Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier: u5ysvKAd4koisvUKGlNmYxqkoyOcEqfLR4QbEt6YHag=
Subject key identifier: 29:BA:EB:56:79:BC:EA:61:4E:8B:90:45:78:E1:C7:ED:7F:63:64:9E
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 019E20C8E1270DD89310D59FC8AAE9AEDA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number: 0829
Signing time: Wed 13 May 2026 10:01:36 +0000
Manifest this update: Wed 13 May 2026 10:01:36 +0000
Manifest next update: Thu 14 May 2026 10:01:36 +0000
Files and hashes: 1: 7ddZ6AuTaKTVHMzwtcM1Koce3jI.roa (hash: xG5K9PIIy6VwRa0eYfMip6RI0P+1GY89uLI9ih9L+Uo=)
2: d3-5CKAZ7Mk-2t_tjSmFOfnjMzk.roa (hash: vwsp8oVhgfqNXWForlLjiHqAE45N0F3rkdkhErDxiHo=)
3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: 0K/9YxQlO+LQelunmuPFAPjou/y+aZTcL335CKgq9nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:e1:27:0d:d8:93:10:d5:9f:c8:aa:e9:ae:da:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: May 13 10:01:36 2026 GMT
Not After : May 14 10:01:36 2026 GMT
Subject: CN=29baeb5679bcea614e8b904578e1c7ed7f63649e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1d:46:b6:e2:77:e1:c6:d6:52:94:c0:a9:88:
86:d0:74:cd:68:cb:9b:e0:7b:82:36:07:16:71:21:
91:87:6a:1c:ea:ee:4d:f5:f6:79:07:fa:bb:86:12:
fc:e4:25:49:cd:ee:ae:fb:be:d0:ca:55:c1:e7:6c:
7f:50:b3:a1:4c:63:06:07:28:ec:01:24:de:cd:4a:
a3:82:41:f7:f2:a1:46:ef:86:09:79:21:27:e9:be:
88:7f:a2:cf:74:3b:98:d7:95:3e:ca:5f:98:85:f2:
77:8f:30:db:70:7b:e4:03:a1:b2:18:eb:35:01:30:
30:09:a1:74:d4:7d:3d:fe:f0:ae:a5:e2:48:bd:f7:
31:6e:93:e1:a3:ad:c0:ab:9d:88:94:4d:fc:3f:9e:
e1:f9:d8:6a:40:83:be:fd:cf:50:e2:1e:a1:9d:2f:
a1:b8:a3:c2:3e:c0:fa:8a:7c:5f:cf:7c:0d:2a:06:
cf:5e:bf:97:39:96:4b:51:9d:49:12:b3:3c:d0:70:
72:9f:33:4b:23:2a:00:11:ac:9c:2c:e8:0c:b1:fd:
17:e6:86:cf:50:a7:87:c1:45:f3:5c:d5:f0:a0:40:
10:86:60:6a:35:9e:88:41:f5:5e:a0:32:11:fc:2d:
bc:88:b7:26:26:7d:40:ad:4e:38:75:f0:9c:fe:02:
32:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BA:EB:56:79:BC:EA:61:4E:8B:90:45:78:E1:C7:ED:7F:63:64:9E
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fb:bd:02:d5:56:53:fc:db:00:70:1b:6c:20:97:ed:9f:fb:
06:89:e3:7c:d4:df:a9:67:dc:4b:51:20:0d:64:36:ee:b1:eb:
37:37:7d:a5:92:0a:44:bc:8a:12:02:a8:a2:d5:15:91:d8:9f:
ee:60:e8:13:58:58:83:1a:14:03:f6:ce:24:64:7e:b9:16:71:
d9:e6:df:45:a6:c5:9f:93:6e:24:32:7a:99:4b:bd:86:66:ed:
73:99:8f:df:69:6b:0b:71:d2:cb:17:f6:52:73:d1:84:c8:57:
9c:9a:d1:07:e7:79:db:b3:4b:c2:64:67:87:fd:fc:49:b5:13:
c4:a5:13:76:4a:67:c1:57:21:1b:32:57:f0:46:69:ca:6a:96:
c9:92:1e:de:47:40:d7:29:5d:7b:19:1c:69:68:39:19:e9:55:
ac:e2:58:cc:1f:3a:a0:ca:b0:de:3a:68:cb:99:a4:3a:15:60:
13:bc:4e:59:20:0b:77:6f:27:a9:81:a7:bd:48:ea:55:93:78:
e4:0d:de:45:c2:b7:66:fd:0f:f8:1a:36:41:10:3c:6b:bf:fe:
64:01:c3:c7:ce:65:f4:79:3b:9b:3e:23:2d:14:b9:fd:e4:fe:
5d:70:11:dd:ab:96:4e:bc:d6:a3:65:e1:aa:03:c7:8f:ff:3d:
a3:3c:a4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:21:29 2026 by rpki-client