Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: 3q4ATXGHUYuGZ+rzRqZcE4XjW9meQYVM7vKvtczlmdw=
Subject key identifier: DE:26:7E:E2:84:D9:81:38:A3:30:F4:3B:49:D5:0B:93:4E:CC:CF:2C
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 01A0EBF959D73EA2F604039147E7C4146A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 1A10
Signing time: Tue 29 Sep 2026 07:03:02 +0000
Manifest this update: Tue 29 Sep 2026 07:03:02 +0000
Manifest next update: Wed 30 Sep 2026 07:03:02 +0000
Files and hashes: 1: 1xBlob06V4OZHwqAUkwFisJ8hbE.roa (hash: fUNS9n+gbfLHDdSyjCsCUEORZD+YjwBO+Q4C1PMroB0=)
2: JchC90yjmUCoGpTy_G9JV_hpnDA.roa (hash: y6rgHhMgSwSF+hb/ru1il5IUm+2sXbyrH9l61ZHVZEc=)
3: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: EkvbISUgPb5fBugpoBwrlwn6ZOxbhhTu0eZggwP6fTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:59:d7:3e:a2:f6:04:03:91:47:e7:c4:14:6a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Sep 29 07:03:02 2026 GMT
Not After : Sep 30 07:03:02 2026 GMT
Subject: CN=de267ee284d98138a330f43b49d50b934ecccf2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1a:5b:3c:8f:38:62:76:09:41:1f:fc:b8:84:
71:19:e1:ef:fc:6b:4b:bb:cb:2c:b4:7e:68:83:74:
b2:90:1f:45:3f:20:41:39:b9:9e:ac:40:64:67:bb:
5b:a8:20:8d:e8:c1:f1:0c:e2:5f:ef:e3:bb:2f:ea:
e3:31:7b:77:9e:5c:6e:0b:9d:24:f1:7d:b9:f7:13:
65:fc:6b:5a:3f:3e:59:3c:73:36:ff:a5:ae:84:24:
dd:89:d7:93:63:e0:04:33:76:30:27:e3:50:cd:d4:
ac:ee:2f:15:d4:0e:11:a6:42:ec:ce:6c:e5:7e:aa:
de:1d:f3:76:09:40:8d:cb:f0:fe:18:53:19:0c:27:
11:f6:5c:9e:c9:a6:f9:2e:c5:9c:05:2c:65:a6:2a:
62:1a:23:72:95:74:11:09:fa:2d:33:22:d6:d5:ca:
fb:46:c5:49:e2:0e:31:1c:4e:8e:b1:1a:55:d9:2d:
40:f2:a1:14:56:72:03:36:54:2e:d1:91:2c:c3:67:
36:31:3e:2c:9b:b0:27:a5:c5:f4:90:cd:d1:6a:d1:
f6:9a:fb:3b:75:7a:29:27:bb:a3:a7:99:b5:64:6d:
18:0f:f1:3b:3c:93:76:6f:70:41:32:08:2b:fd:47:
47:4d:dc:f5:42:31:9c:71:9d:58:04:eb:b1:84:b9:
59:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:26:7E:E2:84:D9:81:38:A3:30:F4:3B:49:D5:0B:93:4E:CC:CF:2C
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:41:f6:9f:13:7a:bf:cc:8d:e6:eb:ac:51:d3:af:81:80:f9:
09:ca:54:32:59:0b:78:ce:86:78:e8:a3:32:17:df:3c:1e:90:
ba:27:12:63:d1:10:21:15:05:96:7f:b6:1a:9d:f2:d6:30:67:
44:30:19:26:b2:06:df:7a:a3:8c:f0:01:1d:4f:44:89:cc:7f:
ec:2f:07:47:3d:3c:f4:6f:12:5a:96:7d:a1:fd:30:94:b8:8c:
3e:f8:54:0d:19:c2:96:e1:79:af:dc:5b:1e:b2:c4:76:d9:ff:
43:18:88:63:97:eb:e6:4f:27:ce:15:ed:4a:e1:8c:83:0f:77:
45:48:cb:79:8e:81:c4:e6:61:e0:41:b5:cb:f0:fd:d7:6d:71:
f9:5b:f0:88:ec:d8:69:92:6e:f6:53:3f:31:88:3b:75:fc:d6:
c1:42:6f:e3:33:c7:17:cd:70:04:43:11:05:3e:ec:f6:6d:e6:
42:9e:59:72:31:bd:3a:00:dd:91:cc:fa:f7:4c:15:47:bc:a7:
09:ab:9f:6a:59:67:c4:db:75:a3:18:33:41:b4:65:49:dd:da:
4f:09:d9:e6:b2:fa:18:e0:e1:32:c2:73:5d:99:ac:ee:c3:9a:
8b:08:61:f5:28:05:d8:3b:40:60:55:7a:d1:a8:df:51:f8:2a:
0a:ff:e2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:59:42 2026 by rpki-client