Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File: DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier: 8RE3XOwgWxuC7W3+CdncUn7aTph8mGSK34zej/P//6c=
Subject key identifier: 67:0C:4F:0C:B6:92:4B:88:59:E2:5C:BA:63:FC:37:E4:90:03:EA:6F
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer: /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial: 019CAC105CBFE2660A4A6D895DDD58E52CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number: 1020
Signing time: Mon 02 Mar 2026 01:01:19 +0000
Manifest this update: Mon 02 Mar 2026 01:01:19 +0000
Manifest next update: Tue 03 Mar 2026 01:01:19 +0000
Files and hashes: 1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: td1hT2ianX2JqyIIxM9D9SwkF93uH3XFCog8qN93ILQ=)
2: EAp4uNAc6f0HymDOmRK8myDrjdo.roa (hash: pmfGtVbkHJrjhdQXgKEkAIluH1FlB2AL+HRSoa36574=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:5c:bf:e2:66:0a:4a:6d:89:5d:dd:58:e5:2c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Validity
Not Before: Mar 2 01:01:19 2026 GMT
Not After : Mar 3 01:01:19 2026 GMT
Subject: CN=670c4f0cb6924b8859e25cba63fc37e49003ea6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:39:ca:6c:87:07:28:f7:b4:07:34:38:11:96:
1a:e0:9c:a9:8c:a7:c8:c7:52:70:65:50:ad:f1:4a:
f5:48:dd:58:06:07:47:46:6a:9d:6a:4b:41:1b:7f:
0f:7a:4a:28:65:3d:48:ae:d5:47:3f:ce:f1:56:a6:
e1:e0:67:87:c0:9f:c8:13:cd:2b:dc:7a:b1:fa:af:
c2:3e:a3:b5:cc:d8:4a:7f:40:5d:b4:3e:36:1e:93:
f9:fb:53:1b:8c:e2:31:40:dd:3a:60:a8:2e:c5:11:
db:cf:59:a4:86:b3:0a:3f:f2:1b:e2:58:87:ad:dc:
ac:a0:5f:4f:e1:42:eb:7f:c5:a9:53:70:4b:60:56:
b2:6f:2f:c8:8e:fd:2d:c0:a3:2c:5a:6f:ee:48:98:
4d:ff:69:46:3d:06:e6:6a:51:32:6a:1c:e6:38:16:
33:2d:48:19:e4:62:cc:e7:68:00:df:78:e2:42:7f:
83:a5:f1:fd:16:e8:f0:75:53:fe:23:25:1e:b3:c7:
d8:1f:d9:51:74:0c:27:a7:61:4a:a8:f8:06:5b:a4:
c6:f9:85:2c:1d:d0:3c:72:48:9f:f8:d3:b0:00:f8:
95:48:63:0c:79:30:f6:e3:5f:1c:85:11:0d:5c:55:
dc:15:c4:18:f3:96:8a:93:34:34:0b:dd:66:e0:21:
77:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0C:4F:0C:B6:92:4B:88:59:E2:5C:BA:63:FC:37:E4:90:03:EA:6F
X509v3 Authority Key Identifier:
keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8f:c9:21:58:2d:14:4e:8c:3d:5b:77:37:46:fc:ce:71:ed:
c3:47:9a:80:21:56:95:01:06:f7:86:72:36:bc:f4:40:9c:59:
7f:ef:8c:4e:55:9e:9a:40:49:ad:cb:06:ba:a3:42:f9:52:56:
a4:84:de:97:98:00:63:d0:77:13:df:33:45:6f:1d:9a:c4:a2:
ff:e5:97:7f:14:9d:49:a1:bc:7b:a5:d9:de:89:63:ba:b7:61:
8e:cd:e9:d1:67:a9:d9:f3:11:c7:9d:eb:3a:03:d1:18:7d:42:
92:a4:bf:55:eb:4e:15:f9:ad:61:07:f4:69:e0:34:cd:0c:43:
c0:c5:f2:81:35:8f:e8:4e:be:91:6e:ea:94:9f:c5:5a:bf:e6:
b6:bd:61:0b:10:78:d5:04:dc:e8:26:04:fa:fd:52:80:c2:4a:
d1:34:45:62:6b:df:97:c8:fb:5d:d4:38:02:7a:f7:97:93:96:
b3:54:75:ef:d7:be:d0:ad:a2:6f:bc:10:91:4b:1b:30:95:a6:
66:09:4f:40:95:53:15:40:ff:bc:d5:86:3f:02:51:74:f3:71:
11:c2:06:b4:b9:7c:bd:6b:cb:01:97:fc:af:a2:41:8a:15:5f:
9e:4a:ed:31:9e:0a:30:5d:75:b9:d1:51:46:62:0c:3e:ab:cd:
86:63:7a:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEFy/4mYKSm2JXd1Y5SzsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOGZjOGRmODRmYmYyYWI0MDQxMmU2ZDRhZGZmN2MxYjg0
YTViMmYwHhcNMjYwMzAyMDEwMTE5WhcNMjYwMzAzMDEwMTE5WjAzMTEwLwYDVQQD
Eyg2NzBjNGYwY2I2OTI0Yjg4NTllMjVjYmE2M2ZjMzdlNDkwMDNlYTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jnKbIcHKPe0BzQ4EZYa4JypjKfI
x1JwZVCt8Ur1SN1YBgdHRmqdaktBG38PekooZT1IrtVHP87xVqbh4GeHwJ/IE80r
3Hqx+q/CPqO1zNhKf0BdtD42HpP5+1MbjOIxQN06YKguxRHbz1mkhrMKP/Ib4liH
rdysoF9P4ULrf8WpU3BLYFayby/Ijv0twKMsWm/uSJhN/2lGPQbmalEyahzmOBYz
LUgZ5GLM52gA33jiQn+DpfH9FujwdVP+IyUes8fYH9lRdAwnp2FKqPgGW6TG+YUs
HdA8ckif+NOwAPiVSGMMeTD2418chRENXFXcFcQY85aKkzQ0C91m4CF37wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcMTwy2kkuIWeJcumP8N+SQA+pvMB8GA1UdIwQY
MBaAFA2PyN+E+/KrQEEubUrf98G4SlsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgt
Njg4NzYyYmI5ODVlLzEvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgtNjg4NzYyYmI5ODVl
LzEvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFY/JIVgt
FE6MPVt3N0b8znHtw0eagCFWlQEG94ZyNrz0QJxZf++MTlWemkBJrcsGuqNC+VJW
pITel5gAY9B3E98zRW8dmsSi/+WXfxSdSaG8e6XZ3oljurdhjs3p0Wep2fMRx53r
OgPRGH1CkqS/VetOFfmtYQf0aeA0zQxDwMXygTWP6E6+kW7qlJ/FWr/mtr1hCxB4
1QTc6CYE+v1SgMJK0TRFYmvfl8j7XdQ4Anr3l5OWs1R179e+0K2ib7wQkUsbMJWm
ZglPQJVTFUD/vNWGPwJRdPNxEcIGtLl8vWvLAZf8r6JBihVfnkrtMZ4KMF11udFR
RmIMPqvNhmN6uQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:49 2026 by rpki-client