Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier: EoMV0G9K2r1bQ9h8Kqve309TsioYh8YJdTNCxG5qCgA=
Subject key identifier: 20:F0:C7:4D:4C:73:7C:62:A6:5C:0D:F3:68:DB:54:53:57:E2:50:25
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 019D9B87762098098D58476049289A2C50C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number: 07E4
Signing time: Fri 17 Apr 2026 13:00:39 +0000
Manifest this update: Fri 17 Apr 2026 13:00:39 +0000
Manifest next update: Sat 18 Apr 2026 13:00:39 +0000
Files and hashes: 1: 7ddZ6AuTaKTVHMzwtcM1Koce3jI.roa (hash: xG5K9PIIy6VwRa0eYfMip6RI0P+1GY89uLI9ih9L+Uo=)
2: d3-5CKAZ7Mk-2t_tjSmFOfnjMzk.roa (hash: vwsp8oVhgfqNXWForlLjiHqAE45N0F3rkdkhErDxiHo=)
3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: TItyoetKhv/quQeYt0PHyAhAc5IdUosYLIfXYk1GdPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:76:20:98:09:8d:58:47:60:49:28:9a:2c:50:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: Apr 17 13:00:39 2026 GMT
Not After : Apr 18 13:00:39 2026 GMT
Subject: CN=20f0c74d4c737c62a65c0df368db545357e25025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:09:87:97:88:70:09:3a:c1:31:db:f7:4b:ee:
8b:5f:ec:7d:89:8b:62:3a:d2:b1:35:56:e3:23:a4:
bb:a2:4d:72:be:f6:67:20:ec:e2:be:de:b4:1a:db:
65:cc:fd:28:68:ea:51:3f:9b:61:43:b7:30:f2:3e:
a5:f4:d5:67:92:5b:f3:0a:ca:12:e8:70:b4:8e:21:
c8:2f:71:c8:bf:24:e5:f8:87:08:96:8c:cc:9f:42:
9c:e8:55:22:2b:40:1c:1e:28:f3:48:7a:0a:ef:22:
49:27:28:28:67:b6:dc:f9:2b:6b:85:5a:a0:d1:53:
cc:c0:ff:ee:48:e6:97:ea:0e:d7:ab:77:53:ac:05:
2d:af:56:ab:ca:8b:15:93:fc:3a:e9:ee:4d:3a:3f:
84:5b:4a:09:0b:80:ef:e3:55:9a:c4:85:e7:2f:c1:
63:d4:c9:9e:18:23:a3:7e:2e:ab:86:38:fb:6b:22:
77:ff:af:cd:47:74:86:ff:11:82:3e:09:cc:cf:4f:
c1:e4:0a:df:02:db:f1:f3:61:bb:68:0b:54:65:d7:
17:db:24:87:18:3d:81:43:80:87:f0:30:56:d4:d6:
dd:3a:00:dd:1e:28:63:c2:9e:0e:f6:c9:d5:31:f9:
68:d4:d7:b8:f6:5b:e2:61:9d:ef:88:d2:7b:81:a6:
c5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F0:C7:4D:4C:73:7C:62:A6:5C:0D:F3:68:DB:54:53:57:E2:50:25
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5c:dc:37:69:59:9a:37:05:33:f0:cf:df:72:e8:a2:2b:03:
23:83:23:60:75:ba:d3:a1:3d:9d:7d:4a:41:04:6b:0a:da:29:
b6:9b:a4:11:e9:2b:84:4e:25:48:d1:f4:bf:d9:0a:2c:c5:45:
ab:2e:0a:9c:82:82:4a:33:28:26:bc:1f:48:c7:73:a6:5e:58:
38:40:ca:c0:7b:b9:23:eb:b4:ab:20:01:30:a3:fb:62:bd:a2:
19:3f:1d:be:17:d8:cd:3f:88:75:a8:ff:c7:f0:06:7f:b3:9b:
2c:17:40:c1:33:51:b0:6c:04:bb:4c:6e:95:cc:5d:b5:5b:61:
9b:88:d5:7a:c9:cc:ce:d2:f1:20:a3:b1:70:ac:c1:bb:2d:9d:
be:97:02:8e:d1:f2:a0:b5:99:28:0b:d4:b3:20:0b:d1:0b:e3:
b2:be:5f:09:43:d9:45:9a:7b:e9:0d:97:a9:b3:22:11:c3:50:
ee:7a:05:2c:01:2e:cc:83:63:0a:44:d7:ca:e6:a9:a7:ae:1a:
70:44:4a:6f:ea:46:4d:e2:1a:aa:4e:c3:83:e2:f3:9b:80:a5:
67:14:49:75:30:59:85:12:06:99:17:93:4e:de:35:c7:41:8a:
ec:26:a4:8d:76:3c:ee:eb:2f:ea:31:68:c4:68:cc:b5:22:18:
60:00:66:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:22:31 2026 by rpki-client