Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: PG6hTlUeM8ElBmbjzVxkw6lllpbrVa90HFtl/eGmatc=
Subject key identifier: 33:5A:C6:68:35:B1:8A:EC:94:3E:BD:F3:64:49:4D:A9:AA:D9:DF:8B
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 019D97E22854446485723857B3E16E26F684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 093F
Signing time: Thu 16 Apr 2026 20:01:14 +0000
Manifest this update: Thu 16 Apr 2026 20:01:14 +0000
Manifest next update: Fri 17 Apr 2026 20:01:14 +0000
Files and hashes: 1: AMaU2fzpygF41S188jpF5PCtFow.roa (hash: AWYDQzHyjmYoYUtXrgToOGpkyPi31WYjmrREJ5IO1nU=)
2: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: BUhTg3vD6SQz1v8XlYT/x4GYQlLzJImV1dj0pF+c3ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:28:54:44:64:85:72:38:57:b3:e1:6e:26:f6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: Apr 16 20:01:14 2026 GMT
Not After : Apr 17 20:01:14 2026 GMT
Subject: CN=335ac66835b18aec943ebdf364494da9aad9df8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:56:77:82:29:7e:a0:2b:78:73:66:3a:ab:
72:73:84:36:a6:29:71:e9:4b:e8:c3:34:fb:48:0a:
61:09:6a:98:f5:72:06:fc:71:99:bc:57:59:1c:e6:
ea:90:50:8e:24:7a:84:42:f4:26:ad:3c:49:7d:23:
97:9c:7b:f8:1e:55:54:10:ec:85:d2:45:1f:38:8c:
cc:6f:2d:c0:03:8c:6f:ba:4c:55:93:a2:b2:6d:7a:
13:ab:88:fb:c5:e7:d8:3b:86:3d:ec:98:36:f4:7a:
2d:74:a5:76:46:0b:d8:bf:6a:12:15:7c:ce:c1:de:
bf:e3:80:72:f1:cc:9d:c8:af:c2:d7:9b:bf:6c:17:
ff:e0:fe:9e:d0:86:a4:a0:5f:aa:48:a4:46:5e:eb:
19:0e:35:ec:8b:59:9e:d9:d1:3c:aa:2d:31:fa:c6:
b4:01:cb:f1:dd:bd:33:59:c8:ab:33:49:4d:8e:88:
64:32:ce:1d:a0:4c:e9:c5:30:10:81:94:c0:42:9e:
49:5b:8e:a4:57:a3:0b:49:e9:05:a8:37:c6:0b:c6:
e5:fc:44:67:a4:5b:5f:df:a8:31:5f:36:9d:7d:2c:
0a:1c:2c:88:56:af:68:0c:e0:61:07:39:11:ff:9c:
ed:3c:2a:a0:b3:30:97:7b:a4:64:fb:a0:d1:18:52:
41:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5A:C6:68:35:B1:8A:EC:94:3E:BD:F3:64:49:4D:A9:AA:D9:DF:8B
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:23:d8:41:0e:99:c7:4e:bb:fc:17:a0:77:f0:ec:34:2a:60:
fc:90:05:47:55:ec:d2:b4:73:73:10:df:4e:a5:42:04:7f:5e:
a0:2a:02:19:81:32:84:02:83:31:df:e1:b1:47:72:dd:e8:cd:
97:96:75:d9:5c:a6:d4:12:d1:71:56:e7:00:b4:9b:47:a6:17:
9e:85:b7:38:f2:0c:ee:8f:2c:de:2d:f3:0e:0c:2e:a3:5c:a3:
5b:95:55:d4:b1:82:a3:62:d9:f4:4f:aa:1a:38:72:24:6d:53:
3b:1d:5c:f3:af:7c:61:bb:80:97:e0:cf:f2:7d:c1:97:84:9d:
84:62:88:b6:0e:d6:1f:56:f1:ba:be:80:ad:5c:6c:ee:23:e5:
bb:32:d1:01:5a:e1:f8:d7:c1:b4:db:dc:e1:cf:7a:55:60:54:
37:05:60:c1:b3:15:7d:62:2f:02:f2:12:9f:3a:3f:0c:39:ad:
51:cc:12:e2:08:66:2b:77:f3:5d:5a:e8:6c:be:0d:a9:0a:d1:
58:c2:8b:0a:ed:67:ca:07:14:de:95:8f:30:23:c2:67:47:b7:
33:22:3a:23:fb:02:83:9a:32:c9:1d:76:b6:af:0c:8e:ce:57:
7f:04:0b:5e:f6:69:68:bc:85:7e:0b:44:de:c4:55:d1:a0:73:
ad:a9:b6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:50 2026 by rpki-client