Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
File: dygVWFa4zk2F-NpPbTWwVbMNvTw.mft (raw, json)
Hash identifier: bj/MWxLpvwuUAA74EuUBDhSutRs0UicaNecKkOwj6ys=
Subject key identifier: 23:5A:6F:CF:2D:F5:6E:46:BC:FD:86:15:B0:1F:78:42:26:AE:5A:D5
Authority key identifier: 77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C
Certificate issuer: /CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c
Certificate serial: 019DA4C1E216223DBF8A5B0A38B01C2DE28B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
Manifest number: 0172
Signing time: Sun 19 Apr 2026 08:01:02 +0000
Manifest this update: Sun 19 Apr 2026 08:01:02 +0000
Manifest next update: Mon 20 Apr 2026 08:01:02 +0000
Files and hashes: 1: IUXK5owGJRJBQqIOmgn7bKscCRQ.roa (hash: 3cmce/T6z+IA9rzyeoaTbVrr0D6UCYaIjKkeAxLWn1c=)
2: dygVWFa4zk2F-NpPbTWwVbMNvTw.crl (hash: bnU7DAxsKa2MmcvbEO1TiCG8GMBQzydHbhc/45WyOlU=)
3: ymLzZ-VhmhqNEGONzE9KW-m04rM.roa (hash: RinsNGJ2DGv43ndnKRTv8Ja4sLQDd8GhBHpIm7eFfCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:e2:16:22:3d:bf:8a:5b:0a:38:b0:1c:2d:e2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c
Validity
Not Before: Apr 19 08:01:02 2026 GMT
Not After : Apr 20 08:01:02 2026 GMT
Subject: CN=235a6fcf2df56e46bcfd8615b01f784226ae5ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:32:00:d1:22:49:dc:65:cb:c6:13:f0:60:
41:26:2e:6a:20:6b:b7:b2:bc:b3:bd:95:f9:11:97:
9e:99:24:61:a6:a8:35:12:a7:4a:b4:fe:2f:ad:f2:
84:31:62:bd:27:c8:70:6b:75:1e:a4:2d:e2:28:d2:
f5:c1:25:1f:8e:bc:5c:77:45:92:4e:05:9b:c7:f7:
ff:f2:4e:af:d6:22:6b:fb:ce:c5:10:ac:86:4a:53:
19:96:20:e6:a9:02:26:0e:6e:1e:99:94:c2:d0:5c:
e7:60:2b:3c:88:06:b5:ac:cf:20:4c:10:e1:c7:0d:
c2:e2:91:2e:04:c1:b0:81:6f:93:f8:0f:b8:38:19:
d7:51:91:0a:39:d2:bf:5c:87:73:c6:d2:2c:74:74:
f1:e7:49:02:29:f7:4a:cb:de:65:bc:63:16:eb:20:
13:2a:23:80:aa:0f:cf:a6:be:1e:38:4d:2f:c5:36:
81:ed:02:b0:77:d2:aa:cd:3f:5d:53:6e:f3:a8:76:
d1:1f:74:65:24:9a:cc:f2:52:d5:1f:72:a0:61:f9:
68:37:7e:2b:e7:a3:37:69:2c:0e:ac:65:19:e5:a6:
6e:98:67:d7:be:9d:15:39:47:51:59:f3:cb:8d:1e:
fd:c9:48:f9:8b:dc:44:06:43:61:09:b7:91:20:c2:
f9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5A:6F:CF:2D:F5:6E:46:BC:FD:86:15:B0:1F:78:42:26:AE:5A:D5
X509v3 Authority Key Identifier:
keyid:77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:40:4e:47:b5:d0:01:3e:61:e7:51:2c:4b:1e:f1:a4:bc:8f:
04:5e:91:86:2d:51:69:17:9c:b3:98:69:e1:c9:ed:39:3c:56:
3a:dd:cd:51:91:c5:fe:d5:51:57:5e:bd:b6:ec:2d:3d:b2:ab:
6d:69:c2:d6:59:4e:8d:a7:9c:fb:a0:26:06:e5:de:1e:2a:dc:
00:3c:db:65:15:ac:e6:7a:c5:d1:88:e2:21:74:13:02:10:89:
d2:04:2f:de:3c:7f:a0:df:55:b3:a9:37:64:5b:8a:de:b5:de:
dd:2d:a5:a3:ca:35:95:6f:9b:2b:2e:00:64:aa:71:ec:e5:a0:
65:99:a0:33:6b:5d:c4:62:83:f7:24:ac:41:61:77:3a:f0:99:
1b:4e:fe:35:a4:de:13:23:75:39:81:b2:3c:81:40:42:1f:39:
2c:5d:f0:1c:c8:e5:5e:a8:0e:f1:94:76:d2:bf:38:9f:85:3c:
0b:9b:c9:89:5f:f9:74:43:9b:2b:1a:59:16:36:91:cb:91:f1:
dc:8a:12:58:f9:db:e9:34:fc:dd:a8:60:81:4a:bf:47:f8:bb:
9a:89:7c:aa:22:3f:fe:de:97:72:e6:be:9e:c3:20:b1:86:9c:
5b:c7:85:55:f6:db:96:7e:46:e3:e2:9f:dc:62:4b:c7:4c:23:
e2:26:b4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:52:54 2026 by rpki-client