Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: +UmFq7GtU5DCt6LTuc1MWYvZ2XNA8qM47O2+RtHeIo8=
Subject key identifier: DD:95:D4:D9:D4:93:47:D6:F2:0A:48:D9:26:25:53:1B:94:35:03:84
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 019FA907A9701B236D2E22783123A3215710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 0A51
Signing time: Tue 28 Jul 2026 14:01:19 +0000
Manifest this update: Tue 28 Jul 2026 14:01:19 +0000
Manifest next update: Wed 29 Jul 2026 14:01:19 +0000
Files and hashes: 1: AMaU2fzpygF41S188jpF5PCtFow.roa (hash: AWYDQzHyjmYoYUtXrgToOGpkyPi31WYjmrREJ5IO1nU=)
2: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: GttPantG9IE7cjVWaSH79vOez18lluH0yd+Oz+nTGkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:a9:70:1b:23:6d:2e:22:78:31:23:a3:21:57:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: Jul 28 14:01:19 2026 GMT
Not After : Jul 29 14:01:19 2026 GMT
Subject: CN=dd95d4d9d49347d6f20a48d92625531b94350384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e1:52:f7:9b:28:64:c3:40:8f:92:5f:c8:c2:
78:41:89:bd:97:41:cd:c2:74:02:d8:72:9a:04:4b:
bb:4c:47:d1:7b:73:2b:26:8e:b2:0e:68:d8:f8:13:
ce:99:63:02:41:82:22:a5:b7:c3:9a:75:1d:5e:74:
20:37:3d:2d:4f:d9:1b:c6:15:d7:89:46:39:86:c2:
9a:d4:d4:91:89:f2:99:81:a2:d5:a3:5c:73:e5:05:
2e:14:95:1d:0d:22:8d:4e:bf:d5:a7:8a:36:11:c8:
03:3b:26:50:19:30:31:f2:be:48:ad:64:2e:39:c7:
ad:a6:48:dc:50:51:75:76:33:ba:6c:9b:7e:4b:60:
c9:55:17:9c:02:98:55:97:eb:0d:60:6d:a6:c5:a9:
83:27:91:67:26:b9:16:c4:91:d3:9b:0e:5a:7b:6e:
4b:74:5b:52:ba:1d:58:61:e2:a8:93:fc:a6:89:20:
80:0c:cf:fa:f3:6a:24:40:97:db:b6:2a:8c:f3:96:
f7:94:5b:ba:c7:bb:4b:38:9f:3c:ed:a8:2f:e7:df:
5f:b6:48:f1:77:fb:ce:48:32:f3:d3:ec:12:3a:6d:
a5:b3:91:14:c7:05:60:c6:f9:85:ec:b9:51:c3:79:
00:f3:9f:8f:a8:74:c2:f0:68:0c:e9:b3:bc:8b:5f:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:95:D4:D9:D4:93:47:D6:F2:0A:48:D9:26:25:53:1B:94:35:03:84
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:41:c4:00:a8:85:70:8e:e5:76:00:9c:b1:e0:b0:c0:06:08:
d0:0b:4e:5a:c0:c2:b0:45:88:ca:27:56:44:aa:6a:65:c1:96:
e4:0d:94:b5:8d:30:ac:b6:94:a7:9b:21:95:7b:d5:c2:5b:ce:
2e:d2:bb:da:96:df:15:49:92:5a:f0:85:12:2b:38:97:8b:35:
3a:00:14:bd:5d:4d:bb:55:a6:ba:47:7f:66:19:18:17:ad:eb:
c6:85:e3:e5:9c:0c:52:12:e0:9b:f4:d6:87:9e:34:60:d5:2e:
9a:c5:40:b9:2e:4c:1c:b5:db:e8:49:e2:e6:26:d5:d7:31:87:
e5:4c:e1:28:ae:60:e6:fb:1c:a5:4b:15:01:64:85:0e:71:17:
be:ea:48:df:2d:d0:b9:e5:20:06:7b:a4:fc:15:3a:55:f8:01:
a7:68:c1:68:f9:84:cb:5d:f2:d8:b2:c6:ea:fd:30:45:3f:40:
39:38:3a:c1:11:c6:6d:c0:08:46:ab:40:95:a5:16:11:8f:1f:
65:7a:17:26:2a:ed:dc:1a:23:b9:4d:bc:22:39:a3:75:b2:db:
2c:df:66:1a:d2:25:18:1e:e4:8f:ae:3f:4f:0b:38:fb:84:5f:
c6:a1:2b:02:4f:d9:ef:f6:3d:de:82:72:98:0c:93:57:34:19:
71:42:8d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:31:08 2026 by rpki-client