB8GA1UdIwQY
MBaAFA2In62ue/IQcvrbMuHqdjsMKZSOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZTRiNzgtYWI5NC00NDljLWE0ZDUt
YWJkYjYzYWNlN2U3LzEvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82ZTRiNzgtYWI5NC00NDljLWE0ZDUtYWJkYjYzYWNlN2U3
LzEvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSp9aRLD
2ijgaz2gqICJudO4Py4HzLZAiUHx6PFu1kmpp4Yp5A1pCh1nXBnAw/6E33k+2c1e
KbQwn5/C53GuvZJpfy5RTVEkZpAR27JSVPM+SlvTvU1M9hEBV9Jzasbr+oQcP2hf
7HTZHnw8pXQhTL8BoSmdGzv7tHnVSfGBwxsOYyVDYoDiwgXhJbKavJlpj8CiZtrR
vvJKozawq3fU5Pt//9726W1qk7V93H/DENqgemIGuP05DkujqD9N9Ftjo97W0Xsj
8J4DucsfVN0OLfd6tZp8SP+W8t8hBi8sRcjIilC6nEwvYa0GL87cyLI0qAXXUNFM
WbiZjHUe8ZySUQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:53 2026 by rpki-client