Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
File: dy-5SkWdO3XOi_uPErTPcZgsY0M.mft (raw, json)
Hash identifier: XlF20lc078YhEn3yW3+L1TahsUQnLVzgd1NOnXpZpwQ=
Subject key identifier: 60:4D:2B:4B:8A:B7:1F:22:3B:04:71:06:CC:7C:32:68:D8:FD:A0:96
Authority key identifier: 77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43
Certificate issuer: /CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
Certificate serial: 019CAAC68B9A09BA9E34932DB5EC191996DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
Manifest number: 03CC
Signing time: Sun 01 Mar 2026 19:01:04 +0000
Manifest this update: Sun 01 Mar 2026 19:01:04 +0000
Manifest next update: Mon 02 Mar 2026 19:01:04 +0000
Files and hashes: 1: dy-5SkWdO3XOi_uPErTPcZgsY0M.crl (hash: Epxw2nllrB4IbtQ3dz38kVxdXAe7Ls7v8pibpChtKmk=)
2: xPQUYz25Kw5OqjEMvXe5mrzD17U.asa (hash: yVaACJvXdwB+QYqWE/blK7XRzmJJaal8sDFXluTDI0c=)
3: yZwwxHdq2mwMvEKhuZrOFRDdPXg.roa (hash: 0MUPEijqaOiMb0pbzOVVpFzyA1GqgLhChQvRIq7H260=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:8b:9a:09:ba:9e:34:93:2d:b5:ec:19:19:96:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
Validity
Not Before: Mar 1 19:01:04 2026 GMT
Not After : Mar 2 19:01:04 2026 GMT
Subject: CN=604d2b4b8ab71f223b047106cc7c3268d8fda096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:5f:e5:53:8c:ad:d4:35:3e:06:c1:34:f1:
ee:52:33:32:6b:0d:25:99:3f:37:26:49:c8:38:00:
e3:d2:39:76:5b:e5:91:c4:c9:7b:bb:c5:4e:92:8e:
c9:3e:57:4e:95:a6:d2:e3:7d:a8:22:6a:6e:6f:9e:
33:12:f0:d5:f5:95:63:2a:06:99:9f:e9:e6:ac:87:
ce:65:82:6b:99:b1:7c:b6:79:f5:3d:19:4a:a0:09:
c4:38:56:fc:e8:2b:01:03:79:c1:fb:63:bb:db:ca:
19:bb:ce:18:30:ae:c7:c4:ae:00:c8:d0:28:fb:bc:
05:8f:b4:06:e8:e5:1a:bc:f8:ee:fb:5a:29:d1:c0:
5d:ef:50:20:c8:55:af:38:e1:11:79:f6:e1:9b:48:
c9:94:cd:ac:06:cc:16:79:10:99:95:3c:9a:44:a1:
13:5d:27:ff:ba:f2:ab:30:be:dd:30:bc:0e:af:50:
9a:7a:2b:a0:93:b3:cd:ff:40:dd:37:96:11:21:fa:
28:12:10:d3:77:0a:3a:43:df:10:75:93:b9:67:e9:
c3:0d:70:2b:97:b2:68:70:7b:07:a2:01:75:29:63:
94:67:a2:f2:05:17:13:05:76:87:81:19:3f:af:5a:
eb:b8:dd:ba:3e:25:a6:7f:c5:e8:df:c4:4b:86:b7:
86:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4D:2B:4B:8A:B7:1F:22:3B:04:71:06:CC:7C:32:68:D8:FD:A0:96
X509v3 Authority Key Identifier:
keyid:77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:bd:99:b8:f0:3a:c1:76:a5:c7:e6:66:de:cb:54:bb:b3:e6:
38:6c:15:11:ff:3c:12:51:9d:8d:74:fb:79:fb:09:26:a7:24:
17:e0:1c:c7:6e:be:3e:cf:73:42:c2:92:4c:83:fa:5f:12:41:
39:9b:b8:45:ea:c0:14:bc:14:d4:ef:30:4c:79:9c:53:fc:1d:
52:af:4f:8a:c6:9b:0e:9a:fb:9b:ca:a0:29:5f:ca:3e:a1:3c:
2e:02:aa:f5:b5:2e:74:f6:54:ae:78:08:89:91:bb:69:f5:28:
42:ee:40:0f:ad:d9:fc:dd:d4:b5:d6:90:9f:06:e8:3c:07:8a:
84:43:40:d2:86:b6:4b:f0:ec:04:44:94:ad:fe:5b:45:5c:3e:
7a:cc:99:15:0a:ec:3f:66:56:01:50:f8:f3:83:7a:2e:bc:3d:
75:e4:51:2d:7e:6e:91:d1:8d:2e:8c:eb:53:f8:2f:45:8c:0e:
bc:1d:05:7f:aa:91:1a:55:0a:69:4c:8b:d7:63:21:39:33:1e:
6e:35:52:35:b4:36:0c:92:08:b0:9e:80:dc:4c:a4:28:4e:3c:
9f:d0:1e:50:14:68:7d:1f:1c:c7:c8:e3:9a:34:30:03:e4:6d:
4a:c9:ac:49:ee:9c:e1:0d:ab:8b:91:0e:ed:16:f8:51:72:d3:
b3:c2:65:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:14:36 2026 by rpki-client