Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
File: yRdwDdwOcosHKtQaPR6LaoCqdRA.mft (raw, json)
Hash identifier: Kxd/N7k8T1/1PHtvjb1FrktlWU9CPFTLjYdylHHS1L4=
Subject key identifier: 1D:88:DB:F1:96:1B:CD:BB:2C:A4:29:43:7C:7D:1C:01:AD:89:0A:73
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 019CAE6C56CC05EB90DD0FD967A58B6D2502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 12:01:01 +0000
Manifest this update: Mon 02 Mar 2026 12:01:01 +0000
Manifest next update: Tue 03 Mar 2026 12:01:01 +0000
Files and hashes: 1: wbZC2ywn3MopqOZcK5wfTzngXuU.roa (hash: BKsSPZZN6H035QOhv5kmcLN6+1r7D6TcSZ6TgnVBHpE=)
2: yRdwDdwOcosHKtQaPR6LaoCqdRA.crl (hash: KvnqTN2mkhauqLXdZPt10JaKCTfQb5KxU43o/A4a2nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:56:cc:05:eb:90:dd:0f:d9:67:a5:8b:6d:25:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: Mar 2 12:01:01 2026 GMT
Not After : Mar 3 12:01:01 2026 GMT
Subject: CN=1d88dbf1961bcdbb2ca429437c7d1c01ad890a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:b0:c4:f9:1b:75:b7:a0:6b:da:11:12:ac:
33:dd:9a:fe:74:ca:0a:dc:cf:da:cc:60:53:03:a2:
be:4d:ed:c1:f6:ce:db:99:91:52:a7:65:b7:59:d8:
b6:28:84:d9:89:f8:bc:52:ae:3f:29:0e:42:6d:50:
f5:a4:17:d1:fd:33:ee:f5:5a:93:f1:93:39:86:07:
05:76:05:6b:a8:72:01:fe:d7:ce:95:45:5e:d3:db:
d2:65:17:72:53:eb:c9:88:13:e7:40:cd:b5:dc:6c:
1d:c5:90:1e:1f:f5:45:26:67:b4:2a:21:88:fa:9b:
bc:13:98:5a:d8:5e:61:51:8b:24:80:50:06:96:d6:
b7:12:0d:9e:d8:19:9d:f0:d0:2a:b9:af:f2:87:68:
cb:4d:6c:cb:03:e1:11:d5:47:50:0e:e5:77:8d:7d:
a3:a6:b5:8e:d5:7c:f1:5f:34:d1:b6:4c:65:6a:68:
c7:5d:dc:de:e7:58:bb:12:ef:33:5f:45:b4:e6:c2:
18:cb:57:76:cf:5d:f8:72:a1:c5:cb:31:89:ac:15:
ca:2d:3f:71:a9:73:af:51:96:86:24:9b:f4:f5:38:
3e:31:a9:4e:0a:4f:e0:c1:c0:90:f9:9a:0d:be:d4:
a4:ff:b3:e9:e7:24:f9:ed:2b:45:96:72:e9:18:95:
ae:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:88:DB:F1:96:1B:CD:BB:2C:A4:29:43:7C:7D:1C:01:AD:89:0A:73
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:69:7b:9d:b0:85:ee:6a:f7:59:f3:1d:97:27:d9:11:61:70:
b6:31:88:da:b1:a8:ee:ff:62:f2:ad:9a:e2:11:f4:a4:86:45:
8b:4c:fd:86:8c:0c:fc:22:b5:b0:e7:c2:c5:02:9d:5d:35:21:
fb:a8:35:c3:88:17:f1:4c:a0:7b:9c:4d:04:5e:65:21:d9:d1:
bd:94:6f:9d:ed:2e:bf:a5:42:0c:97:cd:7b:97:36:79:ec:47:
57:e9:ad:89:15:4c:3c:bf:9b:2f:e7:1b:2c:93:27:11:d3:ad:
54:d5:0e:cd:9c:fc:a5:e4:9c:b6:9e:78:34:23:f6:49:c0:88:
d8:99:a5:87:37:6b:11:6a:87:59:04:0f:ca:1d:47:3e:01:48:
01:55:09:d2:60:e7:30:3e:83:00:e6:80:3a:28:3c:d6:c1:96:
fd:7e:1e:c2:df:d1:9f:aa:3a:7b:04:8f:b7:97:cb:fb:95:8f:
ad:4f:44:54:8b:ed:c8:48:d7:e2:35:0e:e6:c9:03:a2:62:a3:
06:c5:28:d1:9e:ff:69:95:73:81:57:57:b1:17:dc:95:9e:70:
04:61:6f:15:16:b3:fa:c3:f3:d0:fa:95:dc:ba:79:e5:7d:b6:
ba:19:f0:c8:24:19:54:b8:61:ef:83:76:80:13:52:58:8a:f5:
65:02:5c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:48:55 2026 by rpki-client