
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File: DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier: ilZ4lM5Xn3kTPypbzdfIXSJivUwOSOf6i+cKYE4E8lo=
Subject key identifier: 1F:0E:FD:29:77:D9:8A:3E:CA:12:CF:90:8E:B9:00:51:ED:A2:76:DD
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer: /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial: 019D99996E6DE2CACBECAF0915E212E8C464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number: 109B
Signing time: Fri 17 Apr 2026 04:01:02 +0000
Manifest this update: Fri 17 Apr 2026 04:01:02 +0000
Manifest next update: Sat 18 Apr 2026 04:01:02 +0000
Files and hashes: 1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: PcOZvAN7smAoa4yZt0oH7/UC3HfXDRuiM3v2cmECkEM=)
2: EAp4uNAc6f0HymDOmRK8myDrjdo.roa (hash: pmfGtVbkHJrjhdQXgKEkAIluH1FlB2AL+HRSoa36574=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:6e:6d:e2:ca:cb:ec:af:09:15:e2:12:e8:c4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Validity
Not Before: Apr 17 04:01:02 2026 GMT
Not After : Apr 18 04:01:02 2026 GMT
Subject: CN=1f0efd2977d98a3eca12cf908eb90051eda276dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:c6:f8:c4:a1:a8:cd:d8:ef:66:17:5c:55:
b0:45:aa:24:15:41:a3:3d:ad:b4:f5:8a:02:26:07:
7c:c5:8c:f7:58:67:a2:3b:5f:ba:32:c7:ff:59:c3:
66:7b:fe:d7:af:b2:05:2b:1b:2a:28:d0:a1:34:cb:
79:4c:b3:dd:0d:37:fc:e9:94:b0:cd:89:03:88:f8:
2e:c7:14:3f:09:4d:2c:a0:71:51:5e:ae:b0:93:a7:
6b:56:9f:4d:b0:90:8d:23:46:ab:fd:70:52:19:7c:
84:7a:a5:c8:f2:ca:c4:c1:34:1d:c3:d6:25:65:3f:
98:7e:23:00:fa:a9:be:8c:14:bb:2e:18:93:6c:6d:
58:13:4a:14:d9:b6:81:0e:b1:9d:b8:b6:d8:60:4d:
4c:87:66:a5:37:e2:42:14:ff:2f:ef:a5:19:d5:0a:
c6:77:4a:3d:04:95:02:02:e6:3e:98:55:0f:73:81:
f7:45:e8:be:15:93:99:ac:fd:8d:9b:17:4a:a5:ba:
45:7b:94:8f:a5:b3:f1:3b:dd:ae:5d:1b:f5:e4:6f:
11:df:ff:17:e5:59:1f:7b:8b:01:cd:3e:be:66:2f:
a3:68:0f:e4:d1:b6:c1:a2:0d:80:0e:47:ab:5e:fb:
56:e0:58:93:8c:9b:2c:82:6b:cc:b3:fa:58:b0:ec:
76:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0E:FD:29:77:D9:8A:3E:CA:12:CF:90:8E:B9:00:51:ED:A2:76:DD
X509v3 Authority Key Identifier:
keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f4:82:8e:e1:44:bd:56:0d:ec:6c:15:51:db:18:f1:ec:5a:
23:4d:7f:86:cc:97:26:b0:f4:d6:96:5e:e4:93:25:d9:44:98:
c3:a1:6f:29:73:45:f9:49:0a:cf:b8:32:8f:3e:b1:0d:51:1c:
28:88:a8:35:29:8f:ac:6a:c8:4e:5f:38:59:53:f2:e6:46:86:
a7:75:da:4d:cd:05:29:21:dd:79:d6:d4:44:3b:6e:87:91:f4:
3a:d8:3c:ce:0b:8b:2c:c4:11:79:c6:6c:f1:eb:20:00:3a:ea:
8b:8e:54:cc:a1:40:3b:01:aa:bc:6f:d7:72:34:51:51:f1:02:
a8:b4:e7:8d:04:15:87:9d:6c:da:19:bb:0d:f1:db:ab:2b:64:
25:83:8c:22:2d:e1:71:bc:1f:55:a5:d5:6d:af:d7:42:7d:3b:
5f:1b:1e:35:02:97:c6:75:bf:4b:bb:bd:53:ce:ab:d5:7a:5f:
72:28:0c:9a:80:f5:d7:2d:84:c5:21:e3:9e:ca:f3:d3:d0:6c:
dc:87:13:e1:07:7b:9c:59:cf:a8:3c:8f:4e:6e:5d:b2:91:29:
54:6b:53:87:9e:2c:0b:96:04:0e:b2:45:29:36:a5:fa:bf:00:
53:59:f5:3d:b3:b5:0a:09:10:05:43:e2:62:c7:5c:b4:58:f4:
8e:7e:45:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:16:54 2026 by rpki-client