Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
File: yRdwDdwOcosHKtQaPR6LaoCqdRA.mft (raw, json)
Hash identifier: guEu0SUHXkDKw0vH2D9k2/NSvKf71lKGILcZIoZ4eIg=
Subject key identifier: 19:45:AC:0C:BB:2B:06:F7:89:DB:AD:81:84:2C:07:02:E9:F2:DB:9A
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 019D2816DD4D1083BA148E2EEBE734369C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 03:01:20 +0000
Manifest this update: Thu 26 Mar 2026 03:01:20 +0000
Manifest next update: Fri 27 Mar 2026 03:01:20 +0000
Files and hashes: 1: wbZC2ywn3MopqOZcK5wfTzngXuU.roa (hash: BKsSPZZN6H035QOhv5kmcLN6+1r7D6TcSZ6TgnVBHpE=)
2: yRdwDdwOcosHKtQaPR6LaoCqdRA.crl (hash: ab0nOZFtqcEdt/7WDkcMOscbYHzfmlv7H7JAww/miRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:dd:4d:10:83:ba:14:8e:2e:eb:e7:34:36:9c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: Mar 26 03:01:20 2026 GMT
Not After : Mar 27 03:01:20 2026 GMT
Subject: CN=1945ac0cbb2b06f789dbad81842c0702e9f2db9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:50:7c:42:10:6e:26:8f:7d:24:ce:e7:09:e6:
f2:2a:de:57:c8:19:af:39:00:c5:b4:f0:a7:dd:cb:
3c:79:a4:ba:78:e9:18:0c:f9:08:08:c7:7f:80:e0:
7e:83:2e:a1:d2:06:15:d5:25:3e:2e:7f:8e:c9:aa:
a9:70:3f:f3:a7:2d:13:65:9e:bb:13:39:8e:0a:52:
2a:19:bb:bc:d9:67:3e:f8:43:77:d5:0f:c6:e3:06:
de:95:e0:dd:2a:23:85:73:d0:d6:38:9c:be:60:ba:
e4:d2:43:0f:e5:0f:cd:4f:1d:54:7f:ce:1d:4a:f5:
c3:75:de:f0:0f:35:18:94:6e:dd:a1:19:8b:5c:59:
40:f5:34:4a:4c:45:42:92:86:14:66:aa:51:b0:52:
ae:b3:89:00:7f:5a:b8:94:9a:ec:20:ac:55:a9:8b:
0d:f7:94:9b:f4:dd:98:c2:07:a1:3e:d0:17:aa:07:
47:f7:45:cb:0f:2b:e3:eb:04:b5:e3:4c:76:4d:4a:
e6:71:77:9b:25:95:6b:58:fa:17:cf:d5:f7:97:df:
4a:5a:42:30:d5:1c:a9:a9:2a:49:0b:70:fc:95:f6:
19:21:93:fb:fd:4f:29:64:48:10:79:19:48:75:69:
b5:9d:7a:b4:48:b0:4a:47:7a:3c:02:ad:fc:63:09:
b3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:45:AC:0C:BB:2B:06:F7:89:DB:AD:81:84:2C:07:02:E9:F2:DB:9A
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:49:59:c8:f0:2b:0f:4e:f9:37:7c:3e:93:e8:8b:7e:d7:16:
fa:c4:51:26:20:6e:f0:12:f1:01:5f:b8:d3:59:c6:31:9f:0e:
b0:86:b1:2c:8c:62:6c:ae:9f:77:a9:7e:0c:f8:e0:59:3a:f4:
46:a2:48:9f:a7:2b:ee:27:2b:13:78:b3:2e:26:f9:87:d4:ac:
5b:78:87:ae:c5:44:0a:2c:8b:fa:0d:00:95:66:3a:c1:5f:52:
20:20:19:77:b1:3f:f4:ef:e5:0b:aa:ee:eb:90:35:e6:38:12:
ca:b5:5c:ed:61:54:57:92:58:f7:58:31:64:52:db:5d:74:c5:
11:9f:7d:59:13:3c:3b:64:65:c7:23:f1:dd:24:aa:5f:50:f7:
a1:a4:41:76:7e:9e:37:8d:bc:65:e8:39:38:ab:1a:64:48:dd:
6d:15:e4:1b:7d:2a:39:a4:2e:4b:b9:8d:7b:f9:e8:9c:37:76:
c2:0b:02:80:fa:4b:c8:9c:4b:75:6d:9f:bf:2f:be:c5:a1:0f:
15:7d:28:53:5b:4a:8a:55:56:d1:71:6a:cd:18:04:d3:83:e9:
19:fc:cc:b3:75:c0:a4:1b:a9:91:ba:15:6d:79:5d:be:90:51:
a4:ba:c6:57:01:4d:df:1f:47:0d:4e:fc:16:3d:96:8d:5f:d4:
af:cf:c7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:38:58 2026 by rpki-client