Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: lpWEyxl04Dwe2WmZHdfPgriAiTCSw9V5+8/k9YDa2jk=
Subject key identifier: 8F:5A:CE:F5:83:80:F7:85:D2:77:D0:1A:DD:A9:A8:58:5C:EA:36:C9
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 019EBF5A879A01C823862C6337959D85E3D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 09D8
Signing time: Sat 13 Jun 2026 05:00:41 +0000
Manifest this update: Sat 13 Jun 2026 05:00:41 +0000
Manifest next update: Sun 14 Jun 2026 05:00:41 +0000
Files and hashes: 1: AMaU2fzpygF41S188jpF5PCtFow.roa (hash: AWYDQzHyjmYoYUtXrgToOGpkyPi31WYjmrREJ5IO1nU=)
2: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: iLkQt12rxXC/Dc5xvTaQdGZaOFN0MthV8KgoDY0XrDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:87:9a:01:c8:23:86:2c:63:37:95:9d:85:e3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: Jun 13 05:00:41 2026 GMT
Not After : Jun 14 05:00:41 2026 GMT
Subject: CN=8f5acef58380f785d277d01adda9a8585cea36c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:94:1d:76:a9:6b:3c:d7:16:cf:9f:c3:2f:93:
69:3c:19:f6:18:29:42:0a:fc:9f:13:43:bc:97:10:
94:8e:c7:55:74:a6:25:98:14:5f:b3:45:e4:50:62:
57:a1:67:96:35:cf:9f:ff:c2:22:d6:40:ed:ea:cd:
97:b2:a9:81:55:21:3a:28:41:ea:3d:98:93:4d:29:
ab:7d:30:7c:99:57:7f:80:13:48:f7:2f:f7:39:3c:
e6:5a:37:e9:5f:04:2f:ab:63:aa:c8:31:b9:9a:d0:
5f:66:28:86:0c:ed:f5:64:58:54:6f:dc:d8:22:e9:
f7:fd:5f:67:f0:52:6c:32:96:7d:1c:9f:19:76:83:
72:5e:3b:79:a7:0b:94:56:70:ca:2e:ad:60:42:6f:
3c:a7:7b:45:d0:bd:c7:aa:a3:52:f2:b9:cf:f9:bf:
a2:02:91:00:c7:03:94:28:c1:86:e9:d3:5e:58:ba:
ae:e0:6c:34:29:b1:54:18:4d:f4:ef:12:e6:e4:1d:
06:94:be:f6:c2:b7:f0:fd:af:a8:ea:68:1e:69:f3:
51:83:a3:1c:02:30:9f:e0:50:26:de:1b:2b:82:19:
81:e7:09:91:1e:b2:43:da:00:14:c8:9e:5b:9e:d1:
e3:9b:91:1f:99:5e:23:9f:dd:64:9c:02:bd:cb:dd:
38:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5A:CE:F5:83:80:F7:85:D2:77:D0:1A:DD:A9:A8:58:5C:EA:36:C9
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9e:3d:bf:bc:bb:c6:22:4e:4f:85:54:7b:7c:aa:c1:34:e3:
fc:b1:70:90:d5:37:41:a2:74:1a:2a:a0:8d:3d:a4:71:fc:6f:
8d:fd:b6:16:47:ab:b5:f1:e6:13:4f:b8:8d:20:d4:92:09:4e:
00:80:eb:9b:81:0e:4f:39:88:61:01:b0:c5:e7:7d:64:27:1e:
c6:4a:22:c7:7e:7e:b1:3c:52:fd:09:07:1a:ee:cb:99:81:c9:
fd:a3:7f:dc:43:bc:d3:d4:26:13:41:b3:3f:fd:36:20:24:89:
30:6a:35:ba:9e:1d:40:d6:e6:68:f4:0b:3b:06:b1:c6:f1:92:
f7:36:96:23:01:9e:e7:f2:06:e8:a9:82:ea:f5:26:a2:ec:fc:
9c:2b:23:d6:68:33:27:13:4c:5b:65:23:0d:bc:74:9c:68:be:
0f:ce:7f:e6:d6:f2:b5:ed:d8:2b:cf:d9:43:75:8b:61:65:3a:
b6:9c:0c:07:7b:1d:3b:f3:c8:17:09:9a:b9:fd:29:f2:81:9a:
0b:68:e9:72:84:b6:1e:c2:bf:6c:bf:00:54:e2:08:c1:16:1e:
7e:82:a4:5f:5a:02:26:4b:75:a2:dc:60:b9:96:04:f6:c7:db:
79:8a:fa:27:8a:79:57:5e:73:8a:02:0d:e4:aa:2e:03:18:1e:
91:8d:b4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:17:45 2026 by rpki-client