Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
File: ydDpI0zGchlXpKwhPqxnU-2F7qc.mft (raw, json)
Hash identifier: 9u/NXFtUKumRpVEhFftvYBToZEWPK5lmDexHVI0Uzlg=
Subject key identifier: B1:53:80:6D:70:FD:D3:77:C0:82:A3:4B:8F:17:5A:9E:30:1F:3B:F6
Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
Certificate issuer: /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Certificate serial: 019E209212A6B03333595FE5577A46490345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
Manifest number: 0847
Signing time: Wed 13 May 2026 09:01:44 +0000
Manifest this update: Wed 13 May 2026 09:01:44 +0000
Manifest next update: Thu 14 May 2026 09:01:44 +0000
Files and hashes: 1: Uv99MiDXyajOsQnEMoZEqygjiOM.roa (hash: J2J3fpMUvkwfwUFZMZrnnhWhczlVO0JpNc+f56+XNoM=)
2: tKZtiob_Nq3JG5qKeeGyKdGDt2o.roa (hash: orNqkM35VJUEOJvGQtjnDxsBymM4EnHV3TJiqbLgHGU=)
3: ydDpI0zGchlXpKwhPqxnU-2F7qc.crl (hash: 8Of70tqsvxcjsB+HUKtcceHUQrAugK/Gm5aJOhONeFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:12:a6:b0:33:33:59:5f:e5:57:7a:46:49:03:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Validity
Not Before: May 13 09:01:44 2026 GMT
Not After : May 14 09:01:44 2026 GMT
Subject: CN=b153806d70fdd377c082a34b8f175a9e301f3bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:90:9e:3d:d9:70:5a:7a:e7:27:d7:62:8d:
11:bb:b0:46:d3:dc:cf:33:c3:e5:34:11:5e:7b:a0:
47:92:af:b4:ee:85:f2:49:aa:e5:ae:d3:b5:56:8f:
d4:35:3a:71:54:62:44:ab:6a:1c:e0:e9:1c:f4:d8:
19:b7:d6:c5:04:1e:38:8d:93:4e:e7:03:54:07:ef:
90:c6:9b:05:3d:de:6b:3a:a3:5d:34:65:b9:6c:5e:
de:af:0d:de:c8:80:59:54:b6:63:97:88:25:91:7e:
aa:12:a4:b3:1f:61:15:80:89:89:c8:11:5a:2d:08:
36:7b:5f:b9:3f:e4:3c:cb:f2:45:b2:88:78:54:7a:
a4:7f:08:d6:3f:c0:ca:ac:dc:fb:64:48:22:18:6d:
58:31:1f:ce:e1:08:72:b0:1e:bc:88:a9:5e:0c:40:
3b:83:d2:df:b5:ea:8b:00:c9:c3:d0:fb:94:db:13:
7e:e9:29:e1:86:86:fd:64:7c:bf:51:5a:6a:88:91:
76:55:2f:16:e1:29:43:b4:a5:3e:5a:28:7b:23:29:
01:f3:e2:9b:12:5a:34:ef:97:c8:de:8a:79:fb:7d:
82:ed:17:47:47:4b:c7:5e:c4:69:d1:15:8e:7c:a0:
3a:bc:ce:73:40:93:8b:cd:1e:02:7f:76:47:b1:09:
57:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:53:80:6D:70:FD:D3:77:C0:82:A3:4B:8F:17:5A:9E:30:1F:3B:F6
X509v3 Authority Key Identifier:
keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:65:1f:c2:74:47:46:58:aa:77:c6:84:89:11:7d:64:16:af:
7b:cb:2d:f5:f6:42:24:18:f9:54:ea:a4:94:09:7e:bf:aa:68:
93:c1:64:a4:b6:5b:fd:4e:4e:6f:37:64:30:a2:e6:9f:cd:b8:
83:f6:9e:99:1a:7c:bb:20:6d:34:de:c4:28:e2:ab:43:c0:7b:
c8:b4:04:7d:33:97:4d:9e:94:5f:6e:5d:b0:e6:00:ee:ba:f3:
ff:39:da:f7:69:48:a6:48:6f:b8:f9:50:0d:24:41:6a:a4:ad:
6c:a0:d8:c2:e1:21:57:84:da:ab:20:19:ab:92:e8:c8:b4:b6:
42:ec:df:4e:e5:db:08:bd:ff:18:68:6a:1b:03:8a:dd:dc:ad:
43:fe:d4:5b:00:e3:c3:e7:a7:47:55:95:16:f4:ae:15:16:c1:
95:d6:49:68:8d:ca:4c:46:34:82:a0:73:5b:45:2d:62:3e:3a:
ee:10:59:06:e1:85:7f:c7:a0:8f:18:3c:e5:4a:0d:10:7a:04:
82:24:79:28:25:ab:28:b9:3d:c2:a1:2f:6e:7c:69:1c:a9:7e:
6a:d0:a0:89:e5:8e:6b:81:35:0c:c9:48:c8:a6:b2:5c:51:2c:
35:81:16:2d:0a:5a:18:e7:a9:a8:39:2e:91:e5:98:7c:3f:64:
f0:82:cf:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkhKmsDMzWV/lV3pGSQNFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDBlOTIzNGNjNjcyMTk1N2E0YWMyMTNlYWM2NzUzZWQ4
NWVlYTcwHhcNMjYwNTEzMDkwMTQ0WhcNMjYwNTE0MDkwMTQ0WjAzMTEwLwYDVQQD
EyhiMTUzODA2ZDcwZmRkMzc3YzA4MmEzNGI4ZjE3NWE5ZTMwMWYzYmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsSQnj3ZcFp65yfXYo0Ru7BG09zP
M8PlNBFee6BHkq+07oXySarlrtO1Vo/UNTpxVGJEq2oc4Okc9NgZt9bFBB44jZNO
5wNUB++QxpsFPd5rOqNdNGW5bF7erw3eyIBZVLZjl4glkX6qEqSzH2EVgImJyBFa
LQg2e1+5P+Q8y/JFsoh4VHqkfwjWP8DKrNz7ZEgiGG1YMR/O4QhysB68iKleDEA7
g9LfteqLAMnD0PuU2xN+6Snhhob9ZHy/UVpqiJF2VS8W4SlDtKU+Wih7IykB8+Kb
Elo075fI3op5+32C7RdHR0vHXsRp0RWOfKA6vM5zQJOLzR4Cf3ZHsQlXVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFTgG1w/dN3wIKjS48XWp4wHzv2MB8GA1UdIwQY
MBaAFMnQ6SNMxnIZV6SsIT6sZ1Pthe6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWREcEkwekdjaGxYcEt3aFBxeG5VLTJGN3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83YzAyNzQtNzRjNi00NDIzLTlhODgt
OWEzMDBiMGE3ZWQyLzEveWREcEkwekdjaGxYcEt3aFBxeG5VLTJGN3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83YzAyNzQtNzRjNi00NDIzLTlhODgtOWEzMDBiMGE3ZWQy
LzEveWREcEkwekdjaGxYcEt3aFBxeG5VLTJGN3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2UfwnRH
Rliqd8aEiRF9ZBave8st9fZCJBj5VOqklAl+v6pok8FkpLZb/U5ObzdkMKLmn824
g/aemRp8uyBtNN7EKOKrQ8B7yLQEfTOXTZ6UX25dsOYA7rrz/zna92lIpkhvuPlQ
DSRBaqStbKDYwuEhV4TaqyAZq5LoyLS2QuzfTuXbCL3/GGhqGwOK3dytQ/7UWwDj
w+enR1WVFvSuFRbBldZJaI3KTEY0gqBzW0UtYj467hBZBuGFf8egjxg85UoNEHoE
giR5KCWrKLk9wqEvbnxpHKl+atCgieWOa4E1DMlIyKayXFEsNYEWLQpaGOepqDku
keWYfD9k8ILPHA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:30:48 2026 by rpki-client