Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
File: dYDRZWm7JKMo4ntH99dRZZcl3vs.mft (raw, json)
Hash identifier: yHRgrgTLr9Kw+k1ce5Niy+qkSRiuj9dRhi/XR8avLTI=
Subject key identifier: 0C:DE:92:56:D2:C5:ED:28:7E:F6:32:3D:94:B2:C7:0D:1C:67:3F:0E
Authority key identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
Certificate issuer: /CN=7580d16569bb24a328e27b47f7d751659725defb
Certificate serial: 019E1F11A0F470705930A34ADC62C9CA2E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 02:01:49 +0000
Manifest this update: Wed 13 May 2026 02:01:49 +0000
Manifest next update: Thu 14 May 2026 02:01:49 +0000
Files and hashes: 1: ECrRKyyp-LiX1od5u6h9jQbQyd8.roa (hash: G+0jVdYZJlndG8ZNfCVw49ceooT9pB50RNi/efo30+s=)
2: dYDRZWm7JKMo4ntH99dRZZcl3vs.crl (hash: WesUklU8OwWixXv7g6w11b2wJwckRmBdCGRTLau+ELc=)
3: y86tnmPuqWIsHAopUuOyTE-DfXY.roa (hash: ddB2+/l7hkyocSFaIWWx4fEn6FSZzUu/NIcm47CrJmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:a0:f4:70:70:59:30:a3:4a:dc:62:c9:ca:2e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7580d16569bb24a328e27b47f7d751659725defb
Validity
Not Before: May 13 02:01:49 2026 GMT
Not After : May 14 02:01:49 2026 GMT
Subject: CN=0cde9256d2c5ed287ef6323d94b2c70d1c673f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:00:2b:81:ae:f4:e3:bf:76:0c:bd:6e:83:
03:da:41:d4:69:0d:90:e2:35:91:86:d9:19:49:3e:
d4:b7:c8:44:a8:7a:d5:e3:c0:3a:69:4e:04:1d:e8:
dc:c8:9d:44:c3:bf:02:4f:0b:fe:3f:89:13:40:71:
b7:0b:7a:af:f4:c5:2c:65:ae:c9:f2:90:cc:f6:28:
8d:98:a3:7a:fa:82:b7:c6:1f:49:60:9c:85:bf:f0:
69:25:49:53:58:7d:3e:13:24:a0:24:d2:30:04:38:
32:d6:98:3c:16:39:aa:c3:89:ec:3b:56:a0:00:5c:
fa:be:b4:b4:ee:65:70:5f:1d:88:c7:17:5f:b3:a6:
b6:a2:e3:f2:ed:31:03:d6:39:51:47:cb:a5:6c:97:
c8:71:de:1c:9e:1c:63:ea:b0:99:cb:03:62:8d:80:
e9:6e:3e:f3:cc:0f:59:19:75:ab:d0:7a:ef:8b:3a:
ef:53:bd:71:31:e0:03:2a:51:5e:51:c9:d4:15:13:
39:3e:cb:6f:03:65:2e:37:05:50:3b:a9:8c:84:cc:
c5:98:3b:f5:af:74:d5:dc:20:2a:92:6e:9e:30:22:
24:45:79:a3:ba:17:53:bd:5c:7b:99:16:d5:49:14:
24:7e:ff:0a:e6:2b:d4:5c:a7:3a:50:04:1e:1b:35:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DE:92:56:D2:C5:ED:28:7E:F6:32:3D:94:B2:C7:0D:1C:67:3F:0E
X509v3 Authority Key Identifier:
keyid:75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ab:ac:e4:76:55:b5:7f:ba:43:43:76:84:dd:bc:d6:89:5c:
86:e1:59:2b:81:25:37:03:67:3d:5b:92:63:75:7b:bd:83:4c:
79:f7:46:b3:71:e5:56:e4:9c:4c:0e:01:2f:89:1c:fa:54:cc:
89:a9:da:de:86:3b:db:28:06:1b:a6:7e:19:bf:4c:08:28:0b:
b4:bc:70:a4:b0:09:16:1b:8e:38:4b:70:9f:47:56:28:6e:c2:
5b:29:f9:3e:2a:bc:a9:ff:01:d6:67:0f:f0:f4:d2:e5:56:74:
97:5b:65:f0:6b:3c:42:23:b6:f6:c7:ee:75:8a:65:c1:0e:a9:
95:40:8c:ae:03:d1:ff:30:72:30:44:76:56:e6:6c:41:9b:14:
dd:49:ec:4f:e7:36:13:00:b1:25:c7:cd:59:c6:1e:99:35:ea:
35:5f:05:31:01:24:5e:98:54:f6:80:49:a1:f9:1e:b1:42:df:
3b:4e:88:2f:96:7e:05:e8:17:a9:58:c6:1a:e8:c1:d2:f2:28:
33:30:a4:b5:c4:88:9f:2a:16:d6:ac:43:19:02:fa:ec:9c:c7:
ad:15:c5:8d:76:78:25:0d:ba:0a:79:26:3e:ef:08:84:a8:cc:
8d:ce:1e:8b:e5:6d:43:8c:ee:d2:07:c0:a0:2b:60:65:1a:31:
44:2c:52:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:40 2026 by rpki-client