Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
File: yRdwDdwOcosHKtQaPR6LaoCqdRA.mft (raw, json)
Hash identifier: aEuKhoO3IPjQEGWje6SsEVtZfOMHYJq5QieqbCTqYJ8=
Subject key identifier: B1:FD:EF:F1:4B:B0:47:1F:9F:C5:06:FE:9B:EB:94:21:DB:F6:3A:C1
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 01A12B7B87F794A5FBB4F9C7E0EFABDE65F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
Manifest number: 1A2D
Signing time: Sun 11 Oct 2026 15:01:18 +0000
Manifest this update: Sun 11 Oct 2026 15:01:18 +0000
Manifest next update: Mon 12 Oct 2026 15:01:18 +0000
Files and hashes: 1: wbZC2ywn3MopqOZcK5wfTzngXuU.roa (hash: BKsSPZZN6H035QOhv5kmcLN6+1r7D6TcSZ6TgnVBHpE=)
2: yRdwDdwOcosHKtQaPR6LaoCqdRA.crl (hash: TrhvOy326LKelVCCzz4z4A1mAsXbLt569BKgflIMN+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:7b:87:f7:94:a5:fb:b4:f9:c7:e0:ef:ab:de:65:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: Oct 11 15:01:18 2026 GMT
Not After : Oct 12 15:01:18 2026 GMT
Subject: CN=b1fdeff14bb0471f9fc506fe9beb9421dbf63ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:09:97:c0:13:17:b7:e6:e4:29:22:82:34:
86:fd:33:29:4c:59:c7:fe:51:12:00:43:e4:9d:58:
6d:57:85:e1:f5:86:8f:ca:ec:e2:a5:ae:00:37:ab:
b9:55:e4:14:b9:de:fd:c7:4a:a2:db:0f:52:2e:14:
b7:d0:e3:7f:13:63:10:ef:a3:ab:44:d0:85:94:70:
14:f3:4b:ff:ab:b0:97:e4:3e:08:53:38:7f:e7:26:
ee:c1:64:01:bb:21:0e:63:49:d8:81:c4:0d:a6:94:
61:18:0f:36:62:f6:84:cf:33:98:bf:72:96:82:ce:
ab:1b:36:52:5d:cf:d6:83:ed:7a:19:63:ba:1a:d4:
cb:41:c8:59:21:17:f2:24:69:da:cf:42:8c:30:77:
b4:f5:b0:1b:6c:5f:8b:c2:27:e3:0d:01:bf:06:3b:
14:a3:bd:7d:dd:db:92:41:20:e7:d5:cf:05:72:bd:
93:2f:23:37:dd:b9:c1:c5:9a:50:a2:19:f3:a2:3d:
a9:3b:0b:4e:48:ea:b2:6a:89:c8:1e:69:e2:58:6e:
d7:67:07:a9:9c:a9:81:82:45:ff:d7:30:0d:e8:b3:
49:8d:1a:e8:54:dc:0c:cb:8b:a1:0c:49:29:c8:4c:
9b:d5:7a:bc:48:ab:ff:99:da:8b:b6:f2:aa:6b:9e:
74:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FD:EF:F1:4B:B0:47:1F:9F:C5:06:FE:9B:EB:94:21:DB:F6:3A:C1
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:61:00:4c:18:10:1f:72:ca:52:83:28:23:f4:9f:0e:59:8b:
5b:96:d0:d5:4b:ed:18:b3:8c:66:42:92:c3:8d:b8:c3:05:4d:
09:5e:83:d9:cb:4e:4f:bf:6a:f6:13:33:0d:e2:19:41:0d:e0:
b3:36:e5:26:4d:40:cc:e6:25:e0:ff:3c:6a:80:ad:dc:8f:f7:
43:4d:99:1e:c2:54:60:09:4a:9b:4a:68:b7:64:27:a1:eb:26:
39:b5:e7:84:b0:27:33:84:97:37:67:df:ed:12:e5:e4:a1:c6:
91:c9:3e:e6:6c:29:b2:99:12:38:4e:5e:a9:f7:76:88:b5:c3:
6e:48:83:a5:44:ff:f6:62:18:c0:f9:e4:34:27:a5:2d:bc:bc:
72:eb:4b:89:b5:17:d7:90:f4:f8:36:96:eb:00:7e:f8:37:ac:
74:25:c8:f8:21:4e:e6:8e:6e:64:88:fd:f6:b2:f6:52:03:c8:
b0:93:4f:d4:8a:2a:52:ba:fa:40:41:fb:48:b1:0d:46:06:c9:
9a:c8:72:82:79:4d:f4:cb:1e:5e:a9:7a:07:b0:22:fb:01:ef:
70:c2:22:23:b5:80:40:cf:4f:d2:c8:73:62:8f:8a:20:c1:cd:
e6:3c:35:8a:27:81:d4:35:45:e6:72:ec:03:94:bb:55:c0:9b:
dc:d7:2c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 01:00:00 2026 by rpki-client