Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
File: ydWxKeBvlSRoXnABAoQfctaRXDM.mft (raw, json)
Hash identifier: BLMJLyraaTJhw4i+cfsBmo+93d53e/DIf3UvXELaCbE=
Subject key identifier: 6E:76:17:E0:98:A3:69:21:96:67:61:04:24:9F:B1:D1:4B:B3:4C:C7
Authority key identifier: C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
Certificate issuer: /CN=c9d5b129e06f9524685e700102841f72d6915c33
Certificate serial: 01A0DB72442A1C9735E664A292CC8EA872BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
Manifest number: 0855
Signing time: Sat 26 Sep 2026 02:01:33 +0000
Manifest this update: Sat 26 Sep 2026 02:01:33 +0000
Manifest next update: Sun 27 Sep 2026 02:01:33 +0000
Files and hashes: 1: BNMGtjTTYKe2pymUlI-2By8WAuY.roa (hash: RrYXesXXO0Vl2bktuDwSHZFyLC3J01YK9f8as6ZBpiA=)
2: ydWxKeBvlSRoXnABAoQfctaRXDM.crl (hash: VhRHekvOmZmuiRoJcDZgw8fSiuxyQvTmMQsSi7tajEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:44:2a:1c:97:35:e6:64:a2:92:cc:8e:a8:72:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d5b129e06f9524685e700102841f72d6915c33
Validity
Not Before: Sep 26 02:01:33 2026 GMT
Not After : Sep 27 02:01:33 2026 GMT
Subject: CN=6e7617e098a3692196676104249fb1d14bb34cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ce:db:4a:77:87:d1:93:4d:34:ad:48:4f:e2:
d9:d9:18:b1:67:68:35:38:fd:1d:6a:84:15:a1:39:
13:b0:56:90:3e:b2:2e:98:8b:37:2d:ea:91:bd:a6:
65:d4:85:a8:34:4a:70:46:59:29:50:c4:b4:c9:44:
dc:52:73:3f:72:bb:2f:f2:c3:b3:76:37:3b:4e:d8:
8e:15:7d:00:a2:98:27:c5:8b:4f:fc:38:d3:57:4d:
5f:1c:8d:fe:df:ad:0e:70:f9:e7:b4:a2:bf:92:7e:
31:1b:ca:d0:98:c5:d3:04:26:fd:0b:fa:45:9c:32:
fd:b8:00:f5:b5:b6:ed:20:24:41:08:dd:16:c6:6e:
0f:f0:08:94:75:e1:d0:f2:8c:75:7e:68:11:c0:6b:
ff:61:12:64:4a:c3:35:81:d9:c0:da:53:d8:72:7a:
c1:70:5b:76:6f:9b:14:16:4a:54:cc:cd:81:01:61:
88:73:d1:ea:d5:e8:4c:e4:25:29:7a:06:31:22:56:
ab:35:72:7b:4e:0a:8e:0c:49:15:e6:5e:a1:bf:56:
a7:37:b0:fa:79:61:9e:77:b0:3d:6e:5e:44:c2:f6:
79:7e:6e:1c:a5:ed:98:d1:07:2a:ab:37:e3:82:d4:
7f:bc:3e:21:6c:74:44:c4:b6:18:53:27:82:87:8d:
be:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:76:17:E0:98:A3:69:21:96:67:61:04:24:9F:B1:D1:4B:B3:4C:C7
X509v3 Authority Key Identifier:
keyid:C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d7:45:88:1e:20:37:4d:21:29:66:59:2a:fa:c9:3b:f8:b7:
25:43:7f:78:91:9c:ff:5f:8e:e6:e7:98:d5:15:e6:d2:fc:c9:
04:69:14:78:1b:df:4a:ae:d2:4b:32:dd:49:e5:10:33:b7:73:
b7:67:e3:b4:0e:1e:26:be:f2:2e:e3:78:a8:cb:95:29:d0:10:
68:f5:3e:1a:dc:16:53:e4:2d:a2:2d:0d:b3:c2:29:06:cb:aa:
6e:09:c3:e1:d6:19:6a:68:3c:90:0c:2a:96:5a:06:1e:38:00:
60:be:bc:bf:11:0c:43:82:0a:bf:c2:6b:db:87:a3:fe:8b:a6:
fd:39:a4:29:5e:fe:6a:ed:30:67:96:c7:04:1f:1c:1c:0f:ac:
45:f2:fa:9e:c8:e4:8c:9e:08:3d:31:d0:f7:01:2a:d8:67:77:
38:8c:8c:0c:a0:17:35:b0:b5:b3:7e:b5:45:d3:6b:3d:de:c4:
98:42:bf:62:5f:54:c8:96:aa:4d:52:14:0f:01:6c:da:57:81:
d6:ed:7b:12:5f:41:19:83:fe:4b:66:d4:8f:93:e4:c1:b9:f8:
d2:78:8c:ef:9e:1c:ae:44:ef:1e:da:5e:1e:e3:79:f8:8c:7e:
a5:aa:d6:f2:eb:90:b3:b5:e5:e6:77:c6:66:1a:3a:66:26:84:
82:9a:63:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:05:37 2026 by rpki-client