Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
File: yd_q7KItLSYYtDPPAKsUS9i4Db0.mft (raw, json)
Hash identifier: Z5T8E3ZnvLr3OPuxL8+3KDjPLtiY58Aqet739YfjkXA=
Subject key identifier: 4C:D4:E6:98:44:C9:D9:69:59:8F:0A:A9:14:77:05:1B:A0:23:47:58
Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Certificate issuer: /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Certificate serial: 01A0C40E7678CA85F606517E5F1A9CB3019B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
Manifest number: 0B99
Signing time: Mon 21 Sep 2026 13:01:17 +0000
Manifest this update: Mon 21 Sep 2026 13:01:17 +0000
Manifest next update: Tue 22 Sep 2026 13:01:17 +0000
Files and hashes: 1: 820vIRF1IvHmMeX3TIHoslLaymk.roa (hash: nxsc5hiaKPfRF3Jfau9U9QFL2zAQ/W9nSHpc/OJ2IbA=)
2: yd_q7KItLSYYtDPPAKsUS9i4Db0.crl (hash: Jvq4uNuFYkyneJJkldmiSXGgjH/Hclqxpg5MWVoAJpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:76:78:ca:85:f6:06:51:7e:5f:1a:9c:b3:01:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Validity
Not Before: Sep 21 13:01:17 2026 GMT
Not After : Sep 22 13:01:17 2026 GMT
Subject: CN=4cd4e69844c9d969598f0aa91477051ba0234758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a2:d2:e2:e0:86:52:3c:0e:7e:a5:0c:00:e3:
0c:d9:94:28:4f:e8:16:85:46:20:a8:3d:1d:3a:a8:
55:59:80:7e:1f:54:74:64:8c:2f:1b:88:62:f6:0f:
2e:fe:15:cd:cf:88:34:66:e8:5b:ea:d0:36:a5:7b:
4c:e2:0f:30:35:12:94:b8:de:a5:31:19:4d:60:37:
a3:8b:e7:b3:b5:f8:77:02:b0:57:2e:f0:53:d5:53:
20:bc:1a:e0:78:a1:e7:de:e8:81:09:eb:e7:d0:c1:
bd:99:49:f4:57:35:8c:8a:1d:40:d2:1d:13:32:60:
50:a6:59:e1:49:8c:28:42:e9:6d:ea:6f:9f:61:fd:
94:0d:87:48:00:96:aa:74:f9:1d:e8:fc:18:59:7f:
e7:aa:c7:b5:fa:78:af:ab:74:76:9b:49:57:e7:72:
85:82:ab:1c:b8:12:67:4d:41:37:bb:55:80:81:10:
30:3c:0e:f7:db:cd:1c:b4:46:66:2a:68:d1:92:a8:
4e:a1:21:7c:15:f7:54:cb:62:7e:ea:de:8a:55:d8:
99:ad:06:44:82:1f:3c:32:a9:cc:ed:e3:71:41:1f:
14:d9:4f:7d:1c:8d:a3:07:3b:ec:a9:0d:91:cb:ce:
88:83:14:d4:b6:ae:69:c6:2b:c6:ed:a9:18:12:e6:
0a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D4:E6:98:44:C9:D9:69:59:8F:0A:A9:14:77:05:1B:A0:23:47:58
X509v3 Authority Key Identifier:
keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0c:85:8b:17:16:6b:12:2f:cc:31:1a:64:03:96:06:36:7b:
8a:00:6d:6f:7f:cd:0b:83:d7:81:4e:0f:28:19:f4:da:ff:ec:
3b:04:35:fc:cf:7a:f5:8e:60:ee:0d:db:44:fe:78:5c:be:a3:
af:22:0d:7e:26:17:c5:04:ba:b7:40:03:b9:f3:3f:ef:b1:c0:
66:a8:57:6e:5c:26:93:c8:6a:39:3a:2d:6c:ab:c4:33:dc:6d:
ca:6c:c2:69:d2:04:67:c7:ae:f8:33:48:24:bd:96:22:3d:26:
fe:02:87:5e:06:37:43:80:fb:61:f2:2e:5e:e5:ef:11:72:ca:
d2:dc:cc:74:fc:c2:bd:4b:58:7e:56:bf:0c:d0:c2:d6:13:c0:
31:32:94:7d:5c:0b:e8:b9:d6:25:f3:62:b4:a6:99:8a:ce:a3:
ad:82:fa:2e:69:7d:89:d3:fb:7d:9c:02:30:0b:ee:52:f4:54:
3a:d8:ac:6b:50:01:68:ca:63:f1:36:d2:41:3e:bb:0f:63:7d:
ce:fa:19:f3:1e:b6:6d:a8:57:b4:e8:d3:02:5a:e0:d0:5c:2b:
94:d8:e6:c0:60:00:53:90:2b:c4:03:85:59:2e:9f:34:c5:fd:
f9:1d:12:00:cd:2a:14:ee:e1:c0:6a:72:30:08:22:e2:44:ae:
6d:6a:eb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:41:43 2026 by rpki-client