Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
File: ydWxKeBvlSRoXnABAoQfctaRXDM.mft (raw, json)
Hash identifier: 9ivpO4YLLpcWl7xskfSDFGEE/R7ZPfGpIwzqpcTu/QM=
Subject key identifier: 6A:D4:78:3B:CE:D7:7E:CA:FC:26:20:1C:17:53:C8:A5:09:06:94:82
Authority key identifier: C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
Certificate issuer: /CN=c9d5b129e06f9524685e700102841f72d6915c33
Certificate serial: 019FAA5066EF107D65E9C514917CB8DF7E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
Manifest number: 07B7
Signing time: Tue 28 Jul 2026 20:00:23 +0000
Manifest this update: Tue 28 Jul 2026 20:00:23 +0000
Manifest next update: Wed 29 Jul 2026 20:00:23 +0000
Files and hashes: 1: BNMGtjTTYKe2pymUlI-2By8WAuY.roa (hash: RrYXesXXO0Vl2bktuDwSHZFyLC3J01YK9f8as6ZBpiA=)
2: ydWxKeBvlSRoXnABAoQfctaRXDM.crl (hash: f493l2jauX7rz8vqgmhze2oNgoIvML5PZTVOsjYK/LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:66:ef:10:7d:65:e9:c5:14:91:7c:b8:df:7e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d5b129e06f9524685e700102841f72d6915c33
Validity
Not Before: Jul 28 20:00:23 2026 GMT
Not After : Jul 29 20:00:23 2026 GMT
Subject: CN=6ad4783bced77ecafc26201c1753c8a509069482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:9a:f6:75:e6:0f:bb:ad:65:c1:3f:05:e1:
b1:f8:46:8f:7d:45:c5:01:c8:ac:cc:e0:51:af:d6:
2b:54:be:d9:e6:a5:9c:f4:4f:02:1d:19:1c:eb:db:
90:c9:7b:e7:f7:03:23:e6:db:08:61:3d:e6:1e:a4:
ae:db:99:05:03:a5:d6:9f:fc:5a:21:65:0c:fe:ec:
d7:82:d0:a1:0c:24:54:c9:f2:6c:cc:d6:93:56:e7:
03:f5:47:07:f0:a3:ef:78:50:bc:35:5f:c9:19:e0:
08:48:c1:e1:fd:4c:da:a9:56:d3:45:58:52:73:50:
96:0d:c1:d5:98:0e:0a:3a:c7:52:37:77:88:58:3a:
da:80:f8:a1:97:b8:a1:54:93:11:29:83:4c:90:b0:
1d:db:68:6e:74:85:bd:a8:e5:11:6d:71:d1:a0:85:
e5:be:d8:36:14:d1:42:c4:cc:fb:35:4a:8c:6a:20:
2e:ca:46:02:37:8a:6e:9f:fa:2c:93:d8:1f:58:09:
5e:ab:fe:bb:a3:93:85:79:96:52:74:e7:56:54:6d:
e1:4b:4b:1a:42:b7:0f:b3:a5:90:23:8d:e4:4a:fe:
e9:b0:57:98:10:46:a5:3a:19:40:6d:1d:64:e3:42:
96:39:ee:b0:2a:ce:6c:7a:cf:c5:b5:62:54:97:9b:
75:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D4:78:3B:CE:D7:7E:CA:FC:26:20:1C:17:53:C8:A5:09:06:94:82
X509v3 Authority Key Identifier:
keyid:C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a6:ed:b3:8d:08:c3:3c:80:8e:70:d3:36:9b:fb:c7:67:c5:
98:b3:3f:f2:6b:24:08:c8:29:ab:10:6f:0e:85:e6:2a:0a:13:
d1:ed:22:ef:d7:14:a1:b6:9a:57:ec:3e:e6:4d:2c:98:2a:2c:
f9:33:5b:d9:43:8d:1c:fc:92:16:24:3f:b4:d3:1c:f9:aa:a5:
68:68:55:e4:55:ed:47:52:9a:9d:c1:3a:1e:7e:21:a1:de:ce:
dd:ce:2e:fe:34:45:81:03:4d:00:7e:de:eb:c5:b0:6d:e7:b1:
77:4b:60:38:fb:41:26:2e:72:f2:2b:55:cd:de:99:f2:9d:a6:
e7:a9:5f:6e:71:38:36:15:db:ba:31:37:1d:0d:b4:a6:e5:47:
85:cc:d3:f7:39:09:a7:0e:db:89:fe:27:64:81:c3:9a:2d:23:
88:29:f7:ba:77:e1:72:4b:0b:d8:d6:57:dc:c4:3b:b3:4a:da:
89:40:02:a3:1e:a4:4c:17:3f:95:33:c1:df:9a:67:06:86:fb:
88:7b:bc:db:6c:da:98:6d:b7:bb:ff:42:4b:d9:ff:38:2a:46:
dc:90:d4:95:0b:a6:5f:b3:07:0d:48:d8:cf:cf:34:ab:81:70:
f4:bc:c0:68:99:41:23:00:b3:45:13:3d:a0:b7:54:59:6b:54:
5e:b4:99:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:13:04 2026 by rpki-client