Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File: DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier: nRxG5F1kxkxHLAwi/vL1p+4/OqX6/9r1RYGRnnxl63w=
Subject key identifier: 9F:B8:F6:E0:E5:C2:A2:DC:3D:52:5C:5D:20:02:9D:7C:27:63:A8:2E
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer: /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial: 01A0DDCE5E93DF9406C58005347EB2F95ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number: 124C
Signing time: Sat 26 Sep 2026 13:01:24 +0000
Manifest this update: Sat 26 Sep 2026 13:01:24 +0000
Manifest next update: Sun 27 Sep 2026 13:01:24 +0000
Files and hashes: 1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: N4C+QaVTO2XltqNq3ToZwONPgb4KkfAPRti7U6g9keY=)
2: EAp4uNAc6f0HymDOmRK8myDrjdo.roa (hash: pmfGtVbkHJrjhdQXgKEkAIluH1FlB2AL+HRSoa36574=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:5e:93:df:94:06:c5:80:05:34:7e:b2:f9:5e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Validity
Not Before: Sep 26 13:01:24 2026 GMT
Not After : Sep 27 13:01:24 2026 GMT
Subject: CN=9fb8f6e0e5c2a2dc3d525c5d20029d7c2763a82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:38:3d:7a:17:12:5b:70:1e:43:31:f3:30:
d0:b2:be:48:9c:39:46:8a:b6:b2:0e:6f:14:34:9c:
3d:b8:75:94:e9:3b:f1:48:e7:12:4e:db:13:12:1d:
ab:63:8e:30:5b:ab:16:66:50:61:1c:c1:f9:de:9d:
2b:5d:5f:eb:2f:69:8f:13:86:46:c6:1a:bc:4e:d6:
88:23:a0:58:13:1d:d7:34:06:86:5a:11:8c:5e:21:
07:70:e9:db:7f:bf:5a:c0:ec:5f:06:f1:ae:19:e6:
5e:66:4a:33:c1:81:4c:88:9d:f5:74:77:b8:b9:64:
97:66:8f:81:55:c5:21:c4:91:d4:fc:95:c0:4b:9f:
42:ed:78:59:ac:26:61:ab:cf:91:91:4a:f0:74:78:
c9:e7:3d:ec:28:78:54:4f:3a:97:f0:4d:4e:df:08:
ab:e9:b0:0d:f8:ef:41:64:27:d9:65:a0:c2:f1:7e:
ee:48:bf:e3:d7:b5:8c:af:f2:67:1f:60:b2:97:df:
53:a4:4c:0b:af:e3:1d:a9:5f:db:a2:8e:51:73:fd:
62:cb:45:62:68:64:12:70:db:4e:4e:b5:83:33:c0:
5b:07:66:32:1d:3f:3b:1d:0b:5f:f4:2c:f4:41:6e:
1e:8a:4b:3d:39:c3:7e:62:9e:01:f5:10:ad:39:e0:
ff:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B8:F6:E0:E5:C2:A2:DC:3D:52:5C:5D:20:02:9D:7C:27:63:A8:2E
X509v3 Authority Key Identifier:
keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:84:83:16:82:7e:5b:99:57:b9:d6:5d:b3:6a:3c:34:4a:38:
11:d6:8e:69:63:fc:0a:dc:5a:d5:9f:a6:1c:a3:e2:f7:8f:1c:
99:cd:6d:bb:86:e3:63:d9:50:ed:6c:d5:57:67:f0:68:03:c7:
45:e1:77:c9:22:b2:62:43:53:80:27:ec:65:46:64:29:78:99:
07:3c:d0:38:8c:92:cb:ad:7e:ec:0f:b3:2e:aa:aa:9e:04:7d:
6a:b7:55:58:3b:a0:ae:4d:ff:65:df:ce:c8:48:59:b6:47:af:
7e:93:26:1a:ac:da:76:12:8e:96:d6:17:dd:22:fe:5a:f8:a9:
fe:fe:a6:28:07:d4:69:e3:03:28:f3:14:4c:47:e2:29:d2:eb:
98:4a:6e:27:02:fc:d2:bd:b8:37:c9:db:d1:e2:8a:4d:74:97:
f2:1d:53:39:f1:2a:12:6c:7b:62:ad:28:cb:6d:96:1a:63:bf:
69:4c:19:94:09:25:a1:dd:cc:82:2c:dd:f2:a7:42:20:e6:d7:
54:45:ff:35:cf:25:21:a1:90:8b:c7:c8:53:23:86:67:24:ec:
37:f0:97:4c:b3:65:eb:25:da:4a:28:bc:24:b2:d0:a4:3c:d6:
a2:77:b9:30:97:e9:c0:25:f8:9f:35:d7:04:8c:d2:f4:d9:ee:
59:54:1c:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdzl6T35QGxYAFNH6y+V7VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOGZjOGRmODRmYmYyYWI0MDQxMmU2ZDRhZGZmN2MxYjg0
YTViMmYwHhcNMjYwOTI2MTMwMTI0WhcNMjYwOTI3MTMwMTI0WjAzMTEwLwYDVQQD
Eyg5ZmI4ZjZlMGU1YzJhMmRjM2Q1MjVjNWQyMDAyOWQ3YzI3NjNhODJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3Q4PXoXEltwHkMx8zDQsr5InDlG
irayDm8UNJw9uHWU6TvxSOcSTtsTEh2rY44wW6sWZlBhHMH53p0rXV/rL2mPE4ZG
xhq8TtaII6BYEx3XNAaGWhGMXiEHcOnbf79awOxfBvGuGeZeZkozwYFMiJ31dHe4
uWSXZo+BVcUhxJHU/JXAS59C7XhZrCZhq8+RkUrwdHjJ5z3sKHhUTzqX8E1O3wir
6bAN+O9BZCfZZaDC8X7uSL/j17WMr/JnH2Cyl99TpEwLr+MdqV/boo5Rc/1iy0Vi
aGQScNtOTrWDM8BbB2YyHT87HQtf9Cz0QW4eiks9OcN+Yp4B9RCtOeD/6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+49uDlwqLcPVJcXSACnXwnY6guMB8GA1UdIwQY
MBaAFA2PyN+E+/KrQEEubUrf98G4SlsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgt
Njg4NzYyYmI5ODVlLzEvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgtNjg4NzYyYmI5ODVl
LzEvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz4SDFoJ+
W5lXudZds2o8NEo4EdaOaWP8Ctxa1Z+mHKPi948cmc1tu4bjY9lQ7WzVV2fwaAPH
ReF3ySKyYkNTgCfsZUZkKXiZBzzQOIySy61+7A+zLqqqngR9ardVWDugrk3/Zd/O
yEhZtkevfpMmGqzadhKOltYX3SL+Wvip/v6mKAfUaeMDKPMUTEfiKdLrmEpuJwL8
0r24N8nb0eKKTXSX8h1TOfEqEmx7Yq0oy22WGmO/aUwZlAklod3Mgizd8qdCIObX
VEX/Nc8lIaGQi8fIUyOGZyTsN/CXTLNl6yXaSii8JLLQpDzWone5MJfpwCX4nzXX
BIzS9NnuWVQcdA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 21:35:29 2026 by rpki-client