Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
File: yDOgOJWSdW5BXN40irvCQxKwLfY.mft (raw, json)
Hash identifier: YnDjDSQo9FZNL5ujfW+mHhJ9O2pz21WrGBFILUdaJZg=
Subject key identifier: 1C:D8:F0:E5:4D:72:D7:EA:11:04:06:9D:40:CA:61:DD:F2:60:24:6E
Authority key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
Certificate issuer: /CN=c833a0389592756e415cde348abbc24312b02df6
Certificate serial: 01A0ED4134DFDC00966A6A774BFB7F35059D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
Manifest number: 1A7C
Signing time: Tue 29 Sep 2026 13:01:08 +0000
Manifest this update: Tue 29 Sep 2026 13:01:08 +0000
Manifest next update: Wed 30 Sep 2026 13:01:08 +0000
Files and hashes: 1: 3TtBL0qA5kisjEdyIAiW0RrkR5Y.roa (hash: IIwZ4eNX/TnLbTOdzNJ7spbedu7ExR/vuLghC48r7Rc=)
2: yDOgOJWSdW5BXN40irvCQxKwLfY.crl (hash: hIHzD/tPJN5bFDkZCSS34UjvsUqR8tP1sxrRAFyKXeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:41:34:df:dc:00:96:6a:6a:77:4b:fb:7f:35:05:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c833a0389592756e415cde348abbc24312b02df6
Validity
Not Before: Sep 29 13:01:08 2026 GMT
Not After : Sep 30 13:01:08 2026 GMT
Subject: CN=1cd8f0e54d72d7ea1104069d40ca61ddf260246e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:fc:0a:8e:68:52:b4:4c:2f:55:8d:1a:94:
f6:e4:ce:ef:a4:6a:1a:db:68:aa:08:64:f5:60:d3:
03:c4:1d:c5:ed:d3:36:6d:e9:4e:e8:81:a8:4a:50:
55:f1:47:bb:b6:a6:da:79:0c:2e:d0:2b:9c:ae:d6:
35:24:37:bd:7f:30:b4:e3:1b:f4:2f:ae:2f:6b:50:
5a:51:70:39:33:c6:f6:2f:16:fa:b8:cc:47:eb:b3:
40:91:1b:ab:ab:27:cf:5c:da:8f:af:b3:1b:4a:62:
de:25:6a:4f:fe:30:e2:f8:8a:02:50:66:93:43:85:
09:fe:b4:e5:54:da:06:da:df:c0:ee:4f:6e:b0:f2:
2b:2e:ed:fb:3e:1d:24:55:49:67:0d:3a:ed:1c:14:
ba:34:47:5d:b8:c0:52:90:34:50:bc:c1:7d:82:e7:
a1:25:2e:3e:26:92:03:99:f0:22:ec:c6:e1:c3:3e:
aa:f7:ea:51:66:e6:e3:e6:7c:73:e2:ae:96:57:0d:
f9:6c:61:3c:e7:85:2a:a2:d5:3e:5c:19:5f:30:21:
ae:ad:43:d4:0e:bf:fb:9e:4c:11:34:1e:1f:1d:dc:
81:c4:42:59:06:49:e9:f9:ba:5e:8e:53:aa:42:8b:
26:de:7c:6b:8f:17:35:a2:b5:cf:26:34:62:c1:0a:
1e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D8:F0:E5:4D:72:D7:EA:11:04:06:9D:40:CA:61:DD:F2:60:24:6E
X509v3 Authority Key Identifier:
keyid:C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e2:28:1e:d8:c0:88:25:18:3a:7d:03:8a:29:c6:42:46:a1:
f5:c5:24:b8:a1:84:38:96:ae:f1:91:28:87:21:c4:9d:03:39:
78:5a:28:0b:2f:f5:77:b2:21:bc:7a:cd:47:5e:fc:ab:05:65:
05:2e:bc:02:93:19:e4:1c:1e:6e:a7:73:bd:fa:e3:9f:eb:48:
8f:e8:03:55:ca:4a:c3:90:6b:9b:1a:23:59:cf:94:2e:61:b5:
68:7e:fe:1b:5d:ad:59:bb:50:38:d5:5e:6b:4a:fa:18:68:7c:
56:17:1a:d7:20:75:66:dd:4f:9e:5a:a0:ab:d1:62:28:da:c3:
7f:4e:fb:43:11:6a:fd:af:55:7b:5c:63:42:d0:ab:d9:f5:1e:
7e:d3:78:b7:f1:bb:ed:06:4a:15:85:09:a6:c7:98:6f:85:48:
38:d7:0c:b8:70:09:8a:c9:04:fa:b3:e0:a3:86:34:97:7c:01:
af:29:dc:99:9f:dd:43:99:47:ee:bd:a6:9e:07:bb:85:55:72:
89:36:eb:d8:2d:a1:78:a6:88:17:bd:1e:3b:97:d4:57:67:e3:
49:81:99:09:eb:5d:b2:ed:0d:68:a4:0c:ca:0a:0c:c4:de:38:
3c:4f:ab:e2:c0:39:ec:82:75:71:e3:95:d7:6f:fc:dd:10:d2:
6c:d1:2f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:29:46 2026 by rpki-client