
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File: DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier: 7PaetcLlHadhix9Nj+xs/QlZK2AEA27sFdvRvZqAulo=
Subject key identifier: 6F:1D:94:8F:1D:F9:F2:3C:44:72:4B:63:C7:A7:7E:4A:2D:19:37:B7
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer: /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial: 019FAABE67E5FFD0A846DD213E5250AD4D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number: 11AD
Signing time: Tue 28 Jul 2026 22:00:32 +0000
Manifest this update: Tue 28 Jul 2026 22:00:32 +0000
Manifest next update: Wed 29 Jul 2026 22:00:32 +0000
Files and hashes: 1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: /2HzSTH7cfSEs6NrSF36YgVu8y9zom6f4UU5y62WHgg=)
2: EAp4uNAc6f0HymDOmRK8myDrjdo.roa (hash: pmfGtVbkHJrjhdQXgKEkAIluH1FlB2AL+HRSoa36574=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:67:e5:ff:d0:a8:46:dd:21:3e:52:50:ad:4d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Validity
Not Before: Jul 28 22:00:32 2026 GMT
Not After : Jul 29 22:00:32 2026 GMT
Subject: CN=6f1d948f1df9f23c44724b63c7a77e4a2d1937b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:41:23:b2:db:0c:c6:3a:d9:a0:50:da:59:b9:
58:fb:6a:1e:c4:87:c2:a1:46:14:ba:76:61:27:cc:
58:69:3f:17:97:78:26:e2:1e:4f:0f:e6:c2:2c:20:
56:a7:a0:48:77:c7:01:a5:a4:de:f4:39:6e:78:6a:
e0:bd:43:20:4e:e4:cf:db:7c:d4:02:d1:2d:70:4e:
43:4a:47:93:b4:2d:c0:d7:17:41:4c:68:27:3b:d5:
10:9b:1a:ea:0e:37:70:e5:98:ac:06:99:83:3f:e7:
fb:58:2a:b3:07:65:a8:e9:b3:48:43:71:0f:17:f9:
bb:53:b0:84:28:68:89:c6:a5:4e:59:00:21:e3:82:
18:62:de:12:93:84:ac:20:6c:3f:5e:76:0a:ed:6a:
e0:d0:71:29:c6:7c:51:c2:e9:32:bb:31:fc:53:04:
84:52:42:79:9f:76:72:10:2b:cc:2c:33:40:00:21:
86:eb:0a:81:73:2b:fa:58:a5:4a:8f:a2:7e:1f:9a:
6d:ca:98:63:c1:cb:e2:95:72:97:30:29:6a:13:ea:
17:6c:2e:2d:b3:8a:33:f3:43:4d:94:62:7b:cc:c8:
27:89:ee:e8:eb:c0:3c:1f:58:a1:39:7e:3d:54:84:
18:1c:6d:58:cd:0a:34:94:a6:28:90:8a:ad:ba:fd:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1D:94:8F:1D:F9:F2:3C:44:72:4B:63:C7:A7:7E:4A:2D:19:37:B7
X509v3 Authority Key Identifier:
keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:99:4d:0a:7c:ee:cf:fd:c4:7b:fb:d0:ba:90:ed:c2:81:4c:
04:b8:49:97:e8:5b:11:9c:4e:9b:40:91:dc:3c:98:bd:7a:4f:
bf:9b:ec:88:7c:f1:32:ea:fc:3c:8d:e3:c7:91:d5:a7:c0:e1:
99:cb:61:9b:a8:e9:44:ad:dd:9b:27:cf:11:7d:6c:b7:2a:eb:
e8:78:f6:4e:69:d6:87:e9:82:8e:3f:a7:ee:a3:6b:33:19:64:
4b:40:de:42:e5:8d:a4:7d:cc:c8:b7:d2:95:9b:0e:b4:20:a2:
c4:93:c3:94:18:c8:25:d2:47:a1:34:b7:1a:27:4d:75:82:a5:
33:7d:a6:91:c7:7c:3a:81:08:ac:3d:e3:2d:a0:6d:e2:d3:05:
9d:31:66:20:55:84:94:d8:0c:77:4a:b6:51:91:24:96:db:fd:
d6:e0:97:e8:a4:32:e8:c6:2c:76:d3:3a:c9:3d:88:c8:82:ed:
01:e2:b4:6c:d2:72:ad:c9:df:1b:d3:d0:ed:fc:22:2b:87:96:
d7:c7:59:c1:6e:d3:30:c9:b8:f7:f1:31:be:14:82:a7:10:49:
3e:1a:34:67:07:41:29:e7:77:87:c0:c2:47:94:26:a5:43:a5:
7e:c9:cb:7a:30:5d:5f:97:9c:bf:09:70:70:23:bc:ff:36:54:
ab:2a:7f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:48:26 2026 by rpki-client