Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier: ozNzNGzD1cugWzQ1+w4CeFW7q1j03uygFJpccvgeyAQ=
Subject key identifier: 9D:52:4B:BB:46:EF:C8:CE:0F:16:FD:D6:25:AC:3E:52:CB:6C:51:F9
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 019D67634B25EA8BDA47DFCD3FF822B1F794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number: 07C9
Signing time: Tue 07 Apr 2026 10:00:53 +0000
Manifest this update: Tue 07 Apr 2026 10:00:53 +0000
Manifest next update: Wed 08 Apr 2026 10:00:53 +0000
Files and hashes: 1: 7ddZ6AuTaKTVHMzwtcM1Koce3jI.roa (hash: xG5K9PIIy6VwRa0eYfMip6RI0P+1GY89uLI9ih9L+Uo=)
2: d3-5CKAZ7Mk-2t_tjSmFOfnjMzk.roa (hash: vwsp8oVhgfqNXWForlLjiHqAE45N0F3rkdkhErDxiHo=)
3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: pmLxZSW+l3QIruRRjRZRYEAnZHWC3srQrjx333l3Q9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:63:4b:25:ea:8b:da:47:df:cd:3f:f8:22:b1:f7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: Apr 7 10:00:53 2026 GMT
Not After : Apr 8 10:00:53 2026 GMT
Subject: CN=9d524bbb46efc8ce0f16fdd625ac3e52cb6c51f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b6:d9:2f:d2:50:62:b3:84:ee:df:98:f8:3b:
9d:dd:65:41:cb:f7:2d:6a:df:de:94:f8:fe:ad:f3:
46:36:66:12:2c:43:36:f7:05:36:bb:25:2b:38:00:
96:9e:5a:4d:52:64:a7:d7:69:63:49:7a:8f:22:74:
46:a4:cd:00:03:90:74:01:c1:f8:d6:5f:34:6b:16:
5d:aa:30:f8:88:56:3c:1e:0e:c7:bf:4e:59:e9:3f:
cc:5e:c1:b2:c8:6d:b0:88:c2:65:0c:28:c8:1a:64:
af:02:52:5f:4a:83:9d:ea:2b:c8:74:c9:17:36:d0:
e7:29:64:26:c3:89:48:47:32:b9:da:22:74:5d:aa:
38:4a:a7:ef:95:0c:66:d6:4f:00:f4:38:fc:de:2e:
ff:94:f5:50:44:14:07:50:cf:5a:82:61:0e:3c:e4:
e8:43:85:14:f2:44:93:8d:c9:e5:76:98:71:78:88:
31:70:6f:3f:34:02:af:99:35:1e:5e:46:e5:c5:0b:
dd:39:1d:59:c6:59:32:b1:de:04:5d:b1:76:9f:25:
9b:a9:76:40:71:3c:07:67:61:a2:4f:a6:35:7a:fe:
43:4c:0d:bd:73:0f:79:9d:38:2b:37:c5:d9:b6:54:
23:76:ce:69:ba:b4:42:8e:8d:a4:d4:3e:39:9c:b6:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:52:4B:BB:46:EF:C8:CE:0F:16:FD:D6:25:AC:3E:52:CB:6C:51:F9
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1c:07:83:dc:b9:a0:21:ee:19:48:63:60:c6:c5:0f:10:23:
29:d8:38:7f:96:48:a1:5c:b4:34:95:b8:e9:a5:37:a8:4b:f0:
f4:b8:88:c8:bb:f9:bb:2f:fc:09:11:f0:23:aa:61:d3:94:e5:
8a:5a:d3:ab:b7:cf:9b:6b:44:de:43:7d:ea:11:cc:be:3a:f8:
94:5c:60:d4:73:5c:c3:a0:62:a3:50:00:24:77:87:1a:6d:42:
23:20:37:e8:04:e6:6a:a3:c3:3d:ee:75:a8:dc:94:8e:2d:cf:
83:86:f0:a7:0c:2e:7a:dc:8b:da:09:e6:64:39:0d:9b:57:8d:
96:d0:57:98:d9:b2:3d:50:01:47:40:d3:54:76:0e:61:73:77:
30:69:4f:61:eb:9c:2e:a9:50:87:5e:11:22:ed:7a:92:fb:96:
3f:9a:8b:15:1b:f8:98:ad:7e:5a:0a:7f:34:47:0a:49:de:4d:
74:d9:82:26:0f:f3:39:e7:b4:97:99:a6:21:26:59:6a:da:88:
9f:ed:28:8a:49:c6:f0:d8:55:38:59:69:a9:75:5d:fc:8e:52:
c4:c8:bb:69:ec:66:96:23:e2:96:6b:b5:34:f4:f4:ec:58:53:
6a:b5:18:f1:96:02:6c:92:bc:9b:bf:1d:3a:be:b1:e7:f3:6b:
74:7f:5f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:32:32 2026 by rpki-client