Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
File: yDOgOJWSdW5BXN40irvCQxKwLfY.mft (raw, json)
Hash identifier: grnIyfzo0+PKpRDB40R7PL8VuyfHi0KrqED5vuZxtaM=
Subject key identifier: 9E:9B:89:C8:A5:3B:A7:9E:71:4E:BE:A6:76:E2:85:75:6C:D8:87:57
Authority key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
Certificate issuer: /CN=c833a0389592756e415cde348abbc24312b02df6
Certificate serial: 01A1291F767CBE7525E7B98BF22BEDC5EAFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 04:01:30 +0000
Manifest this update: Sun 11 Oct 2026 04:01:30 +0000
Manifest next update: Mon 12 Oct 2026 04:01:30 +0000
Files and hashes: 1: 3TtBL0qA5kisjEdyIAiW0RrkR5Y.roa (hash: IIwZ4eNX/TnLbTOdzNJ7spbedu7ExR/vuLghC48r7Rc=)
2: yDOgOJWSdW5BXN40irvCQxKwLfY.crl (hash: AC5P/jfHwyD/hy4n3eDk6v9acBUI5v6SPaNzks7q99Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1f:76:7c:be:75:25:e7:b9:8b:f2:2b:ed:c5:ea:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c833a0389592756e415cde348abbc24312b02df6
Validity
Not Before: Oct 11 04:01:30 2026 GMT
Not After : Oct 12 04:01:30 2026 GMT
Subject: CN=9e9b89c8a53ba79e714ebea676e285756cd88757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:ec:33:d1:3c:e6:ae:48:03:01:e6:c9:12:
cd:80:c2:91:e4:f2:44:2b:03:b0:05:b5:10:46:a7:
a4:5d:ed:06:ce:80:64:0e:0f:25:b9:a9:2f:7b:be:
9c:ba:ab:2f:e6:1d:32:e1:6d:6b:60:dc:d8:04:8d:
e7:ef:e8:16:aa:02:ea:f9:c4:f3:78:72:8b:f8:8d:
7d:2e:c8:53:63:f5:5f:95:c1:3a:c5:3c:ec:1b:9a:
59:fe:84:5c:64:f2:59:45:14:9b:4f:3e:7d:95:11:
bb:16:d2:e6:5c:9c:b5:a7:58:82:f7:3e:bf:ed:e2:
a2:3c:b2:d7:00:cf:6b:df:57:bc:b7:bf:bc:fb:a8:
57:1e:7c:75:f5:39:40:76:17:d2:c5:75:50:16:a5:
ac:43:93:b7:7e:b1:a2:18:fd:8b:fa:f4:10:42:03:
92:8c:2c:00:00:c2:68:25:40:4d:6c:23:8c:21:30:
d7:d0:b9:32:b3:e8:2a:48:4b:9a:e1:92:42:a8:42:
91:88:a8:3c:6a:1c:0c:66:52:dd:03:cd:7b:33:24:
d8:2b:14:db:04:39:99:4e:38:4a:50:d5:18:cc:97:
32:c7:61:39:aa:ab:08:2f:9d:50:99:83:4b:c1:c6:
55:fa:c7:3c:14:2e:3c:39:f7:0e:94:29:bd:ea:df:
54:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9B:89:C8:A5:3B:A7:9E:71:4E:BE:A6:76:E2:85:75:6C:D8:87:57
X509v3 Authority Key Identifier:
keyid:C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7c:2f:36:8b:f5:75:19:fc:6a:16:06:6f:95:01:d2:c0:fc:
c9:93:26:4f:9a:03:26:96:b6:67:52:b0:9b:f6:0d:cb:93:57:
59:8a:4d:a7:fd:44:bc:a5:f0:c6:96:7a:49:ab:d1:5c:7d:71:
df:ac:b2:78:d5:2f:bd:e0:0a:59:dc:4e:ec:f8:42:86:d1:ed:
9b:26:f4:46:14:fe:95:95:67:de:fc:51:e6:10:a4:c9:fd:c8:
8a:ad:c3:f6:0e:cc:60:14:d1:51:bd:91:5e:26:16:4f:bf:9d:
c5:6f:3c:d4:50:16:9f:bb:6b:8a:d0:9b:ea:83:51:8b:25:a8:
d8:14:6c:70:8a:24:c8:e2:e3:84:5d:25:22:22:05:e8:51:29:
7e:af:2c:95:11:77:ef:08:a1:18:93:1b:bb:1f:26:d6:fa:e3:
c1:9e:28:a3:19:12:00:2a:94:bc:7b:b2:87:c4:8c:23:8c:e7:
4f:7c:7d:43:45:12:e7:e0:39:d6:82:51:e3:b9:a7:6b:a1:59:
f7:88:d8:8f:51:5b:30:4f:c9:7e:4a:1e:ce:62:e2:2b:65:7a:
32:b3:6f:a7:4f:70:e6:e3:d9:1e:02:71:28:81:af:d1:f2:47:
01:16:fe:91:36:5d:c6:b4:16:22:da:13:5b:0d:59:5d:ca:7a:
78:34:84:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:32:11 2026 by rpki-client