Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
File: ydWxKeBvlSRoXnABAoQfctaRXDM.mft (raw, json)
Hash identifier: npytjcz+3zLe7bBHXOXqqOvAx3sWSWL1i+ADh34Cz9g=
Subject key identifier: 84:70:3C:B3:4A:E9:F1:87:70:65:B0:29:DC:09:17:17:4A:D9:AC:DE
Authority key identifier: C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
Certificate issuer: /CN=c9d5b129e06f9524685e700102841f72d6915c33
Certificate serial: 019FE62F5321E2AA68781DF19FF72C8A6596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
Manifest number: 07D6
Signing time: Sun 09 Aug 2026 11:01:28 +0000
Manifest this update: Sun 09 Aug 2026 11:01:28 +0000
Manifest next update: Mon 10 Aug 2026 11:01:28 +0000
Files and hashes: 1: BNMGtjTTYKe2pymUlI-2By8WAuY.roa (hash: RrYXesXXO0Vl2bktuDwSHZFyLC3J01YK9f8as6ZBpiA=)
2: ydWxKeBvlSRoXnABAoQfctaRXDM.crl (hash: T9pb0CpRLsKE7RRKEjmbSxBtPY1awmQew9j5fGJuvsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Aug 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e6:2f:53:21:e2:aa:68:78:1d:f1:9f:f7:2c:8a:65:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d5b129e06f9524685e700102841f72d6915c33
Validity
Not Before: Aug 9 11:01:28 2026 GMT
Not After : Aug 10 11:01:28 2026 GMT
Subject: CN=84703cb34ae9f1877065b029dc0917174ad9acde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:9b:4b:22:d6:03:5c:c1:5e:73:1d:93:95:
6e:21:d2:92:5c:4c:8c:94:1f:ea:e1:f6:19:8e:f0:
09:83:3c:0a:85:1e:7c:b1:0f:81:4b:73:20:13:b2:
f6:91:f4:b8:f7:96:5b:5e:9a:bd:78:3d:8b:24:44:
e8:96:7d:c1:54:c5:d0:b3:0b:ec:9b:9b:0a:0a:e9:
30:2b:dd:2c:b6:c3:d8:c7:63:5e:e5:3f:75:9a:26:
89:c3:f3:3a:94:9f:f1:95:96:23:4f:62:a6:f9:ac:
a8:7d:ce:17:8d:d6:74:77:c4:16:c7:dc:23:b8:b9:
cf:c8:a1:19:a9:53:d2:9b:cc:e2:64:45:aa:7c:f5:
00:62:1e:2d:0b:b4:21:65:80:5e:9d:e8:e4:6c:f8:
9e:54:9d:4d:07:68:8e:84:06:5c:a3:7e:3d:e6:19:
d3:a9:24:81:10:f1:2d:5e:5e:49:2a:92:ab:5f:9f:
48:21:84:77:ff:bd:f7:17:c1:72:94:70:82:03:37:
49:89:ba:f9:3b:e2:f7:46:63:b2:8f:c7:cb:0f:a0:
b8:09:fc:8f:b4:81:3f:63:b9:51:b3:3b:ff:eb:db:
c9:8e:5e:b0:1a:14:04:69:96:50:15:5e:50:a4:67:
0e:42:7d:fc:be:52:eb:7b:73:40:8c:0b:69:31:d5:
8e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:70:3C:B3:4A:E9:F1:87:70:65:B0:29:DC:09:17:17:4A:D9:AC:DE
X509v3 Authority Key Identifier:
keyid:C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b3:92:3c:a2:c4:c0:7d:70:90:1a:52:99:bc:58:34:29:f0:
4f:5d:ca:85:8d:46:d2:d7:73:1a:59:15:bd:cb:0a:be:5b:81:
a5:97:ee:e2:d4:d2:82:b4:00:4c:4e:89:b8:c8:06:b2:4c:02:
b1:14:d6:7d:b6:05:88:08:9b:22:ff:ad:c5:8e:b7:93:04:61:
26:08:12:1e:0a:09:6b:ed:14:5b:b8:10:95:c5:b2:e0:08:91:
de:ab:34:fa:c8:35:ff:98:7b:9d:87:85:5f:65:da:6f:1c:2b:
ca:a9:af:5c:63:40:14:8d:77:90:a8:bc:ff:64:a5:2b:b8:52:
ec:1d:73:b0:55:a2:09:b6:6b:51:e7:64:0f:35:25:88:a5:7c:
36:f2:dc:95:3b:06:79:a9:6c:1f:29:fa:54:d8:e7:b5:3a:06:
ec:7c:5f:7e:c4:99:fd:49:ab:2e:44:dd:7d:77:e2:73:fd:1c:
dd:3b:90:aa:28:81:16:86:cd:d5:98:1c:c2:68:c2:83:e4:d5:
00:56:1f:38:0b:1d:4b:b9:b0:de:1c:3d:8b:20:f2:3c:da:95:
ca:fb:9d:cb:4f:04:11:57:bd:60:32:48:46:8e:b0:90:ba:33:
80:6f:6d:bc:a0:99:cf:b3:2d:f2:94:98:f6:58:3b:4c:1a:b3:
27:e3:66:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 17:44:10 2026 by rpki-client