Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
File: dygVWFa4zk2F-NpPbTWwVbMNvTw.mft (raw, json)
Hash identifier: 6v/KbrwNjZGAaxHMhZdwo6ymuGqPsH/LRzyAM+1X03Y=
Subject key identifier: C4:9E:46:9C:61:DF:97:9E:F5:44:7B:B0:01:6C:B1:3F:8B:F7:D9:78
Authority key identifier: 77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C
Certificate issuer: /CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c
Certificate serial: 019CAD908E0F3BEBF5BD54649E10A96C891C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
Manifest number: F1
Signing time: Mon 02 Mar 2026 08:00:57 +0000
Manifest this update: Mon 02 Mar 2026 08:00:57 +0000
Manifest next update: Tue 03 Mar 2026 08:00:57 +0000
Files and hashes: 1: dygVWFa4zk2F-NpPbTWwVbMNvTw.crl (hash: GPnC3G2wFgIprzwKUG/IHnqaTkQdOgBGR+BccmZ9lVc=)
2: teE-GV4jFdvOHSd0O53kEW4cy5k.roa (hash: 0356Ukvg/LYMgoMT4jttwObOTcKGEvd2A1wCebPv1IE=)
3: ymLzZ-VhmhqNEGONzE9KW-m04rM.roa (hash: RinsNGJ2DGv43ndnKRTv8Ja4sLQDd8GhBHpIm7eFfCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:8e:0f:3b:eb:f5:bd:54:64:9e:10:a9:6c:89:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c
Validity
Not Before: Mar 2 08:00:57 2026 GMT
Not After : Mar 3 08:00:57 2026 GMT
Subject: CN=c49e469c61df979ef5447bb0016cb13f8bf7d978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8b:d7:46:48:4d:82:17:7c:82:5c:c2:4e:d8:
61:d2:1b:1b:3d:ae:2e:09:7a:06:60:2a:24:66:56:
69:f9:79:2a:55:1f:63:9f:d5:14:e4:2f:66:d3:ae:
d2:dc:53:1c:20:d5:ad:d1:50:93:07:5b:75:4d:3e:
7f:b5:67:8e:30:b0:42:f6:96:3e:41:af:c8:e6:3d:
16:7a:ee:24:d0:37:6f:11:50:44:db:d0:99:47:cc:
ec:0e:c9:3a:9b:bd:60:50:d4:18:02:bf:44:1f:ca:
19:a3:53:f5:0c:37:78:dd:94:65:9b:49:17:f8:e9:
61:34:09:05:c6:1c:52:15:b7:78:76:d9:fe:42:cb:
9e:5f:e4:8a:28:31:6a:93:47:90:28:ae:bc:80:a9:
c4:eb:84:2c:14:dd:08:94:79:a4:b7:da:11:95:63:
e0:7c:c8:23:d2:f1:6d:db:fd:14:e2:05:eb:0c:0c:
c9:ea:c2:d3:ca:df:ef:16:7d:87:d9:81:14:de:43:
3a:5e:35:6a:6a:0a:e1:ad:09:9b:98:cc:0d:a8:ce:
0f:db:ff:a2:f4:5e:d2:f9:55:21:ed:ee:11:2c:55:
c9:65:07:07:c4:ce:9c:2b:52:9e:f2:40:34:5c:54:
c1:c8:76:f8:5e:d8:a6:0d:89:4a:c4:4f:db:b6:3f:
4c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9E:46:9C:61:DF:97:9E:F5:44:7B:B0:01:6C:B1:3F:8B:F7:D9:78
X509v3 Authority Key Identifier:
keyid:77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:58:e1:5e:bc:76:5d:c7:6f:f1:a6:49:75:20:9c:a2:24:8f:
0c:fc:c2:8d:3c:4f:81:9c:16:f8:79:9f:a0:d8:b9:b4:00:0e:
ff:85:d9:d0:98:e0:0e:c9:4e:57:65:1f:45:51:c3:ca:8a:46:
0e:d0:86:2a:27:77:63:59:84:26:ac:e6:40:de:6b:05:a2:1f:
58:11:15:10:bf:e4:d1:2d:6a:42:f6:73:a4:9e:0a:be:3a:31:
e1:41:69:df:48:ea:bd:2e:4d:97:0a:31:28:b3:0e:c6:07:d5:
08:fa:db:a4:82:d7:69:0f:d4:f2:3c:40:8f:c1:f6:99:5e:29:
6b:e8:2f:24:14:87:72:29:66:fd:c9:57:a8:2d:38:2a:9c:91:
6b:29:4d:de:0b:98:1d:66:bb:27:53:e7:db:b4:a9:b0:1e:54:
74:38:9e:1f:61:06:3c:04:60:e6:22:9f:6c:79:c5:68:d5:48:
0d:27:83:9a:a6:de:66:44:9f:98:b1:e8:dd:04:a6:78:b3:71:
c2:ca:34:1f:f3:54:f9:7c:33:3b:7f:77:3b:24:99:bd:9f:93:
43:c5:e7:ec:96:5d:b9:17:49:f2:3f:7b:d1:4f:7f:e0:37:14:
3c:a0:a7:f5:06:a0:7c:c8:3d:5c:f2:fd:bc:1e:e9:8b:e4:1b:
58:99:2a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:58:22 2026 by rpki-client