Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
File: dygFKufRD9ImGiJI_ADSArDyVXQ.mft (raw, json)
Hash identifier: Wnk9oQfb7I1R1VWuJo8JBT/3EB1AEw0uyTS8/d+LfOU=
Subject key identifier: F9:1B:E7:AB:E7:FE:4C:EF:0D:E3:0E:5C:3B:A2:6B:12:73:A3:D2:4C
Authority key identifier: 77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
Certificate issuer: /CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Certificate serial: 019CABA1EBC08A5571CB4D6D0853C5AE3E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
Manifest number: 184E
Signing time: Sun 01 Mar 2026 23:00:41 +0000
Manifest this update: Sun 01 Mar 2026 23:00:41 +0000
Manifest next update: Mon 02 Mar 2026 23:00:41 +0000
Files and hashes: 1: JNkr5sJ7ip69KbDdvD4kPrMRCFE.roa (hash: lOIWQDrAFB72tPTDRq9zpid9asQhjRi1A6BVV0mLQ0A=)
2: dygFKufRD9ImGiJI_ADSArDyVXQ.crl (hash: t4v6vV9S+VCG5a4qAsCGe7D3i8+qkfpBGGfPiJc+/9I=)
3: sfYPhQ6RD9htbpRLWND2pNFZgk0.roa (hash: Nx5iosy0Tc5xWKlypEqy7h/HiFr5i52nJ2YrifsLjWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:eb:c0:8a:55:71:cb:4d:6d:08:53:c5:ae:3e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Validity
Not Before: Mar 1 23:00:41 2026 GMT
Not After : Mar 2 23:00:41 2026 GMT
Subject: CN=f91be7abe7fe4cef0de30e5c3ba26b1273a3d24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a7:36:4d:1a:e0:62:10:f2:bd:c3:41:5c:ef:
7e:9d:5d:62:77:dc:80:71:40:51:98:d0:c4:40:ad:
34:11:b7:7a:5a:58:82:e2:4b:f7:93:bb:85:48:82:
5d:68:1c:5d:19:a0:21:1c:50:12:20:4d:f5:e7:60:
76:d9:c6:ae:c5:e1:e8:04:07:2d:c9:80:d8:b0:77:
8b:a8:b7:22:86:f4:5a:d2:99:d5:da:75:e9:1b:4c:
c5:13:b8:1a:9e:03:3b:cf:9a:44:2e:2f:f0:82:30:
7a:ad:90:15:4a:72:f5:fd:94:fa:59:41:25:c1:82:
46:9e:43:05:52:60:17:86:14:73:e3:e8:02:2a:be:
5c:8c:a2:9c:ba:0d:40:af:cd:6c:8b:e5:7c:cb:24:
f7:d2:dd:0a:c2:35:5c:de:f3:14:b3:ff:01:f4:1c:
47:15:d3:2b:69:7d:d6:47:d9:e0:bd:a2:ad:32:75:
3d:c2:9d:9c:9c:8e:26:c7:8f:a5:d1:56:c5:96:17:
79:44:c0:d7:c7:d7:a1:5c:67:49:fd:fb:6d:2a:19:
77:2a:48:c7:69:88:d9:ff:f3:de:a8:34:1e:1a:17:
a6:0e:a8:6b:2f:80:8b:41:d2:ff:fc:b2:30:ff:ca:
04:6b:9b:7d:72:39:73:8c:50:8f:7a:75:c7:ad:36:
f8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1B:E7:AB:E7:FE:4C:EF:0D:E3:0E:5C:3B:A2:6B:12:73:A3:D2:4C
X509v3 Authority Key Identifier:
keyid:77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:17:bb:1c:8b:72:a3:17:b9:c5:ed:48:0c:62:b9:8b:e6:e7:
1b:b3:37:68:22:7b:a3:82:60:4e:b3:8f:eb:51:5b:3e:fa:89:
f4:d1:dc:f8:bc:b9:ea:b3:07:0c:27:a7:a0:b2:cd:22:2c:29:
4f:61:f0:ec:e5:a4:8a:8a:a1:2a:73:62:ae:b5:6a:b5:48:cf:
29:79:34:c5:25:8c:8f:6b:26:ab:6b:fc:e8:fb:f2:95:92:6f:
55:8b:08:9f:ed:d6:cd:50:f5:11:dc:57:fe:78:a7:1c:2c:b5:
54:9f:f3:7a:e4:7b:31:c7:b8:cb:85:0d:63:75:9f:d6:ee:5d:
54:1d:82:b7:3f:a9:34:3a:4e:f2:21:d0:38:ea:b7:a0:08:d3:
63:c5:cf:39:48:5a:2a:7f:6b:fe:b8:fa:3c:8a:9d:6d:76:34:
c7:35:55:45:3c:57:3c:34:0c:9c:2c:a4:cd:77:e2:10:f7:2d:
fa:4e:dd:2f:83:e0:ff:54:e5:51:2a:f9:1c:ce:d4:01:e8:38:
00:ca:79:bf:16:9c:a3:c3:6a:4f:f1:2d:24:65:49:de:93:6a:
ed:84:d0:6f:30:33:cb:0b:f2:fe:3c:51:c5:47:9c:df:0e:7d:
41:c8:e9:b9:88:e5:33:81:90:5b:f1:f7:50:c0:1e:2d:4f:c4:
4a:6c:ff:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroevAilVxy01tCFPFrj4WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MjgwNTJhZTdkMTBmZDIyNjFhMjI0OGZjMDBkMjAyYjBm
MjU1NzQwHhcNMjYwMzAxMjMwMDQxWhcNMjYwMzAyMjMwMDQxWjAzMTEwLwYDVQQD
EyhmOTFiZTdhYmU3ZmU0Y2VmMGRlMzBlNWMzYmEyNmIxMjczYTNkMjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6c2TRrgYhDyvcNBXO9+nV1id9yA
cUBRmNDEQK00Ebd6WliC4kv3k7uFSIJdaBxdGaAhHFASIE3152B22cauxeHoBAct
yYDYsHeLqLcihvRa0pnV2nXpG0zFE7gangM7z5pELi/wgjB6rZAVSnL1/ZT6WUEl
wYJGnkMFUmAXhhRz4+gCKr5cjKKcug1Ar81si+V8yyT30t0KwjVc3vMUs/8B9BxH
FdMraX3WR9ngvaKtMnU9wp2cnI4mx4+l0VbFlhd5RMDXx9ehXGdJ/fttKhl3KkjH
aYjZ//PeqDQeGhemDqhrL4CLQdL//LIw/8oEa5t9cjlzjFCPenXHrTb4nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkb56vn/kzvDeMOXDuiaxJzo9JMMB8GA1UdIwQY
MBaAFHcoBSrn0Q/SJhoiSPwA0gKw8lV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHlnRkt1ZlJEOUltR2lKSV9BRFNBckR5VlhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS80Y2IxYjEtNzAxYi00ZTQyLThiMDUt
MmNiYzQwZTVmZTYyLzEvZHlnRkt1ZlJEOUltR2lKSV9BRFNBckR5VlhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS80Y2IxYjEtNzAxYi00ZTQyLThiMDUtMmNiYzQwZTVmZTYy
LzEvZHlnRkt1ZlJEOUltR2lKSV9BRFNBckR5VlhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRe7HIty
oxe5xe1IDGK5i+bnG7M3aCJ7o4JgTrOP61FbPvqJ9NHc+Ly56rMHDCenoLLNIiwp
T2Hw7OWkioqhKnNirrVqtUjPKXk0xSWMj2smq2v86PvylZJvVYsIn+3WzVD1EdxX
/ninHCy1VJ/zeuR7Mce4y4UNY3Wf1u5dVB2Ctz+pNDpO8iHQOOq3oAjTY8XPOUha
Kn9r/rj6PIqdbXY0xzVVRTxXPDQMnCykzXfiEPct+k7dL4Pg/1TlUSr5HM7UAeg4
AMp5vxaco8NqT/EtJGVJ3pNq7YTQbzAzywvy/jxRxUec3w59QcjpuYjlM4GQW/H3
UMAeLU/ESmz/lg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:28 2026 by rpki-client