Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
File: ydDpI0zGchlXpKwhPqxnU-2F7qc.mft (raw, json)
Hash identifier: ztVa6JcENlybaaSzJvEZ2CobMch5SLbcHZTzyUgtoec=
Subject key identifier: FC:69:B9:BE:4A:07:EE:92:1A:AB:82:FB:00:C3:BD:31:3E:66:AE:78
Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
Certificate issuer: /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Certificate serial: 019D9B504757B339D5F87917484F19E8AE3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
Manifest number: 0802
Signing time: Fri 17 Apr 2026 12:00:22 +0000
Manifest this update: Fri 17 Apr 2026 12:00:22 +0000
Manifest next update: Sat 18 Apr 2026 12:00:22 +0000
Files and hashes: 1: Uv99MiDXyajOsQnEMoZEqygjiOM.roa (hash: J2J3fpMUvkwfwUFZMZrnnhWhczlVO0JpNc+f56+XNoM=)
2: tKZtiob_Nq3JG5qKeeGyKdGDt2o.roa (hash: orNqkM35VJUEOJvGQtjnDxsBymM4EnHV3TJiqbLgHGU=)
3: ydDpI0zGchlXpKwhPqxnU-2F7qc.crl (hash: wjTd6IZqPrL9UDAOTQOzzG22JOkb2F47SjRpe72nOJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:47:57:b3:39:d5:f8:79:17:48:4f:19:e8:ae:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Validity
Not Before: Apr 17 12:00:22 2026 GMT
Not After : Apr 18 12:00:22 2026 GMT
Subject: CN=fc69b9be4a07ee921aab82fb00c3bd313e66ae78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:45:ba:6b:a4:43:74:e4:38:53:ad:cc:be:
df:24:14:47:b3:a7:d9:cf:8d:2e:60:4a:41:db:b0:
34:e2:42:c2:b9:d8:1b:9c:41:8a:5a:9f:b3:be:c7:
22:90:3b:45:e3:c8:68:3b:20:06:81:9e:3e:3f:8d:
94:d1:c2:7e:ea:d3:ff:8e:42:93:aa:57:10:43:fb:
60:fb:60:62:05:10:db:1f:f9:2b:e0:7c:69:74:d6:
4f:e7:ee:d7:e1:2e:a6:a0:63:cf:42:34:31:3d:8e:
11:56:a2:42:04:00:b1:8f:32:49:00:68:b5:07:12:
5c:50:dd:6a:e9:17:18:da:3e:e4:06:24:68:f6:ab:
4c:39:bb:a8:25:dd:35:1e:bb:02:22:8f:fd:c2:a8:
f7:22:0b:cf:b6:16:2f:65:1e:04:39:66:42:e3:e7:
f4:4f:b5:7b:2b:7b:e9:82:df:a3:08:f5:a0:6e:53:
3b:f4:d6:37:56:bc:a9:91:99:74:42:ea:a1:ee:e5:
2f:91:b7:8a:12:63:09:15:b3:2b:e5:2b:ee:24:9b:
65:be:83:22:47:01:91:79:a9:4f:85:3b:04:e3:5e:
dc:ae:36:60:55:27:b8:ec:2f:68:04:4d:ec:fe:9a:
8a:a7:eb:e7:90:bd:fe:2b:08:38:3e:1f:19:94:d3:
1d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:69:B9:BE:4A:07:EE:92:1A:AB:82:FB:00:C3:BD:31:3E:66:AE:78
X509v3 Authority Key Identifier:
keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e9:81:18:a6:0a:35:12:9f:cb:d7:c3:85:71:b8:cb:ed:a3:
79:2a:b6:c0:0a:95:78:c0:c1:3c:76:f1:ff:b0:06:36:65:63:
17:cb:df:d2:17:30:a9:f9:c0:1d:10:50:a8:90:59:cf:cb:60:
d5:7e:98:07:7e:37:85:24:7e:62:15:b1:71:3f:d2:66:59:af:
bc:65:7c:5f:b1:04:e4:51:08:fb:ae:cd:2f:f8:ca:8d:70:d8:
1e:49:de:73:01:74:ed:f1:92:b8:28:39:f0:bd:f9:03:88:b5:
d9:f8:1b:4c:72:8f:6e:12:19:74:9b:30:ae:cc:6e:c5:48:e2:
b8:6c:d5:76:11:0d:1a:f7:d9:ee:e2:01:79:d7:cb:95:e7:96:
8a:f7:50:4f:50:1f:f4:ab:b5:11:8f:52:db:2d:a3:96:7a:f1:
37:6e:c8:85:49:1e:7c:64:8c:99:7c:e2:71:44:76:da:c9:e2:
f9:e6:26:39:bc:8d:ea:cb:a0:51:c6:3e:01:6a:45:16:5f:3b:
43:da:5e:f9:7f:48:b0:91:d8:49:af:ba:16:54:7a:8b:d1:86:
ca:b5:e0:8a:88:a9:c9:f0:65:88:0b:eb:0a:30:58:28:3c:f9:
87:b6:73:13:b0:5e:0f:b0:0f:fd:f7:42:dd:ad:84:fd:ba:7c:
22:45:48:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:44:25 2026 by rpki-client