Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
File: DYGcnS5S2Ereot5MLeZLd4mFjrI.mft (raw, json)
Hash identifier: YgTB48Qy9qKeCRhu4h2cRvbCJZRGp1MWI17VkLVjhzo=
Subject key identifier: C1:6F:D8:DE:F4:5C:8F:7E:3E:D2:EF:62:A2:AC:AC:09:86:10:1D:60
Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
Certificate issuer: /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Certificate serial: 019FA97491684B86E34D9A66E8473A22E52B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
Manifest number: 0D30
Signing time: Tue 28 Jul 2026 16:00:16 +0000
Manifest this update: Tue 28 Jul 2026 16:00:16 +0000
Manifest next update: Wed 29 Jul 2026 16:00:16 +0000
Files and hashes: 1: 4mvw711lnQzyvs4Hvdkp66DN8WA.roa (hash: cOfCZrF6cE78BmpoYXmsaMPC6thd3G27U3oDjezLwXY=)
2: DYGcnS5S2Ereot5MLeZLd4mFjrI.crl (hash: 9T5Per8cYMr4WXtyVGbO4MnNpcVwVj91CMwJZd8eoyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:91:68:4b:86:e3:4d:9a:66:e8:47:3a:22:e5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Validity
Not Before: Jul 28 16:00:16 2026 GMT
Not After : Jul 29 16:00:16 2026 GMT
Subject: CN=c16fd8def45c8f7e3ed2ef62a2acac0986101d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:86:72:29:ed:b4:5a:05:b7:2b:a2:30:4c:
e8:21:dd:95:cf:f2:1f:d3:a2:79:f4:34:e5:d3:9c:
d4:35:2a:30:b5:15:fa:f9:6c:37:8a:d5:57:c9:0a:
1e:39:ba:f6:7e:91:4b:20:4a:f5:26:65:0c:f0:6b:
22:17:24:03:98:93:88:f9:dd:c2:2b:0e:9a:c0:0c:
9f:c7:96:2b:d4:16:b0:95:fd:fc:3f:d2:e1:0e:e4:
aa:d4:b0:56:d1:d5:12:12:b4:e5:87:2d:99:e0:6c:
4e:da:0d:82:37:22:a6:82:8a:3b:5f:c5:1b:17:bc:
58:73:83:27:cb:93:78:cc:8f:80:66:02:c1:93:c1:
f1:bf:d7:e7:71:bb:02:2f:df:04:3c:02:f3:19:df:
82:28:af:07:f1:66:3d:9f:02:d8:fa:45:f6:19:ae:
20:bc:6a:78:04:99:f9:c2:f8:4f:f1:68:cd:8d:21:
80:b4:5f:90:0f:69:4f:a0:54:b8:e0:39:ab:cd:a3:
00:ff:ed:c6:5f:2c:32:90:4e:cd:06:9c:b8:c3:f1:
bf:dc:ae:15:d1:71:0a:64:1d:8a:7a:1a:38:10:3b:
b5:0f:f0:b2:46:fd:97:11:26:9f:71:7c:5f:46:3b:
2f:da:f6:2c:8b:6f:dd:ac:90:7b:51:85:84:0b:11:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6F:D8:DE:F4:5C:8F:7E:3E:D2:EF:62:A2:AC:AC:09:86:10:1D:60
X509v3 Authority Key Identifier:
keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:06:77:b0:c4:8d:3c:38:bd:5a:9b:a6:08:ea:ab:4f:d5:73:
b3:68:0b:1a:37:ca:aa:31:a6:c3:a7:20:52:92:fc:ad:2f:5c:
b9:19:62:ae:88:a4:e6:fa:ae:5e:bb:e1:96:c6:93:34:33:af:
37:e1:4e:55:df:54:b8:ce:fc:0b:08:d0:23:8b:44:99:7d:a8:
6b:0e:fd:2e:ec:50:a6:30:30:dd:1b:0e:ff:3d:3f:1b:37:7a:
d9:bb:32:2d:f3:60:71:0f:42:af:ab:8d:9f:f9:07:11:04:8a:
fa:d6:3f:db:4b:62:2b:d2:2a:90:9f:d3:09:cd:73:b3:91:f3:
52:39:91:aa:3b:ca:0f:2c:41:7f:db:26:89:7c:78:57:3d:88:
99:14:03:11:3c:69:31:70:dd:c7:0b:01:84:57:65:76:f5:42:
3b:97:7c:7d:42:a2:b0:f5:2c:2d:13:e7:76:36:e0:1e:a9:1d:
da:77:24:2f:31:bc:b3:6b:37:26:f5:7a:d9:b5:ad:19:9b:64:
3e:20:b1:b3:17:ca:57:9a:ff:c7:da:f2:c3:c8:6f:05:c4:e8:
94:cf:f6:d3:62:58:99:81:cc:40:6e:04:e0:8f:95:bd:a2:69:
54:7e:21:81:18:35:6e:a4:a1:82:40:e8:69:c7:5a:44:18:c2:
35:0b:03:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:54:11 2026 by rpki-client