Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
File: yOx8SlcVXOjexbHNYv-oQBexb1g.mft (raw, json)
Hash identifier: 2lKZnNi7/UW1acRlU12okr4+eONs92mHxe7O1pFwEC0=
Subject key identifier: 2B:E6:58:7E:E5:41:1C:57:B4:36:3A:FC:09:F9:51:E9:64:14:D9:7E
Authority key identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
Certificate issuer: /CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Certificate serial: 019E9B1721D9743BCD97283C542BA8EC5D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
Manifest number: 086A
Signing time: Sat 06 Jun 2026 04:00:44 +0000
Manifest this update: Sat 06 Jun 2026 04:00:44 +0000
Manifest next update: Sun 07 Jun 2026 04:00:44 +0000
Files and hashes: 1: LA3jFcuaqgILmHo9nTpg4K4H2wU.roa (hash: kxF22odJcoiHzXYLzYGjkdPZsm3zZB8qlfFcOiIEMd0=)
2: yOx8SlcVXOjexbHNYv-oQBexb1g.crl (hash: lRuliXsiFQyhpVLu7kgZ2uY/fWSRDwhk8EXb1I5+9kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:17:21:d9:74:3b:cd:97:28:3c:54:2b:a8:ec:5d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Validity
Not Before: Jun 6 04:00:44 2026 GMT
Not After : Jun 7 04:00:44 2026 GMT
Subject: CN=2be6587ee5411c57b4363afc09f951e96414d97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:ef:70:d2:2c:70:7b:90:4d:6f:ec:9d:1e:
48:4a:44:db:8b:0d:9c:d1:61:8e:ff:93:4c:d7:9c:
70:80:bb:5a:24:9f:10:1d:a1:32:a8:67:03:95:8e:
59:80:60:b3:99:0b:d5:0e:ed:89:58:d6:a1:ff:44:
fd:d5:91:72:30:16:a3:ff:49:c2:15:bb:67:c1:55:
06:67:40:7e:17:49:ad:04:cd:87:48:94:4b:15:b8:
8d:c7:2a:55:5b:61:94:b6:05:89:ec:72:e9:0e:0b:
bf:17:59:30:1e:aa:b7:73:d7:52:9b:fb:a2:f7:dd:
39:96:c9:4e:01:d3:38:3e:1a:4c:40:c4:d3:c0:a7:
5a:37:dc:cd:6f:72:7b:e8:8f:5a:cd:96:9a:31:c7:
6b:e6:2f:5a:97:51:f4:eb:fa:a5:7d:26:05:6b:75:
25:63:96:d8:28:12:5d:12:aa:ad:ac:a8:57:8d:40:
4d:53:e8:15:c9:d6:07:ce:e5:d4:04:96:90:78:13:
b6:9d:53:d4:ca:30:93:01:0c:86:ec:f8:8c:40:25:
b5:fe:2a:ba:2c:21:66:75:96:7d:3e:32:18:d3:31:
b7:af:f0:02:45:79:6f:ed:f2:82:ef:bd:83:6c:b1:
60:88:d3:13:e5:80:ec:c2:f9:fd:63:5f:0d:f6:7e:
19:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E6:58:7E:E5:41:1C:57:B4:36:3A:FC:09:F9:51:E9:64:14:D9:7E
X509v3 Authority Key Identifier:
keyid:C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5b:fe:cc:df:c6:41:ba:c0:03:96:30:d8:f6:11:4c:89:ef:
b7:9a:f8:16:e8:13:0f:ea:a5:38:82:36:f2:cb:b1:38:98:fc:
e3:a5:26:ab:5c:08:64:b9:ca:7a:9c:d4:16:63:dd:19:e4:54:
2a:cd:5a:e0:a1:9a:8b:49:94:3c:fb:7e:06:66:17:fb:76:f3:
b1:ca:30:fa:57:ef:f6:d6:5e:90:1d:c7:1f:39:3f:02:d5:68:
21:53:55:33:33:0c:83:d0:51:97:88:69:3b:82:36:c8:8f:31:
85:d0:16:10:85:6c:ba:10:20:7e:33:be:b3:98:64:60:b1:05:
2d:66:5d:72:93:40:82:51:d8:d7:c5:36:72:34:7b:92:a4:3b:
28:80:b1:a9:17:00:3c:f1:80:a2:7b:fc:79:bf:a1:42:1e:15:
e8:f2:7d:ea:f2:d5:18:5c:e2:bb:c8:e2:2b:8d:be:f7:62:5a:
7f:e8:d0:eb:64:07:65:f7:07:3c:ee:4b:ef:e6:82:20:d0:be:
d9:20:bc:f0:c5:76:c1:ec:62:99:12:bc:89:2f:8f:26:b7:69:
8f:8f:a8:cd:f6:1f:6e:5a:02:f6:af:ee:db:5b:60:fe:08:7a:
4a:f0:7a:9a:f5:76:17:79:98:e1:ad:71:62:a1:98:c6:67:81:
48:99:b9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:21:09 2026 by rpki-client