Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
File: dy-5SkWdO3XOi_uPErTPcZgsY0M.mft (raw, json)
Hash identifier: jAm2/42i+yGkGQMCMlU70xQt9UV5gp48w5Jh8vKhr7c=
Subject key identifier: 7D:1C:B3:85:01:25:51:5C:6A:DF:40:80:8A:32:85:D5:75:45:91:C3
Authority key identifier: 77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43
Certificate issuer: /CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
Certificate serial: 019DA3E69B02A111E0CEC75E20C7BE8F2020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
Manifest number: 044D
Signing time: Sun 19 Apr 2026 04:01:32 +0000
Manifest this update: Sun 19 Apr 2026 04:01:32 +0000
Manifest next update: Mon 20 Apr 2026 04:01:32 +0000
Files and hashes: 1: dy-5SkWdO3XOi_uPErTPcZgsY0M.crl (hash: LDMcZ3rKZ77czg+/05yeWJxYCo3Z4tLa4iNu+EGQ44k=)
2: xPQUYz25Kw5OqjEMvXe5mrzD17U.asa (hash: yVaACJvXdwB+QYqWE/blK7XRzmJJaal8sDFXluTDI0c=)
3: yZwwxHdq2mwMvEKhuZrOFRDdPXg.roa (hash: 0MUPEijqaOiMb0pbzOVVpFzyA1GqgLhChQvRIq7H260=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:9b:02:a1:11:e0:ce:c7:5e:20:c7:be:8f:20:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
Validity
Not Before: Apr 19 04:01:32 2026 GMT
Not After : Apr 20 04:01:32 2026 GMT
Subject: CN=7d1cb3850125515c6adf40808a3285d5754591c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a4:a0:7a:5f:fc:8f:c3:fd:a0:4b:bd:54:49:
7f:6c:e9:15:a0:15:2c:74:60:c0:25:7b:30:7d:82:
3a:65:b6:a8:18:8d:72:4f:08:7e:b8:ef:52:f5:17:
57:9b:2a:a0:4b:2b:38:65:4c:5c:c2:8c:e8:ac:12:
75:4b:2e:14:91:9a:e9:37:0c:07:13:03:1d:77:c3:
a7:2d:11:e7:d5:9f:21:75:ce:a3:e6:42:62:1c:77:
98:4b:6b:3c:b0:47:e2:49:0d:11:28:f4:4a:51:ac:
80:29:08:25:c7:d6:49:d3:7c:6a:7c:5e:b4:d9:4b:
e1:06:31:08:34:65:b4:9d:d9:26:87:3b:c4:ff:91:
34:8b:78:40:ab:e2:ad:67:ee:b1:7e:d9:69:eb:4a:
92:98:ee:36:d4:6c:7d:e4:15:e8:b8:e6:99:7a:44:
71:9c:e2:cd:df:7c:d1:67:47:64:d2:00:2f:41:2f:
21:a4:0b:a1:88:d8:02:7c:be:63:b6:cf:8d:5e:f4:
2f:ef:6f:da:8d:4e:ca:e1:87:45:4f:78:80:b8:64:
ed:f5:e3:ab:8e:c2:c9:12:cb:76:33:ec:05:9f:42:
3c:7b:95:42:31:43:52:d6:13:38:60:1b:89:9c:52:
02:dd:fa:3b:14:a1:e3:be:2a:f8:fd:a0:df:59:17:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1C:B3:85:01:25:51:5C:6A:DF:40:80:8A:32:85:D5:75:45:91:C3
X509v3 Authority Key Identifier:
keyid:77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d3:35:7e:20:4e:40:66:85:c6:5c:ab:23:f5:53:7b:07:36:
c7:c0:ad:3c:1e:9c:6f:f9:13:de:30:35:ba:75:bf:1c:e9:79:
ee:50:c6:8e:ce:b3:79:d0:d3:86:d1:7f:29:c5:01:bf:a1:99:
28:b3:27:33:ae:82:3d:3e:b1:87:7d:ce:91:a5:4b:c5:ba:7a:
70:f9:12:0e:e8:ea:6c:8f:c5:54:fb:78:ed:31:3b:2f:b8:8a:
e6:2a:aa:7f:b3:76:29:af:13:a5:78:a3:9f:76:af:f3:88:91:
49:a9:51:c7:d4:0c:d6:2f:cd:a7:a0:4a:bc:72:bb:94:2a:33:
88:1d:7c:e1:01:bb:71:35:03:b9:18:2a:b8:d9:c4:05:7c:74:
84:dc:04:3a:9c:a8:b5:1d:2e:ea:f6:33:47:fe:53:fa:fd:10:
f9:f3:8f:03:65:0f:0c:1d:b9:c2:bc:9c:c9:0d:d1:96:c4:db:
5d:cd:a3:70:a7:b2:37:0e:9c:82:17:f4:5e:19:22:19:0c:63:
65:71:da:25:a1:2e:b7:30:3c:17:68:e4:0f:fb:30:c2:4d:d3:
98:25:b8:49:b9:9b:77:e8:15:2a:e4:ce:50:82:2a:dc:a9:cf:
c8:bc:ca:0f:71:a4:c8:e9:61:24:0f:e8:d2:0c:16:64:c7:ff:
b1:18:ad:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:45:34 2026 by rpki-client