Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
File: DY087TLjYPzUbBY1Vt4oqigksZs.mft (raw, json)
Hash identifier: hSSVXxyTqzb+X9YspdA0mTN97JqWSiUxN5cP63XYDIU=
Subject key identifier: 38:7C:50:64:6A:CE:2E:B3:7C:9D:DE:8D:41:70:BA:89:BC:C1:A8:41
Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
Certificate issuer: /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Certificate serial: 019CAC7DB9CD6B8130F72B01B5C7F4603F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
Manifest number: 031F
Signing time: Mon 02 Mar 2026 03:00:46 +0000
Manifest this update: Mon 02 Mar 2026 03:00:46 +0000
Manifest next update: Tue 03 Mar 2026 03:00:46 +0000
Files and hashes: 1: DY087TLjYPzUbBY1Vt4oqigksZs.crl (hash: hHJqyEQez9fD7q3Kio0GK4AJ5MGVQpM2URjts2dGRIA=)
2: fW8Rb2ydTpsUsTrGa2SivBYDQlA.roa (hash: R0r5msaJunREx2IGezURTBwCC6OaeIbwcDABeHEl6S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:b9:cd:6b:81:30:f7:2b:01:b5:c7:f4:60:3f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Validity
Not Before: Mar 2 03:00:46 2026 GMT
Not After : Mar 3 03:00:46 2026 GMT
Subject: CN=387c50646ace2eb37c9dde8d4170ba89bcc1a841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6e:d1:86:a4:ea:2e:d3:54:45:6c:17:17:3a:
4f:22:90:02:07:2e:d6:0d:8d:29:3d:4f:fa:d8:4d:
c4:73:00:fa:6b:55:60:51:1b:06:02:57:9a:f7:19:
ef:0d:ff:7a:33:5f:e1:60:1b:d4:41:ea:5b:e2:6b:
db:78:d7:ea:df:a7:32:34:cf:e0:53:7a:21:68:9c:
67:59:68:d1:27:3d:9b:c2:f0:c3:de:e3:3d:eb:e8:
d7:18:e2:7a:48:55:35:87:e9:a1:1f:f7:97:71:b4:
bd:61:22:7b:d5:37:d3:86:56:6c:c1:af:85:51:ae:
82:e3:71:1c:a8:78:b7:af:a3:a7:32:3a:fa:c0:84:
8f:12:1a:ba:42:53:08:0e:ea:f1:13:41:4f:a8:23:
bb:f0:55:75:a8:8b:da:c9:ad:26:cc:d6:d0:ba:ad:
55:86:4e:fa:7e:fe:b0:89:1a:a0:6f:87:47:b1:1e:
bd:30:ba:94:6e:d6:c9:3c:e0:31:6d:d2:a4:b9:b3:
ef:2b:49:4e:98:bc:6c:e5:08:5a:68:98:ea:1a:a2:
92:d1:c2:8d:65:54:05:00:69:d6:88:46:f7:64:c0:
4d:ff:f3:f5:4c:e1:cb:ad:36:e3:c4:a1:f4:fe:3e:
af:af:9a:a2:5f:53:83:3c:cc:21:a8:67:05:f1:06:
be:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7C:50:64:6A:CE:2E:B3:7C:9D:DE:8D:41:70:BA:89:BC:C1:A8:41
X509v3 Authority Key Identifier:
keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ec:b6:a2:b3:a9:4b:0e:5c:30:d4:00:d1:13:4c:b0:ee:4c:
09:30:07:f0:de:dc:c1:41:fb:ed:de:bb:aa:58:24:a9:4c:93:
5d:9e:18:22:d9:cc:66:4a:c3:36:31:75:61:e2:f3:36:67:74:
fe:fe:26:7c:f8:36:e4:29:8e:69:af:89:53:27:fa:bc:d5:24:
9f:81:d6:99:bd:32:12:62:23:b9:a6:0b:36:52:bf:cd:25:ac:
b8:05:27:58:4f:8c:0f:ef:3f:d2:7b:45:28:10:e4:a2:40:0a:
04:08:a5:fd:7e:82:c7:5a:1d:c3:e0:df:6b:10:e9:62:97:b5:
90:57:ff:7f:7c:df:e5:48:63:cf:62:a7:13:ab:de:a6:83:20:
5f:ac:48:eb:e1:ef:fb:88:a8:0e:1d:bd:e6:9c:be:0c:27:67:
99:61:c1:93:d9:02:8e:c2:1f:dc:bb:bf:e6:4a:56:b4:4f:4f:
d6:b4:7a:e8:bc:70:59:71:50:5f:b7:77:99:4c:2b:84:1e:64:
75:80:1e:f7:ab:cd:e8:01:06:61:0d:1d:dd:e9:a0:c5:60:e2:
bf:2d:22:d8:66:ca:9f:5d:2b:fd:9a:be:b2:0b:32:e0:65:db:
b9:d5:d0:33:94:10:08:09:7d:aa:6a:0b:1d:91:ec:ee:47:56:
d7:78:f7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:09 2026 by rpki-client