Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
File: y5idLhUgGyDjQIjdHARVslRE-Pw.mft (raw, json)
Hash identifier: diYGQbolF7c4l6itHn+DsAOaXCoyvZtWe4OQMP+dG0Y=
Subject key identifier: A7:E4:76:DD:26:92:AB:2E:97:BC:06:3B:E0:9F:3E:EE:2B:08:EF:87
Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Certificate serial: 019D352D6C54307155CB5606D3D6BB135C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
Manifest number: 0EC7
Signing time: Sat 28 Mar 2026 16:01:02 +0000
Manifest this update: Sat 28 Mar 2026 16:01:02 +0000
Manifest next update: Sun 29 Mar 2026 16:01:02 +0000
Files and hashes: 1: H7NifDoSU6PPqAYGiGzy4_-XfNw.roa (hash: sk5Lex95/S0IAQQhow818tnsCZwdWLab0EALvw3QhYw=)
2: y5idLhUgGyDjQIjdHARVslRE-Pw.crl (hash: GQfieQhBDDnH2WMxftoNjGf8xg39spm0au6tEchMh8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:2d:6c:54:30:71:55:cb:56:06:d3:d6:bb:13:5c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Validity
Not Before: Mar 28 16:01:02 2026 GMT
Not After : Mar 29 16:01:02 2026 GMT
Subject: CN=a7e476dd2692ab2e97bc063be09f3eee2b08ef87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:25:cb:af:13:9c:1e:e8:3c:41:0c:75:aa:f6:
97:6e:5a:95:b2:4d:57:38:c6:50:48:5a:5e:3d:7c:
41:4e:9e:bf:43:3f:cc:5c:ef:17:a0:d2:74:d1:62:
d1:fe:f4:01:e7:a3:6e:49:74:bb:d5:46:dc:4a:1e:
e1:69:2f:c5:96:10:b5:89:13:61:48:7e:51:5f:5a:
b2:f8:a1:7b:b1:b5:65:b9:e3:9b:d2:98:d3:1f:3b:
f2:cd:62:3e:8e:65:78:e6:16:b0:08:91:3b:5a:12:
ea:2b:25:de:71:24:1c:df:02:8f:f3:9d:a0:14:c6:
70:4e:5a:8f:fd:33:e6:ef:87:eb:7b:53:b9:f2:6a:
a6:25:c2:c4:35:7f:5c:43:0b:ea:08:71:1b:60:78:
b7:24:47:90:8b:49:72:a1:3a:fb:0e:89:ca:c8:e2:
4a:37:fa:bc:2c:14:c9:27:f3:e5:2b:d4:58:04:f2:
03:b1:15:b2:3e:46:26:6c:01:93:19:e0:84:9e:64:
cc:32:e3:68:c9:39:c6:a9:ce:26:0d:47:8d:78:55:
66:dc:5f:77:72:ab:d0:02:28:42:3b:67:37:a9:47:
16:5c:ee:e6:61:d5:72:59:bc:60:d3:e0:c9:3a:30:
e5:0b:98:7a:aa:fa:d9:bf:64:88:2b:fc:4f:e1:23:
1a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E4:76:DD:26:92:AB:2E:97:BC:06:3B:E0:9F:3E:EE:2B:08:EF:87
X509v3 Authority Key Identifier:
keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:61:0b:05:78:6e:a3:8c:31:b4:bd:98:75:e6:bb:c7:6e:ae:
ee:9d:ad:02:80:ef:d3:fe:56:58:55:52:01:77:32:8f:34:29:
2c:c8:f6:0b:ca:e3:91:27:81:99:d6:d9:ae:df:99:ee:4e:20:
67:bf:a1:fd:8e:23:29:7d:13:40:0d:cb:c8:a2:a1:20:f2:52:
a5:67:d4:58:18:c2:3a:70:2b:a4:2e:f0:a5:8c:58:e4:46:7c:
e1:2e:c9:ef:59:e5:ae:0e:c3:da:fa:e2:a4:9b:72:26:45:4d:
62:38:ea:9f:1c:cd:cf:85:ad:28:6e:27:74:41:0e:03:91:14:
53:a7:92:32:c4:bf:aa:76:94:8f:d0:0a:5b:c0:72:d7:4a:fc:
48:a7:53:7a:63:df:05:2f:80:db:99:9c:56:77:07:5e:83:0b:
30:f7:d7:88:c1:31:ad:56:c8:21:b1:ba:6d:fb:6c:db:79:96:
e0:d8:7f:0d:27:78:88:da:86:4b:ff:2c:55:52:b2:77:10:88:
89:c7:f8:aa:fe:b2:63:4c:9e:54:e5:d8:90:a0:0a:01:94:c2:
ff:5b:38:bb:60:57:70:bc:87:ae:fa:04:94:4d:d3:21:6f:41:
d7:15:2d:b4:67:76:af:57:e0:0c:40:b2:08:2c:9d:4a:cf:74:
05:8e:8c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 22:10:05 2026 by rpki-client