Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
File: ydDpI0zGchlXpKwhPqxnU-2F7qc.mft (raw, json)
Hash identifier: Jzf3fEI7pGCZGx8oTIzmx+YUGrpjxb7Z7QirTzHQRyc=
Subject key identifier: 22:BD:38:05:32:A3:91:FF:5E:6F:A1:CE:6B:66:5E:F6:F8:3C:A6:A4
Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
Certificate issuer: /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Certificate serial: 019EC2C953B546106145D54E6E06B1CB6FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
Manifest number: 089B
Signing time: Sat 13 Jun 2026 21:00:34 +0000
Manifest this update: Sat 13 Jun 2026 21:00:34 +0000
Manifest next update: Sun 14 Jun 2026 21:00:34 +0000
Files and hashes: 1: Uv99MiDXyajOsQnEMoZEqygjiOM.roa (hash: J2J3fpMUvkwfwUFZMZrnnhWhczlVO0JpNc+f56+XNoM=)
2: tKZtiob_Nq3JG5qKeeGyKdGDt2o.roa (hash: orNqkM35VJUEOJvGQtjnDxsBymM4EnHV3TJiqbLgHGU=)
3: ydDpI0zGchlXpKwhPqxnU-2F7qc.crl (hash: fyjca8rhe0ijRB8dbvucgK7U7XIwNgdQOAz0kbaX8/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:53:b5:46:10:61:45:d5:4e:6e:06:b1:cb:6f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Validity
Not Before: Jun 13 21:00:34 2026 GMT
Not After : Jun 14 21:00:34 2026 GMT
Subject: CN=22bd380532a391ff5e6fa1ce6b665ef6f83ca6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ef:1a:cc:94:82:60:c7:b9:eb:47:ba:b3:82:
2a:73:f3:d9:cd:1e:d9:2f:70:50:71:3f:e9:b5:35:
79:a4:2b:27:63:ab:79:8d:01:2a:1c:e3:ac:a9:59:
9c:dc:2c:50:35:cd:9b:d4:6d:5a:b2:bf:87:74:d6:
72:fc:2a:1a:a1:6c:c3:d9:1b:8d:4d:5a:87:bc:f0:
6a:ee:93:1f:35:8d:78:fa:9d:7b:db:8d:f0:83:a0:
32:f0:82:35:56:d6:5d:da:a2:32:38:b5:08:1f:17:
5b:b4:18:ef:b9:90:64:29:8c:ed:a6:4c:08:52:ea:
0f:3b:f7:ff:0f:0c:9b:35:a5:99:f5:53:b3:66:0e:
f0:38:9a:13:b2:f4:37:08:0d:8d:81:47:9d:05:4c:
9b:ba:98:a5:5b:0a:f9:a8:26:85:aa:64:52:08:22:
4f:7e:d4:64:e6:e5:f4:da:e6:55:57:8f:7e:4d:d5:
29:48:e2:a1:c1:2f:97:8c:8a:4c:54:2c:51:b6:e0:
fb:6c:bc:83:9d:47:3b:d5:25:3c:47:5a:62:8e:51:
70:13:3b:2e:e5:99:4e:90:d8:cd:cd:cb:93:01:5c:
95:a2:e5:56:53:c8:41:71:58:a0:cb:c0:32:fa:55:
37:fc:e1:95:19:93:7f:40:6d:3d:37:bd:08:bc:b8:
88:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BD:38:05:32:A3:91:FF:5E:6F:A1:CE:6B:66:5E:F6:F8:3C:A6:A4
X509v3 Authority Key Identifier:
keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:85:30:d8:d6:4c:04:b9:e4:97:12:60:a2:1a:38:f9:e1:18:
fd:d6:ac:64:8e:c0:94:68:d6:19:2b:81:7c:46:a4:94:8c:62:
a8:91:32:98:53:22:0a:2c:2d:98:0e:58:51:a2:01:2f:89:e1:
b5:51:42:bb:b8:b0:cf:5a:f8:ff:d9:a6:24:58:c8:90:02:4c:
07:11:e9:75:c6:6c:f7:45:cb:89:ce:75:7b:a5:f3:d9:8a:26:
d4:da:84:6d:04:31:88:26:3e:2a:30:62:25:36:bf:d7:29:e6:
10:27:cd:94:d1:91:a8:40:9d:76:30:c0:b5:48:28:ea:da:3c:
ac:da:e4:9e:f1:89:75:a0:b3:fc:66:39:f5:a2:1a:4d:7b:b4:
fe:bc:11:f0:96:a3:16:da:81:39:7a:8c:a6:62:4e:29:46:68:
68:c1:06:d8:15:85:ae:a8:82:bd:82:1b:c5:74:81:44:fc:15:
a0:d7:1a:ef:bf:d2:0b:df:af:1e:47:68:03:a1:8d:81:f3:19:
c5:8d:dc:c3:c5:45:6c:54:b4:e6:16:a4:d0:6b:db:9a:cd:a2:
f7:49:86:96:57:be:14:cb:7d:fe:d0:17:4a:d9:e0:c5:c3:fd:
e0:95:e4:7a:4c:3c:66:17:14:32:3a:30:f2:7d:6b:90:e8:74:
a0:be:00:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:36:37 2026 by rpki-client