Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier: QaQX5yY2KPJ7K1uAGe/qrq7w1rVj2YSM5dAElIX9gtM=
Subject key identifier: 03:FF:DB:D1:6A:47:92:01:01:DF:F4:E7:29:39:88:AC:4B:18:C7:87
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 019CADFE39AFAEEDE225C50F1CAB8D993F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number: 0769
Signing time: Mon 02 Mar 2026 10:00:45 +0000
Manifest this update: Mon 02 Mar 2026 10:00:45 +0000
Manifest next update: Tue 03 Mar 2026 10:00:45 +0000
Files and hashes: 1: 7ddZ6AuTaKTVHMzwtcM1Koce3jI.roa (hash: xG5K9PIIy6VwRa0eYfMip6RI0P+1GY89uLI9ih9L+Uo=)
2: d3-5CKAZ7Mk-2t_tjSmFOfnjMzk.roa (hash: vwsp8oVhgfqNXWForlLjiHqAE45N0F3rkdkhErDxiHo=)
3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: XhtlPyJOqIfS2SBC2N+IN28GHpqXu1METlwte4mZsN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:39:af:ae:ed:e2:25:c5:0f:1c:ab:8d:99:3f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: Mar 2 10:00:45 2026 GMT
Not After : Mar 3 10:00:45 2026 GMT
Subject: CN=03ffdbd16a47920101dff4e7293988ac4b18c787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:4e:d9:b9:e0:2b:d7:fe:63:6d:8a:e8:6d:
40:b8:de:22:b8:ef:75:80:67:e3:a9:ee:6b:14:9b:
1e:4b:ac:8d:3a:a5:45:4b:bc:2b:31:53:04:52:ef:
ab:42:bd:4e:f0:46:1d:0c:ce:e4:a2:81:e0:c8:0b:
22:54:85:0d:7d:a5:73:73:fd:0f:bd:24:3c:a5:6f:
4e:84:84:72:3e:88:20:de:d5:51:74:8f:b0:04:26:
60:d9:18:05:7c:bf:5e:61:db:f7:10:ea:29:43:21:
f1:0e:45:97:49:4c:21:24:53:35:63:a0:18:9e:d5:
16:43:a5:21:27:2a:7a:64:e0:0c:d6:80:f6:61:a1:
8a:2c:f4:63:38:4a:a4:ea:94:be:d8:b6:e5:49:09:
cc:ca:df:0f:60:63:3d:43:00:fc:fa:36:6a:e8:ed:
46:ed:b2:8c:9d:f6:09:29:2d:e7:a0:c2:0d:5f:c8:
a9:8a:89:38:e1:cb:4a:e2:77:93:2a:1f:f5:c2:6d:
3d:80:9c:73:2a:ce:e5:1a:c0:b0:8b:5e:fc:16:2c:
16:9d:54:39:d3:62:54:d7:e5:3e:a1:7a:d8:a6:ff:
a2:4b:82:21:a8:b7:16:08:d3:26:8c:48:ab:d3:0c:
f7:08:7c:ec:ed:6f:35:27:58:ed:ba:3c:30:07:67:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FF:DB:D1:6A:47:92:01:01:DF:F4:E7:29:39:88:AC:4B:18:C7:87
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:35:b8:91:37:28:a6:c9:20:76:ff:7c:25:ce:d1:46:46:a4:
5a:1e:01:bf:6a:7a:1f:72:75:f8:0a:31:60:a4:59:f5:5b:95:
9f:e2:66:1f:cb:27:a5:d3:fa:4a:d1:fc:2f:ef:af:18:a6:81:
0f:49:c1:e0:64:72:53:a4:06:ea:72:a9:f3:64:44:a5:37:ad:
d7:7e:5b:b2:d8:4e:1e:8d:2b:af:4c:9f:50:6e:fd:42:ae:90:
cd:cd:37:74:0b:01:36:24:18:a5:c3:a4:d3:b2:89:c9:fa:5b:
aa:e8:f3:82:51:38:d6:1a:af:5d:cd:5e:dd:ee:f8:83:4d:33:
cf:61:d2:8e:f3:9e:8d:08:f5:0e:cc:c4:36:60:aa:db:65:16:
33:4c:28:77:f6:97:f7:ff:bc:4d:84:1d:86:52:94:70:cd:eb:
9d:0c:fc:76:85:46:d4:2c:47:a4:1f:66:6a:a3:d0:e2:50:e7:
e5:16:4b:4c:82:e6:dd:e9:ce:30:49:b4:9a:1e:af:9c:4b:e0:
e4:be:5e:e1:31:96:f3:0e:b3:7f:ab:95:72:5c:87:91:09:c0:
36:1a:d3:04:1e:bb:bc:3d:60:e8:56:16:e8:6b:1a:5d:a1:89:
69:2e:5d:84:1e:7f:8f:42:0d:25:69:ff:b6:f2:af:7a:15:34:
7e:d2:c9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:41:40 2026 by rpki-client