Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
File: ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json)
Hash identifier: 4MplBcqAuGkdbuDe2mBPq3WfAR16MmRVJ0WI0CarBkI=
Subject key identifier: D2:BA:A2:67:69:F6:02:8D:AF:8A:2D:BA:0C:8E:92:78:E1:97:48:B6
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 019D093082B09520D1ABB8D46DE49395EF82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
Manifest number: 0A88
Signing time: Fri 20 Mar 2026 03:01:06 +0000
Manifest this update: Fri 20 Mar 2026 03:01:06 +0000
Manifest next update: Sat 21 Mar 2026 03:01:06 +0000
Files and hashes: 1: 0vGrMxojgcPt9P0KUJob_C_cA4U.roa (hash: fVAae7Y5Zz2XdpZ74Up9h49RGw16VEUvuuQIWLhSejw=)
2: KbmQvdtw005bLkDFKvnTpXFlk4g.roa (hash: dXlkajMu1mbeHv48NSi0zEYpzy7e58YEKKA2joNBYBw=)
3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: 5mP55XGxkZLEAtZk14qcx9hLnvGOGlFYoqAMC3JS/cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:09:30:82:b0:95:20:d1:ab:b8:d4:6d:e4:93:95:ef:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: Mar 20 03:01:06 2026 GMT
Not After : Mar 21 03:01:06 2026 GMT
Subject: CN=d2baa26769f6028daf8a2dba0c8e9278e19748b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7b:45:bd:11:d4:7a:07:eb:9a:76:97:12:87:
34:38:5c:ee:d7:62:f5:b7:56:a0:79:8b:31:33:65:
15:d9:54:f3:24:fb:eb:27:f3:26:99:c3:70:49:8b:
26:88:60:3b:61:8d:9f:b9:55:47:2a:bb:06:55:2a:
7e:b8:cb:11:b8:2d:55:c2:ce:f8:4b:17:fa:cd:dc:
1e:cb:9b:1d:a2:b1:6c:39:7b:1f:30:4b:d4:40:63:
5a:82:fc:f4:55:ac:34:a2:44:b9:9a:64:c5:54:43:
86:82:1f:11:e3:e9:95:5f:2f:b8:db:51:24:8b:c8:
ba:05:99:85:08:7b:81:03:9c:e6:0d:f1:14:cc:35:
e7:1d:0f:77:3e:e5:ce:e9:6c:b7:e1:98:64:1d:16:
ed:96:01:ac:9b:a8:1e:d9:a7:e8:b8:e5:71:a1:d7:
8f:0f:37:5e:dd:10:67:06:af:c5:18:bc:fa:13:e6:
7d:67:2e:2e:ff:1e:7a:74:c8:7a:ea:f2:e2:ee:6c:
56:d0:ed:20:f3:d2:05:36:95:ca:80:ae:0a:f2:5f:
c4:a0:47:2b:0e:dc:e3:fd:82:c3:78:8f:4e:e8:d1:
1b:8e:95:a6:e4:e2:d2:6b:df:31:4c:d9:12:e9:18:
1a:42:dc:27:15:e8:b7:30:fa:88:9a:55:a8:4e:09:
c6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BA:A2:67:69:F6:02:8D:AF:8A:2D:BA:0C:8E:92:78:E1:97:48:B6
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e3:0c:09:fc:c6:af:3d:77:48:3f:82:8b:66:73:cb:1a:47:
cf:db:6a:56:72:1a:fb:f3:ba:46:00:3d:7d:10:15:d1:5b:48:
8f:e4:d8:bb:cd:9b:0a:d1:47:b2:f4:17:b3:22:b9:5a:1d:68:
4c:36:d6:d5:04:21:6b:26:5b:39:2e:82:b9:9e:d0:6c:35:17:
dd:07:dc:0c:23:16:88:6e:27:11:48:8f:e9:14:72:d6:1a:78:
6f:07:bc:91:b5:c6:6f:1f:2d:8d:d4:d0:99:e1:63:36:0f:02:
23:3b:d2:df:a3:6c:1b:60:b4:f9:63:0e:0e:a6:dc:de:3c:40:
c5:d0:ac:10:24:67:29:ab:c5:48:d9:49:42:2d:60:a5:f6:ab:
f8:69:77:0c:66:54:bd:eb:a4:84:ce:12:bc:12:23:30:43:e5:
41:64:85:17:63:0d:1f:a3:ad:b3:cd:ab:f2:4d:c3:b3:83:b5:
40:4c:92:1e:40:4c:44:f9:36:4f:c5:92:fa:96:37:35:af:a5:
8b:e0:c9:10:14:f4:c0:c3:89:48:87:12:18:dd:22:07:61:64:
e9:a3:ce:8d:a0:2e:5c:5d:8f:50:92:8c:7f:58:dc:e2:50:c3:
e8:58:73:2f:60:4d:c9:78:27:30:16:91:28:93:1b:3c:17:33:
93:0e:c5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 12:24:22 2026 by rpki-client