Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: EebxNI2ElFHgCoL+sbrSUa9Co5szjZViVKmrUOPL3Q4=
Subject key identifier: 29:C3:E8:75:80:67:3E:58:BB:38:B2:99:99:BC:90:FF:79:8A:77:A7
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 01A0C2FB1C0EB48BE76354420EE2F5D6910E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 0AE3
Signing time: Mon 21 Sep 2026 08:00:31 +0000
Manifest this update: Mon 21 Sep 2026 08:00:31 +0000
Manifest next update: Tue 22 Sep 2026 08:00:31 +0000
Files and hashes: 1: AMaU2fzpygF41S188jpF5PCtFow.roa (hash: AWYDQzHyjmYoYUtXrgToOGpkyPi31WYjmrREJ5IO1nU=)
2: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: v5Hg3n4WgXDD6md8d+cPmTvQhETD/rlgcYoHpwMG7kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:1c:0e:b4:8b:e7:63:54:42:0e:e2:f5:d6:91:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: Sep 21 08:00:31 2026 GMT
Not After : Sep 22 08:00:31 2026 GMT
Subject: CN=29c3e87580673e58bb38b29999bc90ff798a77a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:74:1b:00:e5:06:43:24:02:04:4f:c0:8e:
a3:98:5e:ee:89:1e:e6:28:91:df:eb:f1:9a:0e:1c:
09:93:34:d2:42:e1:f7:50:3a:d7:80:39:e3:8c:d0:
89:80:e5:83:44:f8:89:51:4d:9a:93:52:64:2d:17:
04:4e:c0:9b:a3:0c:cb:b2:b9:dd:96:75:a3:58:c6:
6d:a7:15:af:59:0e:63:c9:9e:9a:72:14:06:3d:4a:
98:9d:1d:6b:9e:50:4d:a4:ff:b6:5b:6b:89:17:71:
08:14:0f:63:14:2a:25:4f:dc:fa:09:3b:9c:ca:40:
df:9e:bb:61:b7:4c:05:ec:93:fc:f6:5a:26:dc:b1:
c8:db:83:67:37:6f:d8:46:50:99:2f:e1:ed:71:23:
ff:9c:1c:ae:f2:c8:86:ea:42:7a:dc:92:c0:59:56:
98:b6:bf:94:db:67:30:44:87:0a:5d:b7:a4:bf:76:
37:0b:e2:ad:9f:2c:67:d3:c7:0a:66:dd:b2:80:3a:
e9:14:fd:c1:9a:d3:db:e7:b3:4f:e2:cd:b1:7c:cd:
5c:fc:b8:86:57:a6:fe:91:8c:f2:6f:47:19:e5:22:
bc:a2:8c:71:55:8e:c3:84:f1:e0:d2:66:5a:e6:19:
ef:64:62:34:09:02:a6:32:5c:cf:99:58:73:fd:8e:
17:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C3:E8:75:80:67:3E:58:BB:38:B2:99:99:BC:90:FF:79:8A:77:A7
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:da:de:1d:48:47:58:64:0b:5c:78:fd:4c:b2:73:06:40:a6:
61:8c:c6:bd:14:12:22:dc:46:27:f7:b5:c0:c6:38:e4:44:b6:
08:90:77:ae:2e:cd:2e:c3:5b:11:56:0f:59:60:87:ec:97:cd:
5f:f5:15:7d:05:8e:cf:1c:9c:6e:3b:f6:e1:49:1b:8d:fa:ae:
45:71:85:35:3e:e8:f0:a5:da:b6:90:54:92:30:5d:ab:5d:f0:
77:f7:8d:f5:c9:a9:ed:03:a2:15:c7:d1:e5:25:58:f6:5e:21:
4a:1c:60:e4:1b:db:5b:e7:e0:b6:56:91:a8:1b:49:f7:f8:57:
c9:a9:98:e1:e3:73:c1:4d:cd:c5:1a:2f:4a:c3:1b:6e:7f:7d:
cc:16:72:a0:34:92:80:19:26:fb:e2:5d:08:3d:2d:43:3b:08:
18:f0:aa:de:b9:88:71:a2:d7:30:67:57:f1:94:ef:17:5b:b6:
84:f7:bc:b3:5b:9a:88:48:73:79:4f:8f:6d:ee:89:7c:48:5b:
1c:37:37:1b:91:60:d2:d6:ff:80:40:1a:6f:87:8a:54:5e:9e:
2e:69:5c:c9:81:f1:0e:b1:52:8b:e2:2d:bb:c0:64:ff:9b:7a:
5c:a2:52:6a:50:b5:9b:f5:55:22:f0:f2:f8:f6:c1:d8:ec:e0:
46:3d:16:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:00:20 2026 by rpki-client