Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: /FQ+Jr0ud3eBG3PPI5Qjde1svtxnAkOAykGecciHRXQ=
Subject key identifier: F6:3B:5B:24:58:48:ED:E0:3E:FC:0B:26:F1:E8:E0:14:6E:DC:CD:24
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 01A0EDE6FAB7626CFF2C6DF09076B26FC91F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 1A11
Signing time: Tue 29 Sep 2026 16:02:12 +0000
Manifest this update: Tue 29 Sep 2026 16:02:12 +0000
Manifest next update: Wed 30 Sep 2026 16:02:12 +0000
Files and hashes: 1: 1xBlob06V4OZHwqAUkwFisJ8hbE.roa (hash: fUNS9n+gbfLHDdSyjCsCUEORZD+YjwBO+Q4C1PMroB0=)
2: JchC90yjmUCoGpTy_G9JV_hpnDA.roa (hash: y6rgHhMgSwSF+hb/ru1il5IUm+2sXbyrH9l61ZHVZEc=)
3: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: YiR/Awtf2dpPdBmwpouDnAbxrxmzbpWufrr0WNnATfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 16:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:e6:fa:b7:62:6c:ff:2c:6d:f0:90:76:b2:6f:c9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Sep 29 16:02:12 2026 GMT
Not After : Sep 30 16:02:12 2026 GMT
Subject: CN=f63b5b245848ede03efc0b26f1e8e0146edccd24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:5f:6f:23:dd:a1:f9:0e:05:ec:5b:ab:74:
8d:f2:ea:fd:62:f2:1b:11:cc:da:43:29:9a:e0:ef:
c2:ec:a1:c2:13:58:cb:8a:c5:08:d6:1e:c0:f8:c3:
7c:40:c7:5f:5b:98:ed:70:80:e3:37:16:15:30:e7:
c1:96:5b:24:82:ad:46:2b:3f:c3:ed:20:ff:0e:e4:
2a:a4:2c:0b:f6:32:8a:85:97:2a:62:73:d6:f3:f0:
8f:ca:55:f4:90:23:07:2f:ca:f9:07:d0:33:22:f4:
ad:32:b9:e3:8b:5f:6c:05:36:5b:bd:64:9f:34:ad:
1a:a5:c6:75:e7:8b:fb:a5:0c:c3:f1:a6:65:2c:9d:
89:74:cd:03:4a:34:cd:dd:07:6c:af:a8:c4:c3:be:
5f:7a:0f:5a:87:2d:c4:fe:f3:16:63:2b:36:2a:74:
64:8e:fb:3d:7c:89:03:1e:7a:1a:ed:67:ae:11:9c:
9c:81:e0:10:a9:ab:bb:7d:0a:4b:cc:8d:51:8f:13:
78:5a:16:c4:c6:ba:a8:bc:b0:28:9b:df:b0:78:42:
da:18:b9:da:93:9e:f6:dc:f3:24:73:37:ab:a8:2a:
51:eb:f0:7b:19:d4:a5:22:c0:76:cb:01:23:50:77:
8c:8b:d2:f3:b2:67:bf:d6:35:dc:87:ba:8b:53:9e:
9a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3B:5B:24:58:48:ED:E0:3E:FC:0B:26:F1:E8:E0:14:6E:DC:CD:24
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:be:16:86:6f:1e:c8:a5:78:4a:8d:74:70:aa:20:72:ac:0e:
0a:7f:b7:f9:bb:d6:71:44:c1:9d:24:ed:c4:2c:1f:85:77:35:
ec:c0:81:10:04:b0:b7:07:3b:10:a7:2e:6e:df:dd:20:22:3d:
86:3b:82:82:28:74:39:3e:b5:5f:25:3f:fa:3a:42:80:85:f3:
43:48:16:57:fa:5d:e3:06:3e:c1:f9:da:b0:d6:3c:93:e9:8e:
cb:5f:c3:19:ee:1f:a1:a4:7a:74:7d:21:1d:fa:c1:0b:50:34:
05:77:0d:a5:6f:e9:c5:2e:26:7c:17:42:bb:28:ea:6c:46:ba:
f9:b6:d4:70:5c:e5:74:d5:85:4b:b9:f3:7b:bb:9c:dc:2e:4b:
be:db:70:b2:9d:4f:af:60:6c:12:af:bf:43:29:2e:39:27:6e:
9f:43:ec:e2:85:17:d1:44:7e:b2:28:88:8a:03:5a:12:f7:de:
81:af:34:7f:90:e4:09:17:cf:4e:f9:52:a9:a8:37:ec:02:de:
c5:91:b3:bd:3b:34:89:e1:d5:15:64:b4:31:a7:68:2f:d5:67:
77:bf:3d:c4:50:87:76:94:d7:a5:ac:e4:0c:f4:87:e2:fd:87:
3e:f5:fb:5a:dc:a4:cc:96:56:2a:81:b6:23:b3:27:ea:b5:64:
f7:7a:53:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:05:07 2026 by rpki-client