Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
File: ydWxKeBvlSRoXnABAoQfctaRXDM.mft (raw, json)
Hash identifier: Eu/glQ4zwZo/1lwfSArDJ4UEU2tXXNdzR1OnBOhNQcQ=
Subject key identifier: F0:95:C6:80:F7:9E:11:77:15:D6:76:CD:03:2C:7B:19:75:45:C5:1B
Authority key identifier: C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
Certificate issuer: /CN=c9d5b129e06f9524685e700102841f72d6915c33
Certificate serial: 01A0ECD3A5AB12EE076EDFBF4980EC944EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
Manifest number: 085E
Signing time: Tue 29 Sep 2026 11:01:28 +0000
Manifest this update: Tue 29 Sep 2026 11:01:28 +0000
Manifest next update: Wed 30 Sep 2026 11:01:28 +0000
Files and hashes: 1: BNMGtjTTYKe2pymUlI-2By8WAuY.roa (hash: RrYXesXXO0Vl2bktuDwSHZFyLC3J01YK9f8as6ZBpiA=)
2: ydWxKeBvlSRoXnABAoQfctaRXDM.crl (hash: TsquPPM4ud1LsOeX95vTn0/tTjk/5lXdR9CMgmGEcq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:a5:ab:12:ee:07:6e:df:bf:49:80:ec:94:4e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d5b129e06f9524685e700102841f72d6915c33
Validity
Not Before: Sep 29 11:01:28 2026 GMT
Not After : Sep 30 11:01:28 2026 GMT
Subject: CN=f095c680f79e117715d676cd032c7b197545c51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ef:13:14:8f:7b:0e:7b:53:04:b4:60:61:9c:
51:59:8e:ab:99:48:b9:28:1e:6d:9c:6d:f4:e9:aa:
f7:cd:47:20:76:41:dc:16:c9:07:16:2a:78:32:86:
ad:d9:08:3f:89:80:ac:42:36:b3:ab:e5:94:48:ea:
1a:48:fc:f1:9c:cc:1c:49:b6:d4:f0:24:d1:18:f2:
fb:6f:21:9c:1c:94:50:a7:c6:37:b8:ea:5f:c4:95:
8c:04:01:36:bc:f1:71:b2:69:2f:6d:a6:a4:32:e7:
7e:02:0c:29:fa:84:20:6a:75:49:86:56:c6:34:5e:
bd:85:74:a4:ab:65:53:90:88:93:7d:b1:1d:5a:3e:
fe:05:7e:8b:c0:56:a9:15:3a:0e:ca:5a:3e:14:ba:
b3:a7:f1:10:ce:f9:98:8f:82:44:42:21:23:84:c6:
18:76:c8:04:ac:0b:09:44:04:2e:cf:43:9c:da:a7:
01:7f:d5:7e:fa:bf:7a:8b:8c:07:6f:10:e0:1c:73:
b6:d5:18:a5:37:2c:45:12:68:2f:4b:32:8d:c8:87:
5c:84:3d:3e:45:17:d1:7d:b8:7b:ac:fe:cf:8f:d3:
bf:d0:2e:6c:4a:53:b2:37:19:64:42:47:b2:12:53:
33:44:b9:e5:c1:e3:0a:4e:48:d1:2b:60:47:bb:c6:
c4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:95:C6:80:F7:9E:11:77:15:D6:76:CD:03:2C:7B:19:75:45:C5:1B
X509v3 Authority Key Identifier:
keyid:C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7d:a1:88:15:df:85:a6:83:96:70:f4:6b:85:51:4b:18:3a:
25:36:95:b8:ba:4d:7b:6e:81:03:e2:5d:ad:bf:e8:01:d0:1e:
70:90:49:ab:a4:7e:22:cb:6a:29:c7:a9:88:67:5d:cd:7f:c6:
10:8a:5e:ed:99:34:2b:5e:98:1a:bb:f4:bb:ee:c2:55:3b:c6:
61:6a:00:39:14:72:c3:aa:af:19:ee:dd:32:ad:73:9c:e6:35:
a3:75:7c:71:ed:a0:41:33:d8:aa:fd:16:e9:95:81:c5:7f:78:
c6:c7:97:20:0a:0d:1b:32:d6:98:2c:0c:30:1a:bf:53:aa:da:
68:f2:de:66:7a:1b:8f:e0:91:2f:27:19:05:87:68:9e:30:2d:
f0:75:80:a2:04:19:3d:fb:3a:4b:7a:d7:b7:25:d2:f2:5d:c5:
f7:e0:33:53:e0:3e:42:bb:0d:b2:54:f2:64:32:66:ca:90:3e:
5b:e8:d8:73:1e:88:c8:eb:84:87:03:16:0d:ab:d7:e9:bf:2c:
ea:0b:ec:a6:48:b5:ec:f0:d6:80:85:fb:1c:a0:58:83:7a:65:
9b:08:a8:a1:5c:07:94:54:71:87:6c:e6:ed:64:f7:a0:2b:3f:
5a:98:da:ae:64:0f:d9:22:6f:10:58:b4:c6:c2:c1:14:aa:a3:
37:9e:c9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:04:47 2026 by rpki-client