Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
File: DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft (raw, json)
Hash identifier: QjRQ1LnNuheGAPPgPbSTIUyJwa3o7p6/C3oFDS0rFlw=
Subject key identifier: CB:FB:F3:76:E0:15:73:C9:B6:E9:AE:83:65:BE:D4:54:B7:91:DE:18
Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
Certificate issuer: /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Certificate serial: 019CAD59929DC7BF4BBFA865BA5148E80B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
Manifest number: 17DD
Signing time: Mon 02 Mar 2026 07:00:54 +0000
Manifest this update: Mon 02 Mar 2026 07:00:54 +0000
Manifest next update: Tue 03 Mar 2026 07:00:54 +0000
Files and hashes: 1: CbfPnzkIg630GLdNxKGZc9evepo.roa (hash: OlSSfeY+x6XajlxSO7XTBJeyZDwUAJ2psAjSHgtLxx8=)
2: DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl (hash: xtuhLWL5Ev1RfWfV1gOvy27cMKmxjJ+OM0u3OP8Ke1A=)
3: KaCfEz66BVobYaD4JAQbgoR-gKg.roa (hash: y8noCaUxD0ZZ36hzHL6X++bGHmSgDwDhVDPA3PlLSas=)
4: e48dFNX7wc3SQhgi8G26wWhECzY.roa (hash: XEOD2QcK006EDHPh16ax+CiiGNzK5DlFCvCqDs8JPY8=)
5: gQm12kL8qC8G8fld0ndxKWB7Le4.roa (hash: DZyw6qHuuDne2cu+Q2hXVAXkBqKQX9CgYl0ktuHs/9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:92:9d:c7:bf:4b:bf:a8:65:ba:51:48:e8:0b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Validity
Not Before: Mar 2 07:00:54 2026 GMT
Not After : Mar 3 07:00:54 2026 GMT
Subject: CN=cbfbf376e01573c9b6e9ae8365bed454b791de18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:75:f8:4d:f2:2a:1d:ab:8b:fc:ec:b6:6c:
33:f2:3e:0c:1c:b6:3e:45:aa:26:68:fb:02:03:66:
d9:c8:eb:9b:0a:f5:de:c9:13:38:93:57:f9:ea:6b:
c2:1a:a0:d3:70:c7:5e:ca:8e:0c:1a:a8:6c:e7:7d:
9f:ac:62:9d:df:f4:c4:40:a0:25:8b:d5:5d:70:c4:
d7:2f:e4:42:89:bf:3d:52:6d:05:22:72:7f:b5:6c:
c9:81:7e:e9:da:8c:1c:9f:f1:12:50:f8:af:da:4a:
1d:ad:cc:94:c9:5d:81:9a:89:db:b3:4e:e1:f2:96:
58:d5:22:00:69:5a:56:3c:80:9a:af:43:46:7a:11:
52:ba:c3:9f:f8:9c:e0:76:58:da:83:15:f8:eb:8a:
2c:f0:05:72:89:62:72:ca:b8:ab:38:d4:34:64:ed:
7f:84:5f:34:70:ef:74:8d:97:35:7c:e0:a9:44:ff:
c3:10:c2:c2:0f:a2:99:88:c0:7a:3c:98:19:9e:9f:
71:13:b8:53:56:b2:e5:c7:53:be:cf:90:8b:63:d7:
db:87:e4:6e:c1:88:c1:dd:c4:98:e6:71:43:02:75:
e7:05:98:b4:e8:97:94:3d:3d:ff:a1:8c:3e:88:c7:
d0:cf:e5:fc:b0:d8:08:cf:5c:b7:0d:34:c6:07:0b:
0d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FB:F3:76:E0:15:73:C9:B6:E9:AE:83:65:BE:D4:54:B7:91:DE:18
X509v3 Authority Key Identifier:
keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:18:47:77:e4:80:1e:c2:61:e8:d1:fd:8e:7b:26:a9:a0:d8:
66:4a:1e:10:7d:95:2d:b4:18:48:30:95:5d:50:e2:ce:65:2c:
47:3a:6d:52:6b:c0:89:e7:78:00:ad:31:b6:03:13:77:8c:7d:
11:91:36:30:bc:ac:69:2f:43:5e:b4:b6:59:fb:1e:49:27:f5:
3b:85:00:21:7f:55:68:33:13:e4:f9:21:88:7a:06:64:b4:5c:
66:b0:9c:67:d0:cf:90:31:ea:6d:9e:c9:60:f8:d5:84:7d:db:
0b:cd:e7:9f:2b:a7:8e:6c:2d:dd:da:52:7d:84:01:6d:16:61:
03:50:29:d1:84:a8:f6:2b:57:f4:6a:29:67:c8:85:f1:6e:f5:
8a:97:83:9a:88:38:e5:2e:60:79:02:e7:48:12:97:5b:5e:91:
18:d9:b7:98:7a:d6:e2:b5:1a:0b:b5:5f:f9:0f:67:77:75:36:
87:10:cc:a4:61:47:05:39:32:a9:f5:5e:13:9c:cc:ea:9a:1a:
45:77:7f:44:ed:ee:f5:74:e3:9e:e8:01:10:e6:f4:dc:b8:ab:
f7:e1:11:3f:df:fc:f2:53:18:7a:34:fc:de:48:5c:29:73:b3:
f7:b4:ee:37:0c:82:c0:eb:83:e1:22:92:9a:40:f0:cc:30:90:
7d:63:dd:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWZKdx79Lv6hlulFI6AtZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMjFiNzhjZTk3YjBmNWZiM2Q4OGJmOTVjZmJiMDhiMmZi
ZWE4ZTUwHhcNMjYwMzAyMDcwMDU0WhcNMjYwMzAzMDcwMDU0WjAzMTEwLwYDVQQD
EyhjYmZiZjM3NmUwMTU3M2M5YjZlOWFlODM2NWJlZDQ1NGI3OTFkZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG11+E3yKh2ri/zstmwz8j4MHLY+
RaomaPsCA2bZyOubCvXeyRM4k1f56mvCGqDTcMdeyo4MGqhs532frGKd3/TEQKAl
i9VdcMTXL+RCib89Um0FInJ/tWzJgX7p2owcn/ESUPiv2kodrcyUyV2Bmonbs07h
8pZY1SIAaVpWPICar0NGehFSusOf+JzgdljagxX464os8AVyiWJyyrirONQ0ZO1/
hF80cO90jZc1fOCpRP/DEMLCD6KZiMB6PJgZnp9xE7hTVrLlx1O+z5CLY9fbh+Ru
wYjB3cSY5nFDAnXnBZi06JeUPT3/oYw+iMfQz+X8sNgIz1y3DTTGBwsNXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMv783bgFXPJtumug2W+1FS3kd4YMB8GA1UdIwQY
MBaAFA8ht4zpew9fs9iL+Vz7sIsvvqjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wZjc1OTQtZjA0OC00NzNkLWEzOWEt
ZGRiOWU0ZGI5OGM2LzEvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8wZjc1OTQtZjA0OC00NzNkLWEzOWEtZGRiOWU0ZGI5OGM2
LzEvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRhHd+SA
HsJh6NH9jnsmqaDYZkoeEH2VLbQYSDCVXVDizmUsRzptUmvAied4AK0xtgMTd4x9
EZE2MLysaS9DXrS2WfseSSf1O4UAIX9VaDMT5PkhiHoGZLRcZrCcZ9DPkDHqbZ7J
YPjVhH3bC83nnyunjmwt3dpSfYQBbRZhA1Ap0YSo9itX9GopZ8iF8W71ipeDmog4
5S5geQLnSBKXW16RGNm3mHrW4rUaC7Vf+Q9nd3U2hxDMpGFHBTkyqfVeE5zM6poa
RXd/RO3u9XTjnugBEOb03Lir9+ERP9/88lMYejT83khcKXOz97TuNwyCwOuD4SKS
mkDwzDCQfWPdzw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:22:40 2026 by rpki-client