Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
File: yDOgOJWSdW5BXN40irvCQxKwLfY.mft (raw, json)
Hash identifier: KpGIDKbjXH46URRSwckqysiRo0LlrkE0m103bWW7ghI=
Subject key identifier: 3E:F5:63:C6:E4:C5:4B:77:61:34:69:4C:0E:4A:30:16:12:19:1A:FC
Authority key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
Certificate issuer: /CN=c833a0389592756e415cde348abbc24312b02df6
Certificate serial: 019F93925AA3B83EAFAD8AB906DCCB33DE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 10:01:09 +0000
Manifest this update: Fri 24 Jul 2026 10:01:09 +0000
Manifest next update: Sat 25 Jul 2026 10:01:09 +0000
Files and hashes: 1: 3TtBL0qA5kisjEdyIAiW0RrkR5Y.roa (hash: IIwZ4eNX/TnLbTOdzNJ7spbedu7ExR/vuLghC48r7Rc=)
2: yDOgOJWSdW5BXN40irvCQxKwLfY.crl (hash: eBkgCL3qL4cHL1ywMLg812Ek3CEr0fkq1Xh8IqiIDDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:5a:a3:b8:3e:af:ad:8a:b9:06:dc:cb:33:de:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c833a0389592756e415cde348abbc24312b02df6
Validity
Not Before: Jul 24 10:01:09 2026 GMT
Not After : Jul 25 10:01:09 2026 GMT
Subject: CN=3ef563c6e4c54b776134694c0e4a301612191afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:cb:c4:dd:66:9b:52:8e:fc:5a:b4:3b:5c:
6c:48:fd:6e:95:7a:38:30:e3:bd:bb:c6:d0:73:91:
2c:ce:62:4d:80:88:8c:77:0c:47:7a:36:ce:79:5a:
d5:22:d4:2f:d7:d9:80:18:c6:55:e4:7a:93:0e:82:
2b:3e:79:36:73:07:58:2b:f2:ce:36:a0:aa:89:9a:
80:8c:98:50:bd:4e:12:e6:63:02:2e:c4:c2:ca:5e:
1d:fb:46:08:93:37:10:40:48:7e:e7:2a:57:e9:29:
42:52:96:e1:93:2c:ee:8c:bb:2c:7a:75:5b:ba:4e:
7e:2a:2f:0a:75:6d:4a:9e:e1:e7:67:84:9f:54:fe:
ab:d3:94:93:83:4f:ba:6e:59:87:44:71:92:9e:12:
4c:bc:22:45:db:bc:66:fc:6d:ac:bf:8d:d8:f7:f2:
f7:88:fd:b3:29:57:0e:3a:af:db:37:a2:fc:90:13:
c8:76:5c:7b:18:51:7a:aa:6e:71:a7:8c:83:0a:8d:
e2:54:8f:13:d4:a5:45:61:c1:2c:e2:7a:34:ad:84:
eb:8a:6c:60:d5:bb:25:5e:65:c8:b3:a8:0c:89:c4:
d1:b4:92:a7:69:49:0b:66:72:2c:4f:02:8e:5b:f1:
ff:1a:8e:af:98:82:5b:30:32:ce:18:74:a2:09:46:
ae:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F5:63:C6:E4:C5:4B:77:61:34:69:4C:0E:4A:30:16:12:19:1A:FC
X509v3 Authority Key Identifier:
keyid:C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f3:de:0d:63:04:ff:a8:87:3d:69:49:2d:10:46:b6:d6:2a:
66:a5:3f:a2:09:ca:c9:47:cf:24:10:67:07:2f:e0:bf:f3:df:
3a:ce:21:0b:5f:64:0c:c8:a2:9f:d4:0a:09:16:29:c3:64:e1:
f5:1d:62:b3:b3:9f:e1:d0:5d:5c:ac:12:20:56:fb:28:11:ba:
b8:14:1b:b7:4f:f4:7a:24:55:0f:40:3f:86:54:18:01:2a:f8:
de:0e:c1:af:ad:8c:3b:60:ab:4c:b0:53:f3:2d:12:77:64:20:
c0:85:30:28:7a:f4:9b:b5:06:f6:89:b1:51:d6:e4:99:94:27:
56:73:31:1d:66:1b:23:d1:2a:f5:99:68:c1:02:d1:a4:bc:61:
bc:d2:c8:ee:cf:15:74:36:66:eb:2f:6c:28:10:30:14:c1:c3:
9c:9d:79:9e:19:7e:2b:66:21:e9:7a:b9:82:f5:82:2e:aa:83:
71:4f:4a:6f:08:4f:81:f0:6d:19:43:20:ac:04:10:1e:9d:58:
63:9e:e6:77:dd:13:1e:cf:71:fa:03:7b:3c:1a:37:8a:2a:62:
3f:77:6c:38:74:20:d8:65:b3:80:bf:88:17:b9:5f:c4:b0:74:
bd:fb:48:8f:ee:e3:32:dc:80:a5:3d:14:51:04:1d:c6:05:6b:
89:4d:00:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:02:24 2026 by rpki-client