Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier: AsDza9IUs6syFpfx7MRYi75IobOHlRuPSQ1aJQHxMiw=
Subject key identifier: A8:6C:AE:72:7C:8C:4B:3E:71:13:8D:46:78:AE:BC:50:9F:CF:05:2E
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 019C7DB6876DF0CEB1B95D8DEBA49E973C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number: 0750
Signing time: Sat 21 Feb 2026 01:00:39 +0000
Manifest this update: Sat 21 Feb 2026 01:00:39 +0000
Manifest next update: Sun 22 Feb 2026 01:00:39 +0000
Files and hashes: 1: 7ddZ6AuTaKTVHMzwtcM1Koce3jI.roa (hash: xG5K9PIIy6VwRa0eYfMip6RI0P+1GY89uLI9ih9L+Uo=)
2: d3-5CKAZ7Mk-2t_tjSmFOfnjMzk.roa (hash: vwsp8oVhgfqNXWForlLjiHqAE45N0F3rkdkhErDxiHo=)
3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: 3cf9A/LerlflFNDPjEk/7PPZr93KL4M6wvTtMX8rhX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7d:b6:87:6d:f0:ce:b1:b9:5d:8d:eb:a4:9e:97:3c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: Feb 21 01:00:39 2026 GMT
Not After : Feb 22 01:00:39 2026 GMT
Subject: CN=a86cae727c8c4b3e71138d4678aebc509fcf052e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f2:88:e7:08:52:10:0a:e3:96:d2:c0:2d:ba:
a4:77:94:cd:f0:58:4c:df:13:3a:74:33:1d:15:70:
16:9c:6a:2c:60:85:22:88:3f:47:bf:ab:6f:88:5d:
eb:98:9b:61:a8:cc:7d:0d:59:42:28:7a:e5:19:13:
ba:5e:38:97:b1:51:2f:16:28:cd:d8:22:20:93:71:
6c:86:ee:a6:4c:91:65:68:ac:12:38:d2:bf:2c:05:
68:fe:e8:d1:3d:c5:93:f2:59:14:2b:b8:a0:db:26:
e6:47:75:30:94:29:e1:0d:bf:f0:3f:f5:25:df:05:
2c:20:72:13:b6:25:5a:3a:ff:57:14:61:ad:7b:05:
f7:cc:25:51:69:4d:ed:00:bc:0f:98:f3:18:82:cf:
45:e4:8c:62:ca:9d:0f:92:bf:97:57:c8:49:aa:27:
11:82:71:9c:b1:12:20:a6:ae:7c:71:9f:07:bf:2c:
f2:33:0d:ac:3e:6a:e3:90:4f:87:26:2f:cb:a6:04:
66:d9:dc:f1:fc:04:0f:31:75:6a:12:17:a7:30:fd:
84:03:97:67:67:3f:d6:50:4e:37:1b:96:1c:6b:a6:
06:10:5f:d3:07:22:3e:17:33:67:b0:af:74:5c:10:
2d:ec:0b:cf:3d:7e:4f:23:ba:55:a5:80:09:a2:c4:
d0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6C:AE:72:7C:8C:4B:3E:71:13:8D:46:78:AE:BC:50:9F:CF:05:2E
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d1:c0:f5:01:e6:34:a5:a3:0a:66:6e:4e:b3:b2:1c:b0:29:
38:b4:7a:3d:bc:72:54:a7:87:c4:93:ad:5d:2b:16:fc:aa:eb:
1b:51:89:ca:7c:90:24:d2:ad:c5:9a:64:95:d8:57:60:11:f7:
29:b2:3f:a2:a8:ba:d5:2f:45:8b:90:ba:7b:ba:fe:39:0a:f0:
27:61:d6:1c:ed:b6:72:d2:f1:28:e5:87:4b:da:8d:74:2c:4d:
d5:e8:01:a0:ea:34:77:c1:6b:0c:d4:ba:2c:4a:6c:ab:1e:2f:
bb:72:00:2e:74:87:c0:e2:7b:e8:df:e9:e8:27:d1:91:4c:dc:
29:47:9d:51:07:63:99:f0:b3:91:83:31:d1:5e:f6:cd:ea:bf:
93:ad:dd:25:9d:9f:45:54:4a:9f:4b:e4:69:a5:be:83:4d:39:
94:75:83:ed:a3:27:54:65:c7:a3:e8:ef:74:e8:7a:81:18:51:
a1:23:46:6c:d8:ea:06:72:3a:f9:98:cf:a7:51:e7:90:64:46:
8c:a9:d1:8a:b1:59:34:44:fa:71:d1:25:36:04:b1:7a:55:5b:
f0:0f:8e:78:fb:1b:e4:4d:59:a3:5a:0d:ad:fa:d0:cd:4b:10:
09:24:2b:ce:43:6a:93:bf:d2:2a:9a:e9:27:0b:d0:8d:69:08:
a4:95:a5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 06:08:52 2026 by rpki-client