Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
File: DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft (raw, json)
Hash identifier: Ehzo3j+r4tg5oDTUGha1HT+w3xHnevicg+bVEHkzhJw=
Subject key identifier: 8B:21:12:5F:A3:0B:DD:73:63:B6:FD:1E:2A:9E:2E:1D:81:AA:2E:A1
Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
Certificate issuer: /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Certificate serial: 019D9AE30771C8FC9C2537EF27B315D19BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
Manifest number: 1858
Signing time: Fri 17 Apr 2026 10:01:02 +0000
Manifest this update: Fri 17 Apr 2026 10:01:02 +0000
Manifest next update: Sat 18 Apr 2026 10:01:02 +0000
Files and hashes: 1: CbfPnzkIg630GLdNxKGZc9evepo.roa (hash: OlSSfeY+x6XajlxSO7XTBJeyZDwUAJ2psAjSHgtLxx8=)
2: DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl (hash: XTL7TsYcb8a6mT1vM/mbYfnfhk686v4GYVFKMwlReQE=)
3: KaCfEz66BVobYaD4JAQbgoR-gKg.roa (hash: y8noCaUxD0ZZ36hzHL6X++bGHmSgDwDhVDPA3PlLSas=)
4: e48dFNX7wc3SQhgi8G26wWhECzY.roa (hash: XEOD2QcK006EDHPh16ax+CiiGNzK5DlFCvCqDs8JPY8=)
5: gQm12kL8qC8G8fld0ndxKWB7Le4.roa (hash: DZyw6qHuuDne2cu+Q2hXVAXkBqKQX9CgYl0ktuHs/9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:07:71:c8:fc:9c:25:37:ef:27:b3:15:d1:9b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Validity
Not Before: Apr 17 10:01:02 2026 GMT
Not After : Apr 18 10:01:02 2026 GMT
Subject: CN=8b21125fa30bdd7363b6fd1e2a9e2e1d81aa2ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:6c:1d:06:fb:b7:eb:bc:ec:6c:1e:7b:2d:
15:04:7d:87:95:f2:53:b1:67:5f:f5:e0:b7:9e:48:
b2:c5:76:75:68:1d:dc:16:4a:be:8c:92:2a:f7:a2:
31:3d:0a:5d:2c:f1:b7:de:47:28:12:9c:6c:df:76:
9e:19:94:9a:2f:e4:09:8c:b2:4b:ef:ce:a5:07:f6:
f2:a8:55:5d:09:fd:a6:f7:8b:63:a0:c0:f2:b8:56:
2a:8d:39:45:d7:ad:79:01:39:47:54:eb:89:99:c7:
60:c9:03:49:85:d0:b7:f9:f9:6f:9e:4a:46:4b:73:
a0:e2:15:f4:5e:e0:fc:30:04:ee:63:e8:28:02:1a:
41:78:14:a4:d6:b0:c6:b8:30:e9:e5:10:21:7b:c4:
fc:34:4c:5f:fb:bc:20:68:c7:66:fa:15:fe:c9:a2:
5b:69:c0:58:83:78:ae:61:19:dd:80:07:37:04:ce:
e9:ee:a4:f2:9b:ca:76:39:b5:c5:70:20:d2:c0:4e:
99:a0:d5:dc:1a:98:98:58:76:d7:17:f3:29:d0:e8:
fd:b3:84:30:3b:7a:0c:21:44:ed:0c:4a:ae:a5:b0:
a7:6d:6b:d3:d9:33:80:7d:67:06:3d:60:7c:7d:c2:
97:6d:05:bf:fe:bc:41:fc:64:dc:c7:c8:6c:56:c7:
68:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:21:12:5F:A3:0B:DD:73:63:B6:FD:1E:2A:9E:2E:1D:81:AA:2E:A1
X509v3 Authority Key Identifier:
keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4d:81:0c:56:bb:a3:15:d1:90:90:dd:de:0f:5b:1a:99:18:
c2:c4:a6:98:11:93:8f:03:f3:8e:be:01:a6:b4:eb:df:16:e1:
56:12:66:32:b3:7f:62:c7:f8:b6:30:63:96:67:f0:25:8e:7f:
65:16:9a:6a:00:d2:4a:99:89:79:5d:5f:19:b1:66:46:2f:e5:
61:e7:6b:09:6e:86:e2:a8:38:3c:08:21:95:f8:27:1c:e4:83:
59:1c:f4:4d:34:3d:f7:84:b7:75:b3:69:f6:1c:f0:ad:6b:4d:
75:23:56:82:ce:de:86:3d:b3:05:13:e1:db:e2:cd:47:0c:fe:
c3:ab:ae:be:fd:d8:7c:5e:ba:90:8c:09:d1:13:b2:d0:a1:72:
a2:c8:c7:0a:ff:67:fe:03:6b:2b:f9:0f:ba:8b:88:b8:fc:f0:
d6:bf:00:40:1a:07:da:ba:4b:26:cb:7f:39:aa:a0:03:f3:19:
2e:62:36:d2:11:c7:c0:6f:9e:e2:80:77:c0:3c:12:e2:3a:30:
bc:34:3b:59:6e:d0:4f:f5:a5:e8:a5:2d:79:ee:75:d5:c2:35:
c5:84:65:a2:a5:77:e9:d0:f3:e6:cc:fd:19:61:df:c6:e8:22:
c2:c6:53:fe:c1:b7:f7:38:51:f1:bc:9a:65:9c:07:ba:25:1c:
01:08:e3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:43:45 2026 by rpki-client