Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
File: DyKg7jvG4y2JLt3iV8u3mRefLNY.mft (raw, json)
Hash identifier: ewBKKI3HtSa4xxOK3GYk67Ha9Qb3K9AJS4S74fwGDwg=
Subject key identifier: B6:36:D3:96:AC:76:71:3F:80:90:34:5E:D4:9A:C0:20:60:C5:22:B8
Authority key identifier: 0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
Certificate issuer: /CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Certificate serial: 019D98864487B634101F62F3CA571CDC8899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
Manifest number: 0A2C
Signing time: Thu 16 Apr 2026 23:00:29 +0000
Manifest this update: Thu 16 Apr 2026 23:00:29 +0000
Manifest next update: Fri 17 Apr 2026 23:00:29 +0000
Files and hashes: 1: 6anxR7oWcscDd04QL41XaD9H2mI.roa (hash: HOaKAJ+9l8ZBJN2kLFM0Go13VYLLmXxM5vLOU8G4dHg=)
2: DyKg7jvG4y2JLt3iV8u3mRefLNY.crl (hash: T+/svtNRE7eG8TLHfPbYnjIfBu4wbhzdNnOaryGc1kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:44:87:b6:34:10:1f:62:f3:ca:57:1c:dc:88:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Validity
Not Before: Apr 16 23:00:29 2026 GMT
Not After : Apr 17 23:00:29 2026 GMT
Subject: CN=b636d396ac76713f8090345ed49ac02060c522b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:66:51:a6:55:28:08:cb:4a:77:0e:8d:ac:61:
f6:a2:05:02:ee:7b:98:e6:d5:94:e8:a9:f8:db:37:
b2:85:9a:cd:67:e5:4d:e0:62:7c:43:e3:eb:c9:9a:
0b:be:47:44:90:39:27:1a:72:9e:26:89:92:a9:ca:
82:30:58:07:1e:e3:bd:77:cd:29:ed:93:2a:f9:ab:
23:17:96:a3:c6:ce:eb:cd:12:54:8b:d4:5a:4e:b8:
a0:0d:f8:98:1c:7e:2a:80:f2:df:2d:94:4c:99:eb:
f7:00:c4:d3:b5:2d:8b:fb:2a:8e:d1:e1:d5:d3:20:
9a:d5:ba:41:d6:09:40:ce:fa:64:36:2e:64:69:07:
7d:32:fe:ed:89:6d:97:b7:34:5d:d0:4c:18:ec:70:
88:1f:ab:20:16:54:eb:82:ec:b2:b3:6b:06:b0:a0:
e6:de:66:4f:f8:89:b5:a3:10:97:c6:ba:7f:c1:dd:
b3:0b:bc:07:ec:78:eb:1b:14:ad:70:73:f4:99:30:
c2:d5:ce:67:b2:e9:ae:0a:3f:c3:da:54:66:fc:21:
89:99:c7:29:92:24:c6:70:4c:83:91:39:f1:50:22:
a0:6d:82:aa:e5:2a:14:63:a7:b0:cb:06:b3:d4:4d:
d6:9c:c9:ee:2b:1c:e2:4e:c2:aa:a8:08:5e:0b:0a:
9c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:36:D3:96:AC:76:71:3F:80:90:34:5E:D4:9A:C0:20:60:C5:22:B8
X509v3 Authority Key Identifier:
keyid:0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f9:8c:5d:24:27:8f:71:e6:72:bd:26:0c:07:4d:de:ed:23:
8f:c9:12:be:7b:be:07:e3:ec:74:d1:23:7e:5a:4e:97:e4:b4:
0e:a8:cf:83:0d:14:6e:c3:e8:46:a5:f3:92:33:86:3e:18:64:
c0:b0:bc:13:9a:5d:a9:c5:1e:60:10:78:19:68:ce:3f:9e:c7:
15:c4:3a:8d:02:47:24:bd:2d:89:52:cc:b3:63:bb:2d:38:7f:
31:8c:a0:d0:9b:47:ab:d0:86:88:4a:2e:42:fb:e7:27:35:b9:
2a:9b:3c:d7:eb:d6:97:a5:0d:b2:0c:7f:62:81:9b:11:94:c4:
b0:dc:e2:cf:98:ff:29:43:d3:d4:77:be:ea:d7:f1:9f:a8:61:
04:51:cc:91:cf:5d:60:21:86:8c:7b:2b:bb:3e:b5:df:50:68:
b8:43:05:22:15:19:49:ff:6b:94:1d:e0:06:be:ff:ec:59:00:
67:8c:a1:af:3a:c1:48:25:6a:1c:24:4b:87:da:66:c9:2c:3f:
08:f8:9f:13:aa:5c:5b:6f:a7:23:5a:dd:5d:ce:8c:f4:0d:85:
a0:39:b6:c7:ba:3f:a4:be:c1:73:9b:46:c4:c6:35:da:2b:65:
68:f8:a1:cb:19:4f:fd:b3:30:76:ac:e6:5c:67:82:c5:f5:d1:
41:35:54:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:33 2026 by rpki-client