Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
File: ydDpI0zGchlXpKwhPqxnU-2F7qc.mft (raw, json)
Hash identifier: dGjr+XyHhq0eaB5s5QlmpGvOtmHJnUMhf96K8CEiXIs=
Subject key identifier: 67:5A:EC:9D:19:A1:AD:D9:8C:22:1B:02:17:B2:5E:19:A5:2D:42:CF
Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
Certificate issuer: /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Certificate serial: 019DB08E9C5FB9FBF9C169AC1A4C55F0690E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
Manifest number: 080D
Signing time: Tue 21 Apr 2026 15:00:29 +0000
Manifest this update: Tue 21 Apr 2026 15:00:29 +0000
Manifest next update: Wed 22 Apr 2026 15:00:29 +0000
Files and hashes: 1: Uv99MiDXyajOsQnEMoZEqygjiOM.roa (hash: J2J3fpMUvkwfwUFZMZrnnhWhczlVO0JpNc+f56+XNoM=)
2: tKZtiob_Nq3JG5qKeeGyKdGDt2o.roa (hash: orNqkM35VJUEOJvGQtjnDxsBymM4EnHV3TJiqbLgHGU=)
3: ydDpI0zGchlXpKwhPqxnU-2F7qc.crl (hash: gxD84c6T99/YZoEl0ABqTuE17IEygHzG4SnSJ4ra5yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:8e:9c:5f:b9:fb:f9:c1:69:ac:1a:4c:55:f0:69:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Validity
Not Before: Apr 21 15:00:29 2026 GMT
Not After : Apr 22 15:00:29 2026 GMT
Subject: CN=675aec9d19a1add98c221b0217b25e19a52d42cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:95:01:cd:3e:98:be:7f:53:52:6a:16:91:7b:
0c:5c:65:df:c0:02:45:ff:03:93:35:5d:62:6b:91:
3d:dc:ac:a5:b5:12:7b:f5:46:f5:e3:e1:c4:07:9d:
10:ae:cd:f8:73:2f:cf:dd:de:c5:b6:a1:a2:0b:14:
93:f7:36:58:75:ea:ff:bb:ae:1a:f1:7d:80:df:f7:
72:75:81:4d:67:a7:c5:30:0c:fd:84:8e:88:38:7d:
f8:26:2b:12:36:71:94:cb:2e:c1:25:53:27:06:02:
b4:21:3a:bf:b9:99:21:de:b8:1d:c1:3e:f4:78:66:
c9:bb:62:d7:27:b6:41:80:ab:e4:b6:3a:bd:bb:78:
89:10:cb:13:94:f5:36:9c:6d:00:f0:31:87:c7:d1:
aa:24:b3:29:2d:0a:a5:06:2d:fd:e9:2b:8b:e7:2b:
5c:ff:d1:c0:39:44:9b:3f:3c:96:c1:e5:ac:41:87:
1f:a0:d1:d1:9c:6d:dd:c0:b3:ea:e9:2a:9a:66:18:
c2:87:7a:f9:9f:ac:2f:42:44:89:38:c5:9b:10:7c:
5d:58:6f:5c:c2:fd:d8:64:da:10:05:61:cc:89:46:
6d:c1:08:a8:b1:4c:2c:f5:1c:bc:9b:03:c9:bc:f3:
d8:79:02:0c:59:c4:51:e0:13:e0:6f:5c:5d:3b:3e:
1e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5A:EC:9D:19:A1:AD:D9:8C:22:1B:02:17:B2:5E:19:A5:2D:42:CF
X509v3 Authority Key Identifier:
keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c1:5c:70:07:df:b1:fa:26:91:34:ea:59:fa:87:97:b5:66:
8c:8a:c2:3f:82:ef:2e:ef:fb:2a:95:05:61:5d:c3:87:ec:e3:
ef:2a:b2:19:3e:7a:1f:27:16:58:bf:0f:79:49:fc:69:ee:75:
62:65:49:9b:50:7f:5c:68:eb:3b:c3:9a:6c:e7:f4:7b:92:52:
01:96:96:8b:65:e7:ba:66:45:ce:58:0b:3d:1a:c9:ff:f0:bf:
c0:07:5b:02:4d:37:f6:42:e4:94:48:2f:d1:61:94:ab:4b:84:
7d:f3:d3:4b:8a:b0:51:b6:95:ea:e8:73:7d:88:18:5d:d6:92:
3d:18:02:01:6d:90:3b:26:3a:65:aa:de:a6:29:e1:c1:65:45:
79:b2:e4:d1:cd:51:8e:74:12:55:70:c1:53:a6:58:3b:2b:07:
63:cc:e5:63:52:9c:ec:57:20:f7:42:85:f8:f3:16:4f:76:39:
1c:72:62:08:83:66:5e:5a:c0:fe:5b:61:ed:62:1e:35:b8:ff:
21:c9:cb:47:ee:2b:d9:1a:6d:ef:11:c7:c3:60:f9:b7:f1:00:
ab:0f:4a:b2:e0:37:ab:1a:75:20:e1:19:8e:62:cf:71:be:d5:
a8:c5:51:18:b3:b0:ba:c5:69:e3:f8:ad:cd:20:1a:b5:87:f4:
de:60:ec:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:10:21 2026 by rpki-client