Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
File: DyKg7jvG4y2JLt3iV8u3mRefLNY.mft (raw, json)
Hash identifier: wtGQvuG/OetSbP24CAsiUDYX7MI3W+QEh/1CDBX3UpY=
Subject key identifier: 91:BC:F6:41:42:50:DE:FC:CC:B5:36:0D:2D:51:B0:EF:11:3C:0D:22
Authority key identifier: 0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
Certificate issuer: /CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Certificate serial: 019FA9ABA6A457FB772DF21BC9FD77EBA9AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
Manifest number: 0B3E
Signing time: Tue 28 Jul 2026 17:00:26 +0000
Manifest this update: Tue 28 Jul 2026 17:00:26 +0000
Manifest next update: Wed 29 Jul 2026 17:00:26 +0000
Files and hashes: 1: 6anxR7oWcscDd04QL41XaD9H2mI.roa (hash: HOaKAJ+9l8ZBJN2kLFM0Go13VYLLmXxM5vLOU8G4dHg=)
2: DyKg7jvG4y2JLt3iV8u3mRefLNY.crl (hash: flXMX0qfEY3K53kG0bTwvsmBls32naneVL2OaDAcSAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:a6:a4:57:fb:77:2d:f2:1b:c9:fd:77:eb:a9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Validity
Not Before: Jul 28 17:00:26 2026 GMT
Not After : Jul 29 17:00:26 2026 GMT
Subject: CN=91bcf6414250defcccb5360d2d51b0ef113c0d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:ed:cd:96:3d:e4:89:8b:81:c9:8c:3d:4c:
d8:56:20:1c:db:37:86:18:ef:e9:e3:5e:6a:8e:a9:
ee:a0:67:18:e0:4c:ad:7a:0b:d4:5a:3a:ee:09:71:
33:a9:40:d2:68:98:f0:9f:48:3d:a0:be:f1:62:7f:
8e:7a:0f:14:79:f9:65:93:e3:de:98:10:a1:74:31:
76:5a:93:b2:6a:f3:64:12:ed:73:bd:02:4f:d8:58:
4c:e9:8b:fd:25:33:4e:c8:c0:a0:6d:fc:2e:4d:b3:
69:d8:25:94:b9:c8:86:77:c7:18:57:34:dd:31:fe:
41:15:1b:0e:5b:e0:12:f0:ad:25:0c:0d:93:ee:df:
21:ef:de:b0:56:90:78:e8:e1:9d:cc:a8:42:88:07:
72:ef:f8:a4:e8:01:af:56:75:07:02:a0:e3:4d:69:
fd:7b:6d:0b:b6:92:d1:49:b5:65:60:c3:1d:91:29:
61:3b:b6:55:fe:a3:d4:c7:81:7e:31:6c:c1:52:e0:
d2:90:de:e5:49:58:b4:ad:47:59:82:2f:d4:72:17:
31:72:a5:e5:9a:09:4d:da:08:03:52:08:80:de:f1:
7f:04:5d:e1:2e:bd:bd:cd:b7:7e:77:41:83:14:ef:
7f:5f:97:7b:21:c1:1e:1e:8e:8a:55:cf:1a:7d:b2:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BC:F6:41:42:50:DE:FC:CC:B5:36:0D:2D:51:B0:EF:11:3C:0D:22
X509v3 Authority Key Identifier:
keyid:0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:08:ad:37:df:db:59:7c:8d:cb:d7:75:a5:a7:0f:d7:7b:be:
90:37:52:58:19:0d:4d:d9:64:5a:d4:02:a0:f5:d2:3a:44:a0:
22:f8:54:8b:d2:77:c3:cb:e0:31:52:d3:ed:13:31:e6:a1:6d:
19:d2:aa:c6:4d:05:1e:fb:dd:55:d4:bb:19:9d:63:96:82:78:
9e:4b:96:b3:88:81:54:cd:eb:56:6d:4f:c3:63:5d:10:7a:61:
2a:86:80:70:9a:2a:1d:b4:be:62:f4:27:f2:f8:14:b3:cd:4b:
64:db:cd:47:ce:21:af:41:ce:88:28:5c:ab:02:99:bd:07:6c:
8b:2a:8d:14:6b:73:70:7f:df:47:20:25:71:b9:2b:30:50:ef:
46:e1:08:ac:57:57:9e:50:4f:67:d3:23:9f:44:a4:79:c6:5b:
35:e8:71:7f:bd:7d:b5:3a:48:50:4f:87:47:93:4b:6f:76:70:
26:c7:c6:e0:c6:26:60:7f:7c:41:c3:f5:d3:ff:90:2a:2e:1c:
3c:a6:7f:74:42:7b:36:08:ce:9c:eb:22:22:ee:97:77:c5:b3:
57:0b:bb:71:15:3c:50:f8:b9:90:88:91:dd:26:86:80:3e:ed:
ea:0e:61:60:8c:28:89:1d:96:d2:d2:5e:81:85:e4:3c:03:2f:
37:f6:08:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:02:48 2026 by rpki-client