Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier: R+oRAC0t1PIfgDLIamvB3hHDDBN/V3gvlyug+IASOns=
Subject key identifier: B1:40:C0:5F:AB:FB:43:C6:2B:5F:24:48:56:E1:82:22:CD:7A:03:C3
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 019D29973C83A9D8259DFAFA586684B97886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number: 07A9
Signing time: Thu 26 Mar 2026 10:01:10 +0000
Manifest this update: Thu 26 Mar 2026 10:01:10 +0000
Manifest next update: Fri 27 Mar 2026 10:01:10 +0000
Files and hashes: 1: 7ddZ6AuTaKTVHMzwtcM1Koce3jI.roa (hash: xG5K9PIIy6VwRa0eYfMip6RI0P+1GY89uLI9ih9L+Uo=)
2: d3-5CKAZ7Mk-2t_tjSmFOfnjMzk.roa (hash: vwsp8oVhgfqNXWForlLjiHqAE45N0F3rkdkhErDxiHo=)
3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: uTillIF/MTrIdG148C7Ask1KDNZXdivCUDSG2eoNYYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:3c:83:a9:d8:25:9d:fa:fa:58:66:84:b9:78:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: Mar 26 10:01:10 2026 GMT
Not After : Mar 27 10:01:10 2026 GMT
Subject: CN=b140c05fabfb43c62b5f244856e18222cd7a03c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9e:3e:67:7a:6c:c4:a7:1d:7e:2a:88:cf:b1:
f8:53:45:f6:b6:0c:0a:dd:c3:b5:b1:6e:7f:7b:da:
01:6c:bc:09:a3:1e:de:12:76:70:78:df:e9:b2:60:
f1:af:bd:f4:6a:5f:42:11:78:96:6b:59:a1:88:c8:
f3:b5:b9:e5:d4:a4:44:3c:0e:c7:a3:a9:49:1b:48:
4c:76:6f:cb:41:c7:fd:b4:19:57:3f:f9:a4:24:2c:
31:29:4a:74:7e:b9:4d:84:28:17:61:7a:ac:88:3d:
c9:15:db:4d:84:82:22:d1:ce:c8:87:79:d0:d8:5e:
9b:57:2b:46:4e:14:e9:32:e8:90:8c:56:b7:75:be:
3c:3b:d7:ae:4a:24:b7:0e:06:f0:6f:27:ea:f8:54:
ca:f1:75:cf:95:78:2a:6f:c9:16:73:1c:b0:ea:98:
82:07:96:3d:00:16:2f:e6:12:8f:90:a8:af:e1:2b:
d4:ee:5e:d8:fb:57:b0:27:50:7c:9b:6c:23:8b:52:
59:00:06:a5:43:9f:cb:9f:02:27:c0:f2:61:4a:ce:
67:67:30:05:42:5b:5e:10:41:32:a4:14:64:bb:cd:
1b:63:a5:f1:2b:a2:4b:8f:26:57:56:c9:a4:c1:6a:
95:26:ee:8f:97:fa:d8:c1:52:64:36:56:66:08:a7:
f3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:40:C0:5F:AB:FB:43:C6:2B:5F:24:48:56:E1:82:22:CD:7A:03:C3
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b3:08:3d:bd:ea:cb:a0:d9:fd:3e:45:4a:25:b8:f5:87:e4:
9f:29:3c:40:f5:f6:00:72:52:3e:92:23:fc:66:48:46:76:5c:
86:c8:27:89:70:da:8f:85:74:1e:e4:3f:33:bd:96:09:4a:af:
4c:a9:cd:be:78:42:67:70:ff:cf:f6:8d:db:c8:a8:d2:31:2e:
65:a9:dd:4e:9e:18:a6:fe:27:11:b0:99:28:3e:da:e7:53:26:
5f:62:33:db:34:e2:d7:8b:5b:fc:e3:69:fd:08:7a:0a:a6:17:
d1:d2:f9:8a:87:96:88:39:5e:d5:ef:1a:60:1e:ea:78:5e:d3:
a9:53:b4:70:52:3e:4a:ea:cb:71:23:87:74:83:b2:ca:59:7c:
a9:f4:38:0a:b5:98:3a:78:c3:7f:e4:bf:f9:4e:01:ac:84:ab:
fa:29:39:cf:b5:34:9c:52:ec:ae:96:ec:8d:85:71:62:8a:f9:
2f:80:ad:bc:d6:97:35:2a:6f:f5:4c:f6:47:b2:e9:c1:b8:a9:
8b:af:23:a2:f0:08:28:3c:f1:26:f3:6d:36:08:ff:c5:e6:cb:
0f:ed:10:d9:24:7a:75:40:90:53:1c:c0:1b:8e:90:2f:d9:8a:
cd:dd:fc:df:84:a2:51:29:86:22:60:ac:d0:36:02:f4:cb:1b:
ac:e1:e9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:57:30 2026 by rpki-client