Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json)
Hash identifier: Si4A/OOgevwEI6aTVcChUUFBaQhseKkqMLeLda2rfW4=
Subject key identifier: B4:09:86:2D:97:DC:4D:ED:AF:E8:CF:23:93:D4:CC:29:30:6B:9E:7B
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 019CB05AE59EFE0E2C8071EE6C82E0A7E3C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
Manifest number: 0F31
Signing time: Mon 02 Mar 2026 21:01:12 +0000
Manifest this update: Mon 02 Mar 2026 21:01:12 +0000
Manifest next update: Tue 03 Mar 2026 21:01:12 +0000
Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: pqIwI9Jx8pEZawpuvxyMJIys62EnQ6SLdFIHr2wSkMk=)
2: XpDHF6qNAfRig2NmPZIIBwNiNAU.roa (hash: 9bFU4KF8zp5CMrxC2WFBFW2SFIScv756NVWyJZFeI1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:5a:e5:9e:fe:0e:2c:80:71:ee:6c:82:e0:a7:e3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: Mar 2 21:01:12 2026 GMT
Not After : Mar 3 21:01:12 2026 GMT
Subject: CN=b409862d97dc4dedafe8cf2393d4cc29306b9e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:63:37:f0:e7:17:3a:cf:40:14:b5:b9:36:
c0:03:22:20:03:03:af:97:88:7e:d3:90:32:02:d5:
3d:a8:93:9f:0c:15:98:db:16:e9:b4:0d:fe:d7:ef:
a0:c2:cf:07:c9:42:aa:46:75:15:8d:4d:5b:f6:38:
94:95:29:8b:31:e3:b1:86:e9:2e:e0:c2:ff:d1:cd:
c1:7f:ee:0e:1b:b9:47:57:a2:f6:c7:9c:f2:f6:97:
6e:71:66:a2:cf:9b:9c:29:07:44:af:93:8c:18:f0:
42:e4:1f:f8:68:43:7f:35:12:81:79:ae:23:0e:6f:
f5:50:b7:0d:da:8d:d3:89:e9:3b:34:25:48:4a:cc:
db:26:e1:40:b8:98:27:45:2b:8a:90:de:e1:dc:dc:
d0:d7:c3:13:c2:d5:f8:7d:5c:7f:f7:98:79:79:73:
92:9c:ee:ad:2d:78:b6:ef:67:c4:15:ec:cc:d0:a0:
e2:ef:c0:e5:c6:ee:59:12:11:99:e4:a6:a3:e5:c4:
c0:67:37:0b:22:d1:f3:06:9f:f0:5e:56:49:a2:ea:
9e:0c:3c:ae:2d:fe:65:b7:7a:b3:11:27:3d:0f:a5:
f9:10:8e:a7:c7:79:df:f1:ad:98:2c:7a:9a:35:25:
22:a6:26:11:06:a7:ca:af:0a:2f:72:67:4b:66:41:
28:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:09:86:2D:97:DC:4D:ED:AF:E8:CF:23:93:D4:CC:29:30:6B:9E:7B
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:16:28:44:4d:08:6c:3b:0d:a8:d5:5d:a8:7c:02:44:36:66:
c5:93:c7:db:df:60:5e:56:48:e1:47:b5:01:13:fa:48:a3:20:
eb:88:04:fe:63:58:c2:ed:09:e3:74:5f:8c:ee:73:56:e9:a9:
32:67:99:66:71:ed:b9:d6:e2:d7:7a:68:02:26:48:8d:25:c1:
0a:58:59:68:c1:83:59:e4:75:74:8c:46:1d:4e:21:28:d6:18:
29:46:df:b5:ac:dc:e5:73:9a:b3:32:f4:96:77:88:bc:18:ac:
94:f1:8b:fd:3a:b2:ef:58:3d:33:e4:97:d0:24:c4:2e:16:52:
ac:ff:cd:b0:25:e7:cc:54:8d:12:4c:4e:3b:7a:05:7c:8e:50:
83:c2:5a:7a:81:f7:b5:47:6b:0e:32:59:8d:8d:f7:c9:6b:b0:
46:0a:e2:b1:e4:5c:91:65:0f:cc:d3:13:3e:f3:1e:76:bf:d7:
29:fc:f3:85:ec:97:24:f3:0e:4f:f3:9b:11:90:1f:dd:e1:f9:
05:bc:ca:cc:41:a4:74:42:f8:35:3f:45:54:0e:98:86:20:e0:
c7:2b:c2:37:4a:7b:32:3e:3c:db:da:d7:2e:ef:9f:a5:3a:69:
1e:87:f5:3d:d8:59:63:f2:ae:89:8f:41:82:9a:49:fc:3b:84:
81:c1:e2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:16:01 2026 by rpki-client