Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: SU+yGJ9Qi0jWxqtDMFKEB0M2slDSrLThQDQkupFouj8=
Subject key identifier: 4B:4B:79:57:57:26:48:27:D2:D2:0D:CC:6C:E4:62:5A:A7:75:95:6D
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 019CAAC6A91F9096081D526FEE297684FB0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 17DC
Signing time: Sun 01 Mar 2026 19:01:11 +0000
Manifest this update: Sun 01 Mar 2026 19:01:11 +0000
Manifest next update: Mon 02 Mar 2026 19:01:11 +0000
Files and hashes: 1: 1xBlob06V4OZHwqAUkwFisJ8hbE.roa (hash: fUNS9n+gbfLHDdSyjCsCUEORZD+YjwBO+Q4C1PMroB0=)
2: JchC90yjmUCoGpTy_G9JV_hpnDA.roa (hash: y6rgHhMgSwSF+hb/ru1il5IUm+2sXbyrH9l61ZHVZEc=)
3: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: IX6622JxEalUe3H50jxp0QKIxOkeFutyaAKlKvEHzis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a9:1f:90:96:08:1d:52:6f:ee:29:76:84:fb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Mar 1 19:01:11 2026 GMT
Not After : Mar 2 19:01:11 2026 GMT
Subject: CN=4b4b795757264827d2d20dcc6ce4625aa775956d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:a8:ba:53:f5:0a:ca:28:25:af:cd:96:da:
8f:e8:13:09:f4:13:91:03:f7:75:d8:29:4b:28:7b:
6d:7c:6d:b6:83:69:a8:58:7d:7a:c6:4e:ce:a7:2c:
8d:db:f7:0c:ea:38:b5:67:8b:3f:f0:b4:6c:f3:c3:
c0:4b:ec:bb:68:0d:75:d5:62:60:05:17:89:7f:9d:
f8:10:d9:3f:3f:de:bd:90:1d:70:a0:fd:a5:71:22:
52:8b:14:7a:9e:d0:1d:fd:21:e4:82:49:a2:9d:fa:
fe:79:c0:cb:6e:46:8f:4c:9c:52:5f:e2:da:c5:94:
cf:14:b6:c1:d4:07:0c:e1:a8:75:5c:09:a7:6f:c1:
2d:a2:14:09:6c:06:0d:be:ad:a6:ec:12:30:ea:14:
3f:79:61:fa:23:d0:a1:57:55:87:e3:48:18:dc:c0:
bd:92:9f:34:fd:71:02:31:2c:e1:51:d8:f0:2a:fb:
07:5e:e0:73:90:3f:7f:6b:35:3f:c9:43:61:e5:66:
92:5e:55:52:a6:92:0d:39:1a:47:b6:64:02:4d:9d:
a8:39:77:cd:5e:7f:47:be:50:32:46:cd:aa:73:5a:
c0:da:d9:ad:70:aa:e3:e7:41:5b:68:1b:04:13:2c:
13:53:21:05:48:b8:52:f0:e6:28:53:48:50:7d:93:
7e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4B:79:57:57:26:48:27:D2:D2:0D:CC:6C:E4:62:5A:A7:75:95:6D
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:cb:ae:02:7d:0a:32:af:68:52:95:72:c1:69:67:e9:ea:7e:
a0:f2:e4:f5:d7:e5:dd:c4:2c:03:b2:60:28:d5:0b:e9:8d:a1:
28:6e:72:a9:ab:99:8d:6f:e5:50:fb:fd:69:00:2a:da:65:e1:
93:39:8c:17:e3:0b:91:30:38:e2:e9:84:8e:e0:0d:ef:73:e1:
fe:a1:cc:fa:70:04:fa:8d:8d:6d:ed:c1:c6:0f:b8:df:3a:78:
9d:4f:8b:8b:2b:43:ec:a7:94:64:b0:61:f3:a7:49:0d:81:6b:
86:93:f8:79:80:ac:a6:32:37:06:27:b8:2f:7c:62:e1:e0:d9:
e9:75:bd:b5:fe:a5:89:41:4d:0d:d3:cd:30:ae:6a:15:93:a9:
92:50:0f:e2:70:db:15:ca:1f:b9:e7:d9:28:4d:51:72:09:1a:
5a:cb:fd:b8:46:bb:42:f6:f3:1a:79:dc:fe:06:da:f4:31:ca:
59:3a:dc:d9:bf:e9:75:d8:d7:3a:82:7d:52:97:44:c6:1d:8f:
0b:21:6c:6d:92:4b:26:f2:ff:46:31:5a:18:82:df:9a:33:69:
85:41:92:f0:ab:b6:be:7f:99:2f:21:85:08:bc:f2:1d:36:dd:
96:4c:74:dc:19:c4:13:8a:91:2b:b9:eb:a7:2b:12:b5:89:87:
5a:f8:4c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:47 2026 by rpki-client