Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
File: yd1CJDGXhku0gWRh1NBlOrC6Mro.mft (raw, json)
Hash identifier: 4tnin7oWeEN/Y1Jc54k63cLeRcDN0lWnoF9654lkyQc=
Subject key identifier: D2:1E:84:68:D1:0F:38:6D:10:1F:6C:DD:7D:E5:B4:F5:0D:14:B1:D5
Authority key identifier: C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
Certificate issuer: /CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Certificate serial: 019CAB342CD3DC39C0AFC7EC3625A54FEB6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:00:49 +0000
Manifest this update: Sun 01 Mar 2026 21:00:49 +0000
Manifest next update: Mon 02 Mar 2026 21:00:49 +0000
Files and hashes: 1: 45j6eHYF_02muc8QdARO0K6hDmo.roa (hash: RBkJqhmrXlwPWTL2teXXxMSS7p2416ywX2dYxmAUw9s=)
2: yd1CJDGXhku0gWRh1NBlOrC6Mro.crl (hash: cKmhR2v6uI99iU2sOclF4Wn7cPE57J9wS6reahHjrLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:2c:d3:dc:39:c0:af:c7:ec:36:25:a5:4f:eb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Validity
Not Before: Mar 1 21:00:49 2026 GMT
Not After : Mar 2 21:00:49 2026 GMT
Subject: CN=d21e8468d10f386d101f6cdd7de5b4f50d14b1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:86:40:b7:5f:f0:0b:96:c0:3b:c0:61:50:
99:67:e5:d7:f9:6f:0f:05:47:fa:13:72:c7:0b:5a:
fe:ca:23:f5:d1:b2:7b:09:75:d0:cc:36:58:e9:4d:
0a:a5:0e:94:95:c2:fc:c1:ee:08:f9:97:60:ff:81:
e6:71:9d:a8:09:83:61:87:60:d2:da:eb:d1:03:6e:
54:98:e3:8c:17:90:e5:b3:ae:4a:6d:04:bc:26:35:
c2:19:aa:dc:da:b1:f5:e6:3f:e0:47:8f:62:0e:24:
92:45:20:70:05:64:1b:03:ab:e3:97:33:30:07:8a:
04:06:9e:71:2a:3a:98:13:7e:76:18:5b:3c:fc:c5:
c1:51:8f:72:31:32:f5:b3:99:a4:97:92:9c:d8:a0:
36:b2:5f:19:1f:ae:23:ff:59:ee:41:46:7b:b7:c2:
76:28:32:09:85:f8:0d:fc:6d:76:e9:bc:3d:aa:65:
6b:42:81:9c:8f:2d:4a:2f:70:9b:3e:73:5d:55:15:
06:f5:52:7e:61:48:a8:a4:ad:85:c6:a6:88:69:21:
c3:23:7a:79:47:a9:fa:90:2a:f0:80:fe:28:1c:b4:
61:ed:e5:3a:e9:99:6b:7d:62:fa:b5:99:c2:ac:43:
15:a4:7d:89:33:78:af:27:40:24:c3:8f:28:e1:93:
98:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1E:84:68:D1:0F:38:6D:10:1F:6C:DD:7D:E5:B4:F5:0D:14:B1:D5
X509v3 Authority Key Identifier:
keyid:C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7e:f2:39:bb:6f:35:5a:8f:32:16:a0:a1:60:b7:0f:d5:84:
d9:95:42:63:da:05:e4:fa:39:fc:73:bc:4d:04:23:cc:8c:03:
5e:a6:bf:63:0d:eb:45:e3:c1:bb:fa:7c:cc:f1:0b:43:6c:4a:
4d:5b:f6:8e:b6:c9:53:07:0f:ad:19:f5:7f:50:10:ca:1d:f1:
e0:95:ac:51:6f:62:aa:8b:5b:fc:81:73:58:60:24:fd:eb:6f:
30:a5:66:cf:15:bc:19:4d:31:01:22:be:82:39:79:88:6d:32:
ae:01:8a:97:ae:88:ba:f4:2e:5d:3f:9f:e4:09:10:c8:78:aa:
c6:a1:ce:d2:f6:dd:5c:71:6b:e4:d3:67:4b:6f:8f:de:3c:a3:
54:ab:4d:99:f4:94:99:20:92:a5:dd:b1:46:f1:22:75:26:60:
fa:68:82:dd:db:29:03:34:3a:74:46:e3:89:73:97:32:83:99:
79:a1:3d:40:37:77:00:ea:89:b7:3e:04:e2:44:cb:b6:a0:fc:
31:b6:c1:3e:95:fe:fe:d7:89:4e:8f:09:e3:03:cb:40:4f:18:
50:84:dc:60:b3:d0:76:23:cf:5a:7b:12:70:98:6d:28:09:70:
bb:24:71:55:8d:8e:3d:9a:56:da:2a:ad:a3:4d:1f:7b:e8:fd:
d8:2d:7d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:54 2026 by rpki-client