Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
File: yd_q7KItLSYYtDPPAKsUS9i4Db0.mft (raw, json)
Hash identifier: Z9718Mz6G1MWvEAI5zN9oNC0qRWjf7XY8JF9tp0/qJ0=
Subject key identifier: 4A:B3:35:23:75:E9:AB:22:9A:B7:3C:05:A2:40:88:A6:C1:FF:34:3C
Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Certificate issuer: /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Certificate serial: 019CAB6BE0DF0776107915FE4EA9EB5A55FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
Manifest number: 097A
Signing time: Sun 01 Mar 2026 22:01:39 +0000
Manifest this update: Sun 01 Mar 2026 22:01:39 +0000
Manifest next update: Mon 02 Mar 2026 22:01:39 +0000
Files and hashes: 1: 820vIRF1IvHmMeX3TIHoslLaymk.roa (hash: nxsc5hiaKPfRF3Jfau9U9QFL2zAQ/W9nSHpc/OJ2IbA=)
2: yd_q7KItLSYYtDPPAKsUS9i4Db0.crl (hash: AQYCf8IZoQG9RWrMR68Igi0tmcZA2aj14GA2xEpShIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:e0:df:07:76:10:79:15:fe:4e:a9:eb:5a:55:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Validity
Not Before: Mar 1 22:01:39 2026 GMT
Not After : Mar 2 22:01:39 2026 GMT
Subject: CN=4ab3352375e9ab229ab73c05a24088a6c1ff343c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:01:7d:cf:d3:3d:90:1f:b5:58:10:1b:5a:
49:1c:26:e7:b2:c9:18:5a:68:56:19:1c:00:ad:2f:
99:0a:bf:8b:81:38:51:98:9a:77:f7:16:02:0d:be:
6e:87:23:ae:ab:72:dc:bf:7f:21:e7:6a:86:a6:17:
aa:2b:c8:b6:51:aa:fd:c7:13:54:63:41:c5:14:2d:
67:06:70:76:cc:90:d5:1b:c5:dc:ca:31:d4:ef:79:
08:fa:f6:bb:50:c2:cb:84:96:7b:5d:d6:5f:fb:a9:
f9:02:7e:3a:b1:41:f8:8c:7f:15:8a:f0:e1:44:84:
32:6b:2e:e1:f8:b2:9d:9f:ad:4d:ef:8c:42:c3:0a:
9b:e2:ef:df:18:02:e0:3e:2f:bd:97:b1:f6:3e:57:
2c:8b:a7:1f:37:6d:6e:0c:cf:1b:26:81:aa:5b:84:
47:e7:5c:a7:a8:eb:9d:9d:0f:f2:00:5e:69:f7:e6:
07:03:da:7c:75:f0:3c:29:92:54:5f:55:67:34:b7:
84:87:27:bb:01:3a:98:68:95:d4:68:47:81:c4:d0:
ca:95:87:11:b3:74:be:f8:24:5c:aa:c4:64:4f:57:
e9:26:64:e5:cc:06:3e:b7:53:02:cb:58:dd:66:36:
93:4c:23:41:93:16:37:03:e6:26:f1:ff:17:13:a2:
60:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B3:35:23:75:E9:AB:22:9A:B7:3C:05:A2:40:88:A6:C1:FF:34:3C
X509v3 Authority Key Identifier:
keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:83:45:3b:c9:87:65:09:60:8c:c5:84:7e:c1:ea:96:f0:b7:
a7:27:a6:94:8b:0c:a3:e8:5f:71:e4:81:35:17:01:7d:cf:d5:
96:8c:51:6e:af:90:53:83:a4:3e:08:7c:9f:5a:33:5b:f6:8c:
49:b0:1d:48:60:d6:20:07:41:2b:ae:4d:d1:5b:e8:bf:82:28:
fd:06:7e:41:11:36:f6:a4:f2:66:2f:2f:a5:07:43:ee:cb:c5:
b5:2b:80:da:be:8c:56:55:f0:34:e2:ce:b6:24:8e:16:b6:4b:
cd:86:75:09:40:ee:d4:12:59:dd:ad:98:a7:7c:3a:c1:37:69:
ec:21:02:50:08:4e:e5:31:5a:6b:f6:03:8a:b4:a0:4c:60:c7:
c0:b6:ba:69:b9:50:12:09:5b:d1:a9:40:c5:db:92:05:30:94:
e2:5c:5b:f1:6c:65:2b:b1:98:09:d4:7b:e7:cd:30:e4:0f:70:
b3:9e:12:9e:1c:3e:f3:95:45:30:79:20:17:bf:7d:19:a5:d6:
2a:6e:f1:90:6d:32:50:51:3a:8e:92:82:01:34:4a:90:2e:54:
1e:e3:fa:b4:e1:24:06:ac:d0:38:d1:07:53:78:d4:aa:48:8d:
2e:da:b8:e3:19:3a:2a:ed:41:a3:1c:f1:01:50:f6:20:b9:ad:
b8:64:b8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:14 2026 by rpki-client