Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
File: yDOgOJWSdW5BXN40irvCQxKwLfY.mft (raw, json)
Hash identifier: hRAjxQFWjxewNvr0SFTaCo9cKFGoFdW8UJZMfk1kubo=
Subject key identifier: A8:4C:28:EF:BB:AD:59:4A:36:E7:45:3C:93:CD:2D:2F:14:9C:63:4C
Authority key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
Certificate issuer: /CN=c833a0389592756e415cde348abbc24312b02df6
Certificate serial: 019E1ED9A04C5D53EB9E7D7E634CE8802B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 01:00:39 +0000
Manifest this update: Wed 13 May 2026 01:00:39 +0000
Manifest next update: Thu 14 May 2026 01:00:39 +0000
Files and hashes: 1: 3TtBL0qA5kisjEdyIAiW0RrkR5Y.roa (hash: IIwZ4eNX/TnLbTOdzNJ7spbedu7ExR/vuLghC48r7Rc=)
2: yDOgOJWSdW5BXN40irvCQxKwLfY.crl (hash: Z/2HwNLxZl63RHa6ZP8UmnqG2QLS3dyfH889Zk3OZn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:a0:4c:5d:53:eb:9e:7d:7e:63:4c:e8:80:2b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c833a0389592756e415cde348abbc24312b02df6
Validity
Not Before: May 13 01:00:39 2026 GMT
Not After : May 14 01:00:39 2026 GMT
Subject: CN=a84c28efbbad594a36e7453c93cd2d2f149c634c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:0c:bc:b6:3a:e4:ab:21:a2:97:68:bc:55:
3b:62:50:18:23:bb:40:79:be:ba:07:1e:57:2b:2c:
40:80:b6:7c:1e:22:d1:ed:a0:b2:b2:2f:da:5c:dd:
72:a5:28:d3:49:4a:e8:7a:69:c8:be:e0:d0:95:37:
91:a8:40:c2:25:e9:38:76:fc:13:5d:40:86:82:f4:
fe:d3:18:1b:71:70:e5:d7:72:66:1f:82:67:26:de:
18:0c:d4:5e:f5:46:11:28:b5:12:9c:c8:2d:d0:90:
ca:d0:c3:98:1b:49:c2:e9:4a:00:d0:37:55:c2:8d:
e2:3e:c0:fe:7c:57:16:fe:73:47:46:41:63:90:ce:
f7:f1:ba:7b:11:c0:af:64:e3:cc:f2:cc:89:43:28:
d6:a1:52:89:6c:5f:a8:49:6b:8c:40:cc:1d:b7:4f:
aa:eb:3b:fe:cd:78:94:16:d5:44:fb:1c:58:8c:02:
fe:8f:d4:46:a3:af:6e:cc:3c:74:52:83:55:50:b4:
de:e1:a7:b3:36:22:90:54:24:1f:56:16:76:58:b5:
3a:66:10:77:ad:e4:b9:99:1f:a6:00:0d:3f:0f:94:
ef:31:c0:ce:f9:f6:2a:1e:0c:48:e2:e9:4d:eb:18:
ce:09:50:e7:39:6e:f1:b3:51:9a:9f:17:30:58:0a:
d7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4C:28:EF:BB:AD:59:4A:36:E7:45:3C:93:CD:2D:2F:14:9C:63:4C
X509v3 Authority Key Identifier:
keyid:C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d7:92:6b:a3:89:f1:19:ad:ca:60:da:16:c0:7e:25:31:55:
6f:20:df:69:87:d3:c4:32:4f:79:9c:07:72:a5:5c:d5:cf:e3:
4b:45:3f:3e:12:41:9d:45:b3:17:03:13:e7:8f:3d:09:38:ec:
2d:ea:6d:62:82:c1:2a:2e:8d:f1:33:01:01:65:13:5d:fd:55:
c1:41:47:81:06:65:bc:1a:7f:13:7d:13:ae:de:e2:82:55:28:
50:4e:45:82:f0:0d:3c:65:0a:04:e9:18:e4:66:94:ef:cc:ff:
82:21:9c:9e:e8:8b:00:df:25:3d:fc:eb:33:63:29:27:61:20:
24:de:75:27:31:67:f0:c4:0e:c9:8b:b7:5d:98:a5:54:ea:cb:
31:34:14:22:43:ac:21:35:42:4c:f1:72:1e:ea:20:46:9b:0a:
19:ac:4d:b6:62:9d:41:a9:7b:c2:87:e4:48:85:60:6b:4c:a9:
7b:ab:09:40:69:1e:5d:0b:3b:02:a0:f2:23:56:00:15:84:2c:
c3:df:8a:f0:a6:39:60:ea:f7:7c:d0:90:3a:e0:d6:8a:81:13:
b1:8e:2d:b9:13:9a:2d:65:d5:aa:07:17:3a:33:0b:66:a2:d6:
2b:f7:80:9e:80:c1:7f:a6:a0:47:1f:a6:e0:79:0f:cd:f8:b6:
f5:55:4c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:32:10 2026 by rpki-client