Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier: ykEo5LAqe6WVz+dMfcnBaRxk4CdZIIrpLH5FSw/RLU0=
Subject key identifier: 42:37:95:B4:C1:D1:31:0E:16:83:EF:EC:5B:3E:18:25:7A:FE:49:72
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial: 019D37895695003F741CACED5E14B010BC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number: 0ED2
Signing time: Sun 29 Mar 2026 03:00:40 +0000
Manifest this update: Sun 29 Mar 2026 03:00:40 +0000
Manifest next update: Mon 30 Mar 2026 03:00:40 +0000
Files and hashes: 1: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: dTzhEDfQpwkJe8lW39VpkPJ6n2hFxyhBiyBs1z6KkbU=)
2: yZypMalDZN_1H34j86whs9HOsns.roa (hash: QTHAsSMIZiio2WTla/ss5QYgZ5yq+TMYt6pBCLwJH0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:56:95:00:3f:74:1c:ac:ed:5e:14:b0:10:bc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Validity
Not Before: Mar 29 03:00:40 2026 GMT
Not After : Mar 30 03:00:40 2026 GMT
Subject: CN=423795b4c1d1310e1683efec5b3e18257afe4972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ad:44:61:9f:11:16:19:b1:2c:05:cd:b8:91:
fe:59:44:dc:4f:0b:79:69:75:64:64:68:9e:1a:bd:
17:50:ba:49:fd:68:56:60:2e:ef:2a:01:8f:0d:13:
dd:6d:27:0f:c3:bc:f2:57:18:aa:9a:43:78:0c:83:
c2:e2:94:0f:93:c4:d5:7a:f0:93:75:90:1c:31:c4:
de:e6:94:90:e9:0f:01:65:06:b3:31:28:e1:ee:7f:
6b:97:c3:03:fe:0e:ea:eb:e2:f4:06:76:7e:39:59:
b8:ef:82:d7:97:15:2a:da:c5:ad:05:05:5f:52:30:
71:b0:87:e1:de:a9:2d:53:1c:4e:8c:2a:22:24:15:
29:5f:c7:ba:b7:fe:c2:68:8d:51:4c:89:b0:37:4d:
4a:40:d9:16:fd:e5:d9:72:9b:6c:b6:1e:90:a0:3d:
a9:cf:cf:78:ba:b4:c2:f3:d1:74:22:ed:38:2a:ba:
d8:f0:26:52:a7:c9:55:81:f5:2a:73:c6:32:d8:64:
d3:85:c9:79:16:a0:34:c1:92:a5:7d:f1:15:17:3a:
a7:a9:5e:6e:9b:fe:55:27:5e:a6:78:40:f5:83:bd:
a5:03:7d:e0:1e:4f:8c:bf:9f:4a:4d:95:7a:d0:ac:
2d:35:f9:18:65:19:cf:7b:76:d4:e2:35:b7:57:0f:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:37:95:B4:C1:D1:31:0E:16:83:EF:EC:5B:3E:18:25:7A:FE:49:72
X509v3 Authority Key Identifier:
keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0d:0f:19:9a:be:b3:e3:80:a8:e7:7f:fd:cc:67:a0:b8:76:
97:91:f8:90:46:b4:c2:d0:b1:4a:49:5a:47:ee:f6:9b:c4:12:
08:ae:ad:1f:83:74:c0:21:6e:6c:c0:5b:2e:dc:51:34:55:bb:
05:62:20:59:32:76:ac:d0:29:f9:9b:42:59:5e:47:1e:44:2c:
3b:bf:f7:81:36:fc:2e:8f:9d:21:88:1c:04:79:d5:f7:56:6e:
d9:e6:0f:0d:ea:f3:5c:71:6d:78:1e:0c:98:46:58:e7:16:78:
8f:4c:2c:d9:26:d5:7f:e3:5e:0b:c1:c9:6a:b3:e1:94:0f:d8:
06:63:d6:c9:3c:27:1c:34:27:de:dd:2c:e1:8f:a2:6d:ef:a3:
4e:ec:dc:54:5e:d4:74:32:06:b4:09:0f:d7:23:90:02:37:93:
fb:6a:99:aa:a1:ae:1c:03:7e:5d:89:e6:fb:f0:84:39:6b:9c:
ed:02:fe:d5:65:42:31:34:cd:aa:0e:74:c0:7e:09:c2:13:f2:
89:12:91:a8:9c:f7:1a:ca:68:eb:43:f9:51:9d:ce:8c:32:8f:
9a:f2:9b:16:d7:cc:0c:88:26:72:de:b5:91:5f:55:e7:ce:7c:
3e:3d:ca:13:32:6f:da:d0:59:e5:41:55:10:d0:c0:93:29:bc:
ae:c1:bb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:34 2026 by rpki-client