Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
File: yDOgOJWSdW5BXN40irvCQxKwLfY.mft (raw, json)
Hash identifier: 7Bqozmrgd0VFMI+MAFF2/GSi7aDxcemzz06XQtghVE8=
Subject key identifier: 86:37:7D:1F:D4:97:0C:43:30:9F:EF:FE:54:B1:EE:95:1F:D7:96:52
Authority key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
Certificate issuer: /CN=c833a0389592756e415cde348abbc24312b02df6
Certificate serial: 019CAA21A61F5E8F4CCB4862FEF13F528F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 16:00:57 +0000
Manifest this update: Sun 01 Mar 2026 16:00:57 +0000
Manifest next update: Mon 02 Mar 2026 16:00:57 +0000
Files and hashes: 1: 3TtBL0qA5kisjEdyIAiW0RrkR5Y.roa (hash: IIwZ4eNX/TnLbTOdzNJ7spbedu7ExR/vuLghC48r7Rc=)
2: yDOgOJWSdW5BXN40irvCQxKwLfY.crl (hash: TJJrdgjGtRgOMJdqLkPiQ6t7XsfjCCnRjdppXJNY+1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:a6:1f:5e:8f:4c:cb:48:62:fe:f1:3f:52:8f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c833a0389592756e415cde348abbc24312b02df6
Validity
Not Before: Mar 1 16:00:57 2026 GMT
Not After : Mar 2 16:00:57 2026 GMT
Subject: CN=86377d1fd4970c43309feffe54b1ee951fd79652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:61:7f:a9:54:fc:bb:ba:b8:a3:63:2d:83:70:
20:54:1e:5f:c0:88:bc:52:b4:56:9a:11:e9:22:41:
83:73:4a:11:c0:f7:72:34:86:f8:0c:84:19:20:18:
50:09:ec:aa:ba:5d:cd:8f:38:3e:42:87:40:3e:94:
47:43:33:b4:3a:bd:8e:99:d4:85:5a:3e:c5:dd:d0:
78:0d:27:9a:cf:5e:0f:e9:4d:75:9b:73:a1:02:d6:
90:9a:1c:bd:4b:82:ec:25:98:b2:1a:80:76:9e:6f:
dd:28:65:d3:56:49:37:cd:f2:f1:9c:01:1e:9c:f0:
2f:4d:ec:10:eb:8e:a1:55:d0:33:66:37:c7:6b:e8:
f1:29:9c:67:50:45:27:0c:39:29:d1:1c:b8:65:49:
bf:28:7e:81:10:68:0f:f6:51:0c:d5:f9:23:bd:f4:
e3:37:02:37:4a:d4:b8:67:21:91:66:3a:f2:46:89:
6b:1f:f7:c3:99:83:c9:c2:0a:bd:e1:3c:e4:9f:9a:
d6:c5:2a:c6:ee:73:22:8f:9e:46:58:cc:aa:57:e6:
fe:1d:e0:7d:bb:09:39:fb:cc:6b:1b:5f:f4:5e:51:
87:a8:57:13:20:b6:7a:2b:9f:c7:a4:4c:04:70:78:
04:5f:26:ac:1e:87:4d:97:d1:3d:ae:5a:af:5b:ea:
c0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:37:7D:1F:D4:97:0C:43:30:9F:EF:FE:54:B1:EE:95:1F:D7:96:52
X509v3 Authority Key Identifier:
keyid:C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:f8:24:5a:04:8e:f1:96:7c:f0:3b:26:ff:21:3e:23:03:6b:
84:d7:7f:e3:9b:45:03:05:4c:e4:fc:7b:ee:09:51:95:3a:7b:
98:b6:ec:42:1b:aa:3b:6c:17:4f:d8:11:31:3f:e3:ce:20:4e:
ca:c8:10:9e:30:28:2c:47:4a:1b:5c:83:90:7d:7f:4a:e4:03:
6e:18:6c:61:17:60:4b:7b:e6:fd:aa:c4:7b:b8:28:d5:51:23:
88:65:3e:80:07:d9:b3:2e:5a:e6:93:42:48:25:1c:6f:30:ef:
85:de:91:d5:62:17:f9:e5:d0:95:6b:f1:2d:aa:40:bf:83:8f:
bd:a6:6e:3b:9b:2e:54:1d:36:53:3a:35:df:6d:aa:e7:d9:01:
a1:58:f0:af:a8:de:e0:6f:4a:3e:8c:e3:aa:d4:e0:92:68:17:
bc:82:e0:c0:fc:bb:20:06:66:4d:0c:a1:3a:b6:b2:82:bb:35:
77:d6:2f:54:20:7a:1b:f3:eb:01:e1:5d:b3:0f:eb:10:40:07:
b4:df:8d:f9:b6:dd:ed:fc:dd:30:f3:87:de:93:46:b0:ba:22:
ab:36:7f:7b:67:23:0d:d6:3c:05:bd:dd:65:61:d9:06:b9:b0:
44:d8:3a:4b:bf:c9:1c:32:2b:8c:ed:60:41:ff:77:15:54:6a:
7e:0c:4e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:57 2026 by rpki-client