Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
File: ydDpI0zGchlXpKwhPqxnU-2F7qc.mft (raw, json)
Hash identifier: AJ+yYrW0M0AcxYgV1kS5OqEEYAbl9p18R/RKsN0An4I=
Subject key identifier: BE:4C:20:E1:13:60:54:3B:CE:0B:F8:B0:DB:04:93:E2:1C:92:C4:9C
Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
Certificate issuer: /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Certificate serial: 019D29612A4E6347B1953B9D01D786F23857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
Manifest number: 07C7
Signing time: Thu 26 Mar 2026 09:02:06 +0000
Manifest this update: Thu 26 Mar 2026 09:02:06 +0000
Manifest next update: Fri 27 Mar 2026 09:02:06 +0000
Files and hashes: 1: Uv99MiDXyajOsQnEMoZEqygjiOM.roa (hash: J2J3fpMUvkwfwUFZMZrnnhWhczlVO0JpNc+f56+XNoM=)
2: tKZtiob_Nq3JG5qKeeGyKdGDt2o.roa (hash: orNqkM35VJUEOJvGQtjnDxsBymM4EnHV3TJiqbLgHGU=)
3: ydDpI0zGchlXpKwhPqxnU-2F7qc.crl (hash: wjMaH8oHaFwvQnly9Hifx3ACBadQDxqScvg1F1c1sy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:2a:4e:63:47:b1:95:3b:9d:01:d7:86:f2:38:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Validity
Not Before: Mar 26 09:02:06 2026 GMT
Not After : Mar 27 09:02:06 2026 GMT
Subject: CN=be4c20e11360543bce0bf8b0db0493e21c92c49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a0:86:f8:2d:78:1c:82:8d:a4:91:e3:6d:d9:
13:41:9c:a7:a3:76:f5:fe:12:b1:ff:ec:fe:e9:61:
17:39:e4:e4:85:50:91:d5:84:4a:99:6e:84:81:40:
d8:90:f7:79:db:7a:74:18:e6:37:0b:91:85:74:20:
64:8a:53:ba:a3:f0:55:f6:65:2c:5f:73:d9:45:2a:
59:32:b9:a4:c6:20:9a:55:9f:51:c4:70:d8:6a:f5:
18:80:0a:22:79:e0:48:82:b6:44:11:6a:3f:a9:c8:
aa:db:12:78:c3:19:b1:5f:f4:0d:42:be:7e:fe:a9:
63:61:f2:0c:3f:81:fc:b2:67:a9:5a:e5:bd:c1:8f:
39:71:62:37:0e:8a:57:ca:08:92:88:3e:d4:e6:5d:
f9:7a:70:91:16:10:62:4d:83:88:08:51:a9:a3:cb:
e6:d4:de:67:94:52:03:08:a1:68:dd:54:63:91:ab:
6a:7c:5f:f5:3e:c6:1a:35:93:7f:0c:77:24:cd:39:
b5:99:a7:f8:fd:01:29:7e:f9:ec:23:ef:33:6b:20:
7f:82:2a:3d:a9:86:d0:4b:2c:22:3e:cb:02:63:62:
f8:01:ce:58:8c:b4:ef:aa:2d:37:9b:25:65:2a:94:
06:72:2c:40:a7:1c:85:d2:cb:f5:a3:a4:8c:26:7d:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4C:20:E1:13:60:54:3B:CE:0B:F8:B0:DB:04:93:E2:1C:92:C4:9C
X509v3 Authority Key Identifier:
keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:61:74:6f:44:a3:1f:09:c1:ef:99:71:67:bc:c1:30:9f:f3:
21:2b:29:fc:3d:3a:1a:ed:e8:4a:6c:f1:0c:0d:e9:56:4f:53:
23:bf:63:8d:01:6f:44:ac:5b:80:a2:7b:ee:56:4b:8c:b7:3f:
3e:9b:14:9b:57:6a:a4:51:2b:b0:fa:27:f4:d2:8a:5b:c9:b3:
28:18:6d:97:d8:3a:d1:44:71:44:c8:88:53:32:0c:b5:68:6f:
f4:36:f4:b2:56:39:03:1f:e2:75:93:8b:76:94:78:67:77:0a:
08:19:a0:17:ed:17:fb:c0:a3:71:5b:c3:a8:95:15:86:8a:93:
d9:b0:3e:06:71:32:0b:4c:1e:8c:1b:75:c0:f6:b2:25:32:84:
92:0e:a2:cb:7c:9b:a2:7b:a4:c2:99:2d:9a:73:a9:34:ea:e7:
47:c9:96:cc:75:8f:5a:fa:7f:81:44:08:7f:00:20:c2:2b:e0:
bc:e9:92:a0:b2:b0:5e:f3:61:c1:32:3b:4a:25:0d:f5:a1:43:
de:c0:3f:17:55:c3:96:f5:ca:0c:85:e3:04:86:87:df:81:14:
0f:09:32:f7:6f:7b:5c:2e:2f:0a:52:0e:23:4c:e9:8e:67:80:
33:b6:ae:62:f3:a4:77:fd:93:6c:bd:31:bc:a9:65:3c:7c:98:
0f:a4:7d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:30:19 2026 by rpki-client