Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
File: yd_q7KItLSYYtDPPAKsUS9i4Db0.mft (raw, json)
Hash identifier: xD8m5dDh9+WVOQ0jv6DpJUOI+xMr7woRVrxBIUWpdEQ=
Subject key identifier: 33:43:C1:9A:A5:13:D1:47:DA:13:27:8B:D4:BB:67:47:B2:B6:26:99
Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Certificate issuer: /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Certificate serial: 01A177A7F75E1AFFB48A346E3625B59BCFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
Manifest number: 0BF6
Signing time: Mon 26 Oct 2026 10:00:58 +0000
Manifest this update: Mon 26 Oct 2026 10:00:58 +0000
Manifest next update: Tue 27 Oct 2026 10:00:58 +0000
Files and hashes: 1: 820vIRF1IvHmMeX3TIHoslLaymk.roa (hash: nxsc5hiaKPfRF3Jfau9U9QFL2zAQ/W9nSHpc/OJ2IbA=)
2: yd_q7KItLSYYtDPPAKsUS9i4Db0.crl (hash: VQJbOhyyUxY1U4+jaLHtA+fVpVhL1+tSVH/4QfL6B3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a7:f7:5e:1a:ff:b4:8a:34:6e:36:25:b5:9b:cf:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Validity
Not Before: Oct 26 10:00:58 2026 GMT
Not After : Oct 27 10:00:58 2026 GMT
Subject: CN=3343c19aa513d147da13278bd4bb6747b2b62699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:46:cf:e3:3c:a8:87:22:d3:b4:ac:e5:da:
e7:3c:b9:54:58:7d:20:b7:c1:7a:a9:21:3b:1e:61:
1b:62:a8:c8:74:fb:37:fb:4d:dc:89:8e:e3:08:de:
6b:84:37:f8:0f:57:e9:63:0b:c6:98:e2:4f:1f:50:
3e:92:74:a9:53:dd:0a:70:02:78:04:57:61:df:3d:
d9:3c:21:6a:05:1d:72:8f:0e:e5:2c:70:6a:27:d8:
4a:97:28:59:a1:b6:77:af:10:d6:0d:cd:93:3e:a1:
97:15:96:20:e1:4c:d6:ab:b7:df:5f:f2:d0:68:2f:
5c:a3:40:59:6e:87:3a:03:02:e4:cd:f4:d2:08:f9:
43:a8:01:22:69:52:32:45:82:bf:ce:14:98:98:14:
8a:51:c0:11:66:26:bc:e8:30:60:11:70:9e:dd:80:
45:af:d0:c4:d1:a1:01:87:3b:38:a7:bc:c7:12:c6:
d0:09:b1:69:e6:75:7b:84:e3:3c:2f:44:18:a1:99:
0c:85:a6:7f:f3:d1:1a:95:de:98:b5:7f:93:09:41:
6d:18:59:9a:e5:b6:f5:4f:35:08:8d:e7:95:a7:ee:
6d:36:e9:1c:3f:5b:a9:5a:b1:77:f3:75:8d:66:12:
8e:6f:c3:b7:d7:01:10:40:52:90:cf:da:c0:38:08:
7f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:43:C1:9A:A5:13:D1:47:DA:13:27:8B:D4:BB:67:47:B2:B6:26:99
X509v3 Authority Key Identifier:
keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ab:03:f6:ff:58:30:a4:e4:ca:61:cc:67:d0:a4:ab:9f:8b:
5d:59:0d:42:24:94:02:40:13:57:e6:89:f5:7d:a2:47:26:9d:
87:a1:51:50:fb:c7:7d:db:68:03:4a:ec:36:f7:c4:8f:e8:94:
ac:15:53:5b:84:5c:e9:dc:f4:7a:42:36:5c:7f:fd:bf:9d:80:
b1:eb:6a:69:ed:e9:78:f4:38:1f:2f:0b:03:d0:36:bd:7f:dc:
af:e0:e7:fa:2e:02:30:70:41:63:f8:55:f7:ab:6e:4f:93:1d:
e0:7a:81:eb:71:c1:16:42:56:ec:0d:fb:25:1b:38:20:ba:2a:
48:5c:72:bb:aa:49:a3:b9:bd:38:2e:1b:68:e3:d1:cc:dd:84:
cd:9b:1f:fc:cb:a3:df:75:cf:ab:bc:7b:f0:97:63:22:78:ac:
7e:c7:ab:cb:06:40:73:4d:fc:b4:cc:b9:a0:b9:db:02:21:3b:
79:4b:b2:98:e7:d8:44:05:3c:01:e9:91:7c:3a:79:d4:e7:4d:
a2:11:10:c0:c2:13:c4:60:30:9f:96:9f:11:31:f1:a7:75:05:
13:fc:36:57:bb:19:f2:47:6d:ce:ee:ef:6f:cc:c9:d8:0c:f9:
b4:e6:59:7a:8e:67:97:a8:b6:fe:34:bd:1a:7b:08:1b:cd:a1:
94:6a:96:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:15:23 2026 by rpki-client