Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
File: DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft (raw, json)
Hash identifier: wFmiO5EnAtTnVANLqOAZo4Sh9GKZXMvU0F2EkJKfZQY=
Subject key identifier: C4:3E:2D:D9:CD:E6:58:71:B5:D0:CE:13:67:19:CC:6A:37:DD:62:87
Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
Certificate issuer: /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Certificate serial: 01A0E4E3CA79276DD1E97C614672B7491C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
Manifest number: 1A0C
Signing time: Sun 27 Sep 2026 22:02:08 +0000
Manifest this update: Sun 27 Sep 2026 22:02:08 +0000
Manifest next update: Mon 28 Sep 2026 22:02:08 +0000
Files and hashes: 1: CbfPnzkIg630GLdNxKGZc9evepo.roa (hash: OlSSfeY+x6XajlxSO7XTBJeyZDwUAJ2psAjSHgtLxx8=)
2: DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl (hash: Zok9giduSEo11HizdByPDGfxRsAFqkdrAuRQQ2D57UM=)
3: KaCfEz66BVobYaD4JAQbgoR-gKg.roa (hash: y8noCaUxD0ZZ36hzHL6X++bGHmSgDwDhVDPA3PlLSas=)
4: e48dFNX7wc3SQhgi8G26wWhECzY.roa (hash: XEOD2QcK006EDHPh16ax+CiiGNzK5DlFCvCqDs8JPY8=)
5: gQm12kL8qC8G8fld0ndxKWB7Le4.roa (hash: DZyw6qHuuDne2cu+Q2hXVAXkBqKQX9CgYl0ktuHs/9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:e3:ca:79:27:6d:d1:e9:7c:61:46:72:b7:49:1c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Validity
Not Before: Sep 27 22:02:08 2026 GMT
Not After : Sep 28 22:02:08 2026 GMT
Subject: CN=c43e2dd9cde65871b5d0ce136719cc6a37dd6287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:eb:8e:be:f1:c4:61:d3:9e:d8:ef:0c:7e:03:
fe:de:d9:a1:d1:bb:32:52:83:4c:39:c9:9c:2f:d5:
44:cb:82:c9:1b:1a:24:70:bc:0a:92:99:32:7b:af:
d1:f2:c9:c5:8d:f6:f5:f5:c2:3d:01:ee:2c:d1:f1:
d7:ad:8e:06:f8:4d:56:54:53:26:29:33:30:a0:e8:
df:08:0f:60:f5:f1:32:d8:9f:a3:40:46:93:78:0d:
86:8a:f2:a9:cc:06:c7:a0:9a:51:d3:c4:86:35:cc:
13:ac:fd:55:27:4e:d3:6a:57:0a:0a:d8:26:44:6b:
4c:79:90:ef:55:39:7c:95:d8:11:5f:62:0b:a3:90:
8b:91:2c:a1:05:06:ad:44:71:bf:a1:12:49:6a:26:
65:b3:c3:23:c3:e1:61:b1:19:3b:db:a4:cf:78:51:
d4:36:74:0e:00:51:27:97:f9:92:93:2e:85:ff:3b:
0e:b0:34:db:03:ed:22:d4:15:36:dd:db:92:92:2f:
25:f4:c6:86:e6:19:bf:8f:64:d8:db:b9:b6:04:b6:
b7:9c:11:16:03:61:2d:47:0e:34:64:3f:0f:7a:b6:
38:58:3d:37:63:54:c3:56:7d:4f:98:2b:13:af:fb:
d2:74:09:f8:31:fb:b5:2e:b6:f4:1f:75:17:74:28:
51:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3E:2D:D9:CD:E6:58:71:B5:D0:CE:13:67:19:CC:6A:37:DD:62:87
X509v3 Authority Key Identifier:
keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ae:ec:b3:fa:ff:57:4d:62:32:2c:df:12:58:f1:a3:fe:9f:
47:48:8f:ab:6d:fa:f3:f9:4c:7d:43:d6:72:cf:fc:52:80:62:
dc:3f:f9:2a:35:7c:d7:52:9e:ac:ea:fa:31:c1:85:e6:0f:4f:
33:af:cc:2c:97:d0:83:ac:c9:14:4d:1a:0a:04:4d:c7:41:e6:
2e:01:95:df:90:86:5f:1b:36:9a:31:a5:63:93:1f:48:9d:8d:
ac:b2:e2:a2:77:82:93:56:66:55:31:6c:aa:3c:ef:a3:c8:15:
5a:64:bc:3a:c3:af:33:81:6a:be:3a:0f:93:96:67:12:e9:7b:
20:e6:6c:28:ef:a3:f9:12:f7:87:0c:05:06:66:f9:0d:06:0c:
d3:78:82:55:fb:81:9d:0f:9f:59:4e:c8:8c:5d:e8:b6:87:1d:
77:0f:91:4e:15:46:13:02:08:9f:29:e7:7a:31:09:96:f9:62:
e9:ad:1d:07:9b:d5:de:94:bd:3c:86:f9:cb:26:a6:aa:47:e6:
89:f2:9f:5a:9c:23:29:6a:58:e2:38:03:b0:43:d1:37:b7:da:
02:9e:6c:1d:b7:15:93:b1:4a:4b:36:6c:8a:a2:b5:45:1d:66:
0c:a5:f5:49:d3:29:ac:a7:94:39:68:a1:2c:23:ad:e1:c0:35:
89:56:25:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDk48p5J23R6XxhRnK3SRyIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMjFiNzhjZTk3YjBmNWZiM2Q4OGJmOTVjZmJiMDhiMmZi
ZWE4ZTUwHhcNMjYwOTI3MjIwMjA4WhcNMjYwOTI4MjIwMjA4WjAzMTEwLwYDVQQD
EyhjNDNlMmRkOWNkZTY1ODcxYjVkMGNlMTM2NzE5Y2M2YTM3ZGQ2Mjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeuOvvHEYdOe2O8MfgP+3tmh0bsy
UoNMOcmcL9VEy4LJGxokcLwKkpkye6/R8snFjfb19cI9Ae4s0fHXrY4G+E1WVFMm
KTMwoOjfCA9g9fEy2J+jQEaTeA2GivKpzAbHoJpR08SGNcwTrP1VJ07TalcKCtgm
RGtMeZDvVTl8ldgRX2ILo5CLkSyhBQatRHG/oRJJaiZls8Mjw+FhsRk726TPeFHU
NnQOAFEnl/mSky6F/zsOsDTbA+0i1BU23duSki8l9MaG5hm/j2TY27m2BLa3nBEW
A2EtRw40ZD8PerY4WD03Y1TDVn1PmCsTr/vSdAn4Mfu1Lrb0H3UXdChR0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQ+LdnN5lhxtdDOE2cZzGo33WKHMB8GA1UdIwQY
MBaAFA8ht4zpew9fs9iL+Vz7sIsvvqjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wZjc1OTQtZjA0OC00NzNkLWEzOWEt
ZGRiOWU0ZGI5OGM2LzEvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8wZjc1OTQtZjA0OC00NzNkLWEzOWEtZGRiOWU0ZGI5OGM2
LzEvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALK7ss/r/
V01iMizfEljxo/6fR0iPq2368/lMfUPWcs/8UoBi3D/5KjV811KerOr6McGF5g9P
M6/MLJfQg6zJFE0aCgRNx0HmLgGV35CGXxs2mjGlY5MfSJ2NrLLioneCk1ZmVTFs
qjzvo8gVWmS8OsOvM4FqvjoPk5ZnEul7IOZsKO+j+RL3hwwFBmb5DQYM03iCVfuB
nQ+fWU7IjF3otocddw+RThVGEwIInynnejEJlvli6a0dB5vV3pS9PIb5yyamqkfm
ifKfWpwjKWpY4jgDsEPRN7faAp5sHbcVk7FKSzZsiqK1RR1mDKX1SdMprKeUOWih
LCOt4cA1iVYl4w==
-----END CERTIFICATE-----
Generated at Mon Sep 28 06:09:44 2026 by rpki-client