Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
File: ydWxKeBvlSRoXnABAoQfctaRXDM.mft (raw, json)
Hash identifier: 57WWvO33Rd5eo5+7CdeBwVnKpbXMUbTERIbizwua5lQ=
Subject key identifier: 15:8F:14:F0:97:CA:32:D8:AA:36:FE:01:7A:2F:D8:5B:0E:3D:14:74
Authority key identifier: C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
Certificate issuer: /CN=c9d5b129e06f9524685e700102841f72d6915c33
Certificate serial: 019F932440C8AF807D689FF70637E4D62B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
Manifest number: 07AB
Signing time: Fri 24 Jul 2026 08:00:54 +0000
Manifest this update: Fri 24 Jul 2026 08:00:54 +0000
Manifest next update: Sat 25 Jul 2026 08:00:54 +0000
Files and hashes: 1: BNMGtjTTYKe2pymUlI-2By8WAuY.roa (hash: RrYXesXXO0Vl2bktuDwSHZFyLC3J01YK9f8as6ZBpiA=)
2: ydWxKeBvlSRoXnABAoQfctaRXDM.crl (hash: TGBqGKsMci8WXUsVK7nuD88Q2CjPoYGBeCL9Vq9EH1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:40:c8:af:80:7d:68:9f:f7:06:37:e4:d6:2b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d5b129e06f9524685e700102841f72d6915c33
Validity
Not Before: Jul 24 08:00:54 2026 GMT
Not After : Jul 25 08:00:54 2026 GMT
Subject: CN=158f14f097ca32d8aa36fe017a2fd85b0e3d1474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:02:7f:63:73:39:63:df:2a:56:9c:59:c2:
5e:6e:db:d3:40:f2:12:ed:20:c3:f4:92:ff:58:1b:
c4:bf:df:12:3b:84:87:fa:21:01:c5:7f:7a:e2:ff:
f3:1d:37:05:35:64:25:dc:67:cf:16:f5:22:41:1f:
90:38:df:26:77:c8:65:d6:a8:07:96:89:e9:9b:d2:
22:bf:7d:52:4c:40:06:de:77:a2:f5:1a:c2:0f:97:
2c:bd:60:f4:46:52:a9:fc:39:ce:7e:c6:21:4e:dc:
06:b2:b4:93:34:9c:e1:3c:d8:46:78:ba:88:23:68:
85:54:79:17:5a:9d:ae:d3:62:7a:d5:9b:34:ed:d3:
e8:36:b6:44:15:3c:f4:e9:49:56:6b:c0:82:cf:11:
93:fa:6c:32:80:9a:53:88:39:57:6c:d2:a3:6d:3e:
b3:8b:29:46:a6:eb:06:2b:67:24:f1:f5:c4:0a:60:
62:d7:9d:16:6d:27:98:1e:00:6f:58:25:ca:c4:5b:
a8:ac:bf:1c:12:da:83:56:e8:4f:db:a0:33:60:e1:
5b:02:2e:5a:a1:d3:ef:b5:a3:7a:66:a5:d2:12:7e:
6c:67:c2:7e:7a:23:39:2c:2d:58:f3:59:c1:22:3b:
56:f9:51:ca:12:e0:9e:44:81:64:f4:83:bf:0d:62:
1e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8F:14:F0:97:CA:32:D8:AA:36:FE:01:7A:2F:D8:5B:0E:3D:14:74
X509v3 Authority Key Identifier:
keyid:C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:97:65:0c:76:ea:45:d8:2f:f6:f2:99:34:1a:67:d8:f9:74:
40:9d:31:f1:3b:86:d1:23:0e:db:0c:2c:1e:3e:77:04:bc:14:
05:71:dd:ce:5f:f6:2d:df:77:f7:78:d0:d1:9a:3e:f8:0c:34:
46:52:28:61:e4:f4:29:0e:d0:e0:46:62:37:94:a4:ab:08:6b:
5b:d0:62:ea:4c:ff:8f:dd:4e:a7:0d:d1:40:28:5f:48:5e:6b:
de:ab:5d:45:90:45:5a:f4:ea:82:87:14:fb:d6:e2:3f:6b:f4:
f1:65:c7:16:26:2e:d2:a8:dd:b6:e4:b6:31:41:d4:b9:7b:57:
03:a0:8f:c1:86:81:e7:24:8a:56:66:d5:f9:41:1f:17:b9:88:
90:e8:28:46:98:fb:b9:7c:c1:aa:18:61:3d:86:57:96:92:ee:
96:ee:24:c9:9c:eb:97:c6:c9:0d:2e:f1:be:29:03:fe:cf:29:
58:9a:16:2b:86:e8:56:7f:32:e1:03:8b:37:86:26:0c:af:ca:
cc:ad:97:58:2e:4f:eb:89:45:e4:2f:56:fe:37:85:83:1e:2c:
1a:17:36:53:a4:33:97:ac:d4:b0:a4:6e:e1:6c:9b:2f:21:bd:
5e:0e:7b:65:56:e9:6b:1d:10:a2:84:44:57:25:b5:c9:d1:0e:
d6:d1:94:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:39 2026 by rpki-client