Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: eHM96IHZn8xNNjfFdEH3oXRv4FNTJ8s9f05vZzdVyCk=
Subject key identifier: 1A:A5:24:E6:41:AB:E0:EF:C0:70:7A:50:F5:BB:57:AE:60:52:1F:4F
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 019CAC4754317BA9397278FD03D23D6794B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 08C5
Signing time: Mon 02 Mar 2026 02:01:21 +0000
Manifest this update: Mon 02 Mar 2026 02:01:21 +0000
Manifest next update: Tue 03 Mar 2026 02:01:21 +0000
Files and hashes: 1: AMaU2fzpygF41S188jpF5PCtFow.roa (hash: AWYDQzHyjmYoYUtXrgToOGpkyPi31WYjmrREJ5IO1nU=)
2: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: UWV3SyTeqDbn6TCg9QvY2Sfu4V1rrqdlHPUSzsa7QgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:54:31:7b:a9:39:72:78:fd:03:d2:3d:67:94:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: Mar 2 02:01:21 2026 GMT
Not After : Mar 3 02:01:21 2026 GMT
Subject: CN=1aa524e641abe0efc0707a50f5bb57ae60521f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:76:33:8e:4e:d5:8c:f7:61:dc:4a:39:c3:
8a:eb:28:65:f0:73:7c:06:98:ad:b5:89:e1:7e:5f:
12:05:f4:38:55:d4:3f:fb:23:ec:c2:4a:ee:e7:89:
d8:39:e9:b8:e8:3e:80:1c:39:bb:fb:e5:cf:7e:f6:
b8:ad:76:1f:72:f7:78:cf:45:52:b9:c3:84:68:f8:
24:d0:59:4c:cd:8b:d6:15:8d:ca:00:92:7e:b7:60:
dd:49:7d:e5:ad:dc:67:38:db:9a:62:81:31:b1:d4:
23:16:24:32:bf:24:12:a9:84:0a:8f:d1:5b:97:83:
0b:d3:89:d3:cd:53:85:f9:8c:b0:ad:ba:3b:61:bb:
90:62:ad:38:6a:33:91:98:02:24:65:f9:98:1b:23:
92:11:17:18:d8:71:94:1e:72:81:fd:48:6b:b6:c2:
67:af:e6:c6:a2:f0:07:60:2d:20:21:55:5c:32:42:
61:d8:fe:18:67:e2:9f:cf:b1:71:b9:f5:37:c9:17:
a7:27:a9:6f:1c:82:5d:70:d5:af:88:b6:ea:ff:d4:
25:2c:48:19:9d:d5:d9:d2:f6:3c:1e:c9:c2:3c:29:
75:32:9e:c8:0e:64:85:b3:02:58:e1:35:ff:dc:69:
01:49:ad:68:dd:e9:42:72:ce:34:ea:15:55:0b:4d:
94:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A5:24:E6:41:AB:E0:EF:C0:70:7A:50:F5:BB:57:AE:60:52:1F:4F
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ec:f3:f1:bc:16:a0:2c:93:63:83:7d:29:44:e2:af:38:79:
5d:da:94:4f:65:b4:bb:63:22:dc:1a:7c:91:a9:71:29:6a:e9:
26:18:1b:13:63:ae:0e:ad:fc:fe:e6:6e:eb:b6:bc:47:83:0d:
45:3f:a4:9d:b9:3b:ee:fe:80:d0:12:c1:42:cc:be:f4:63:15:
c6:82:71:9a:79:a3:82:22:1f:f5:b9:8d:c9:a6:3e:6d:08:f9:
5f:5f:08:18:15:8b:01:50:53:21:c1:37:ee:0c:15:0a:33:c0:
5c:38:47:7e:03:7e:aa:db:4d:85:0d:47:e8:67:c0:8d:d7:8b:
4f:40:b7:dd:4b:39:ff:5d:c2:dc:65:30:e3:9c:34:ab:48:c6:
2c:bc:40:7d:77:f7:33:cb:b2:0e:ad:ae:c6:d1:02:30:12:0f:
29:e7:f7:86:17:1d:0c:79:8b:a3:7b:76:f8:e1:8d:37:ed:fc:
02:d6:36:19:f2:da:23:18:25:64:ab:8a:bd:19:be:39:04:a9:
11:c2:e3:6d:a0:af:8e:e4:9e:e7:69:4e:de:37:ed:b8:dd:0c:
09:e1:26:06:2f:81:60:0a:45:ff:f7:74:70:ea:25:a8:5f:cc:
2d:72:28:91:67:73:77:10:67:3e:cf:b3:cd:7e:6b:58:e4:ef:
b6:1d:32:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:40 2026 by rpki-client