Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
File: dYeQLOemozSk4Ntz5yGYkBXWSJs.mft (raw, json)
Hash identifier: a0SQRUyXbU0cu0mG+NZhpkSX51iASFvfhR40hUdC7JY=
Subject key identifier: 61:40:EC:F7:25:53:FB:1E:55:E6:A3:DB:94:D5:C8:E3:0C:08:DF:66
Authority key identifier: 75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
Certificate issuer: /CN=7587902ce7a6a334a4e0db73e721989015d6489b
Certificate serial: 01A17A3AC78FC4084195A0902A4BD87B6840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
Manifest number: 1939
Signing time: Mon 26 Oct 2026 22:00:34 +0000
Manifest this update: Mon 26 Oct 2026 22:00:34 +0000
Manifest next update: Tue 27 Oct 2026 22:00:34 +0000
Files and hashes: 1: bVi4keCowD2fh_vLEGiCaZ_PG2E.roa (hash: PcIs7Ni9PquaFgRIU/Xw9DwjNZAbOaylXmPNW0BTawQ=)
2: dYeQLOemozSk4Ntz5yGYkBXWSJs.crl (hash: A8M0LRbS6kNnfBlw48IDm+XNFy8waNO02WssqA53uvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:c7:8f:c4:08:41:95:a0:90:2a:4b:d8:7b:68:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7587902ce7a6a334a4e0db73e721989015d6489b
Validity
Not Before: Oct 26 22:00:34 2026 GMT
Not After : Oct 27 22:00:34 2026 GMT
Subject: CN=6140ecf72553fb1e55e6a3db94d5c8e30c08df66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3c:55:47:43:8d:13:4e:9f:7f:1e:9c:f9:7b:
4d:dc:a8:86:cb:2a:b8:7b:ec:a5:a5:d9:02:5a:aa:
a7:da:10:18:b3:55:61:2d:95:ab:92:67:0c:df:bb:
57:49:ae:3a:be:e9:d7:b8:77:1a:90:93:ce:1b:5a:
77:a6:a8:d9:56:14:39:53:c0:86:2f:ce:27:e3:26:
5a:89:80:75:a3:cc:e3:5d:19:9e:d2:6f:fb:24:16:
fc:24:6f:ab:ce:86:a6:6e:54:57:31:39:78:17:c1:
0d:52:c9:2d:2a:a3:75:40:8b:22:23:87:83:1c:33:
cd:27:54:70:22:bd:64:82:8d:58:ec:43:53:0f:6a:
7c:ec:3f:b1:33:aa:0a:01:63:bc:c0:00:be:73:20:
1c:83:61:c7:0a:95:bd:66:24:49:25:8c:b4:f8:77:
dd:64:21:ef:67:fe:ae:4c:16:3c:06:8f:e3:4e:2b:
8a:55:0c:19:18:52:9e:83:df:36:7f:3f:1c:a1:3a:
94:9e:79:c9:47:88:9e:86:88:90:19:38:4d:7f:b3:
7f:dc:81:b4:75:30:da:b6:66:30:b5:a6:9f:2f:cb:
dc:ec:ed:38:0d:cf:38:fb:23:8d:39:1f:15:41:c9:
b5:15:b9:6b:1a:64:dd:a4:b1:c3:b4:8d:d9:eb:32:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:40:EC:F7:25:53:FB:1E:55:E6:A3:DB:94:D5:C8:E3:0C:08:DF:66
X509v3 Authority Key Identifier:
keyid:75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a5:e0:0b:7b:0a:6b:48:73:f8:5d:2f:d3:1d:9f:f0:56:03:
26:bd:36:51:8c:34:f0:2b:27:99:98:cb:ee:b1:c7:63:3e:ca:
93:e3:7c:da:ca:16:02:45:18:df:e8:91:49:43:2f:84:11:f7:
c3:80:65:af:d5:a8:b5:d9:ea:f6:bd:59:44:85:b9:4f:9f:b5:
2f:8b:56:e7:55:9c:5e:9e:d7:27:2f:df:b2:0a:05:35:ce:85:
19:92:3b:52:d4:ac:d3:9c:00:77:a1:c7:75:30:11:8d:8c:ba:
a9:a9:31:5d:b4:2f:1a:7e:b7:31:9b:7e:bd:40:93:38:8f:0a:
6c:21:7c:2c:87:9d:ea:b1:87:17:f3:58:8e:68:d0:a1:8c:68:
76:a9:3f:64:bd:98:d3:68:18:f6:92:2a:cb:de:cb:02:e4:5e:
aa:d1:d7:3e:78:9a:56:6d:47:45:2f:55:af:8d:f1:11:f8:8e:
e1:28:b8:0e:ff:c7:67:ac:c5:9a:58:ec:ac:ef:11:8f:fa:74:
b7:97:0d:06:08:4c:99:7d:c4:63:21:1d:4e:c8:fa:17:3d:e2:
00:a2:a2:cf:4f:bf:74:1e:2b:04:d3:e6:40:7d:f9:aa:60:c8:
d0:d0:ec:4b:07:16:3a:cc:1b:37:fa:c4:63:50:a8:24:46:c6:
c6:45:05:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:16:05 2026 by rpki-client