Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
File: yDOgOJWSdW5BXN40irvCQxKwLfY.mft (raw, json)
Hash identifier: HsURrNE3KA192nx9h1tAoxB3qkh7etnMCRswirY9h+8=
Subject key identifier: 9A:B8:65:CD:51:81:59:F6:2A:BA:B0:9E:EF:E4:FF:C0:45:40:4F:C1
Authority key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
Certificate issuer: /CN=c833a0389592756e415cde348abbc24312b02df6
Certificate serial: 019FACAC9F8D02405EAFF015E7564FB04604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 07:00:21 +0000
Manifest this update: Wed 29 Jul 2026 07:00:21 +0000
Manifest next update: Thu 30 Jul 2026 07:00:21 +0000
Files and hashes: 1: 3TtBL0qA5kisjEdyIAiW0RrkR5Y.roa (hash: IIwZ4eNX/TnLbTOdzNJ7spbedu7ExR/vuLghC48r7Rc=)
2: yDOgOJWSdW5BXN40irvCQxKwLfY.crl (hash: mBpX+A8DYFjDkauyXKFdwYQtc9EyiGw/uGetH0M6tJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:9f:8d:02:40:5e:af:f0:15:e7:56:4f:b0:46:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c833a0389592756e415cde348abbc24312b02df6
Validity
Not Before: Jul 29 07:00:21 2026 GMT
Not After : Jul 30 07:00:21 2026 GMT
Subject: CN=9ab865cd518159f62abab09eefe4ffc045404fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:89:bd:90:c1:26:20:3a:b6:58:5c:68:4c:10:
11:77:d7:d8:17:8a:93:56:ba:cf:5b:c3:72:b5:48:
2f:d3:2f:95:88:29:bb:27:31:91:22:f4:b5:3c:2e:
0c:16:b6:1f:20:09:0b:f9:8b:7d:c5:28:7b:e3:cd:
32:ee:fa:64:64:d2:bb:c2:de:bc:78:19:5d:d5:b5:
aa:79:e9:b9:df:50:01:57:22:3a:7e:f6:cc:6a:16:
ea:3a:84:22:0b:b5:e4:5b:e6:26:31:5f:6f:9f:8e:
63:94:de:c6:e4:54:63:de:c7:b5:c9:5a:6b:a0:88:
b3:37:74:41:9a:ca:95:f2:57:3b:ec:be:c9:b8:72:
b6:41:bd:53:05:a8:6e:e2:65:cb:47:0e:d8:3c:fc:
11:e2:cf:9b:52:ee:6b:8c:a7:0d:d1:32:0c:2a:5e:
f2:03:37:2d:27:27:87:0d:af:84:65:aa:15:aa:94:
20:19:0a:69:49:8f:a8:48:1b:f9:b1:20:ae:05:77:
ce:1b:10:20:80:e8:c4:57:e9:b7:59:23:ef:41:30:
c4:71:70:e5:7a:92:cd:b2:f2:ee:9a:a6:0c:41:44:
d8:a3:e0:90:1e:f7:c3:3a:44:bd:28:90:de:75:16:
ee:ad:07:14:26:05:bf:ed:f7:a3:b3:5a:14:04:2a:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B8:65:CD:51:81:59:F6:2A:BA:B0:9E:EF:E4:FF:C0:45:40:4F:C1
X509v3 Authority Key Identifier:
keyid:C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:16:a6:ae:a7:8a:cf:48:37:9e:22:fd:97:4b:57:69:16:05:
80:64:0a:d0:8e:2d:b9:d4:bb:18:52:a0:d6:ff:48:65:0a:29:
bf:39:f6:94:0e:52:76:86:a5:61:1b:50:42:26:c2:a2:b4:a6:
75:e9:28:83:26:9b:e2:23:7d:de:ba:64:b0:b5:38:a4:01:4c:
72:ad:91:f0:b3:75:d5:3b:f4:87:3e:68:66:8b:ea:ef:5c:49:
62:e6:c7:52:31:22:96:ec:9a:9e:65:2f:4f:10:a3:a0:b4:b2:
3f:2b:0a:18:ec:a9:c2:04:2a:0c:fc:61:be:02:48:71:a9:49:
08:8f:b0:db:ee:14:17:1b:6c:7c:90:3b:df:cf:0a:9c:4c:10:
96:2a:32:96:fa:0e:97:6c:82:8a:1b:27:d9:66:86:c2:d6:41:
da:4b:0a:b0:76:ed:bc:79:76:9e:40:d4:82:44:9a:71:54:be:
95:81:ab:93:07:4d:b9:a8:c3:84:fc:35:40:9d:b8:5d:19:7f:
89:d9:35:db:43:bb:af:0b:1f:1d:82:2b:0f:10:8b:3c:37:5c:
dd:32:e3:e4:f7:1b:d3:df:d0:58:9c:15:53:25:36:ce:b1:77:
d7:c5:5a:1a:3e:9a:96:e9:55:09:44:f6:14:52:b3:87:a8:56:
3c:3c:76:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:41:14 2026 by rpki-client