Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
File: yOx8SlcVXOjexbHNYv-oQBexb1g.mft (raw, json)
Hash identifier: bxGCpYL0NN4a/88wmgoQtIfAAKJVqBPHZ/HnTY8wXao=
Subject key identifier: 48:AC:46:B6:36:92:24:3D:E9:17:95:CA:A3:BF:19:2E:A0:4E:32:50
Authority key identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
Certificate issuer: /CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Certificate serial: 019D39AE5C0C2DFBA3081581830248A742CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
Manifest number: 07B3
Signing time: Sun 29 Mar 2026 13:00:21 +0000
Manifest this update: Sun 29 Mar 2026 13:00:21 +0000
Manifest next update: Mon 30 Mar 2026 13:00:21 +0000
Files and hashes: 1: LA3jFcuaqgILmHo9nTpg4K4H2wU.roa (hash: kxF22odJcoiHzXYLzYGjkdPZsm3zZB8qlfFcOiIEMd0=)
2: yOx8SlcVXOjexbHNYv-oQBexb1g.crl (hash: neVVdh3F/LYnj1DZjL2sGaFt0wgXPlBa9pCRr/Ls/Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:5c:0c:2d:fb:a3:08:15:81:83:02:48:a7:42:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Validity
Not Before: Mar 29 13:00:21 2026 GMT
Not After : Mar 30 13:00:21 2026 GMT
Subject: CN=48ac46b63692243de91795caa3bf192ea04e3250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:36:dc:77:8d:24:10:3b:90:8c:19:6a:82:
70:c4:86:52:ca:f6:dc:06:0d:19:b8:55:9b:33:0e:
e3:9d:19:7f:48:e0:39:9a:c8:c5:0b:70:c9:2f:9b:
ae:c5:43:50:6f:4a:ae:a5:3d:9b:e4:57:f2:be:84:
b8:56:c1:70:c5:50:a3:36:0f:ab:be:ad:51:2c:76:
95:34:64:3d:21:d5:cb:f5:2a:6d:36:f8:33:77:5d:
5a:1e:be:fe:51:4c:39:17:56:3b:46:27:5b:a6:28:
ff:58:c4:11:9f:14:05:37:af:48:31:ac:52:a3:8f:
e2:7b:2b:8f:df:7c:c3:5c:55:8a:9b:87:66:d5:c4:
05:4c:e0:b0:71:79:62:22:18:2b:db:18:57:f3:53:
dd:93:99:7e:27:58:d6:92:2b:97:cd:13:08:4a:c2:
56:b2:2b:70:88:de:44:a2:16:4d:8b:8f:02:2a:81:
40:5d:c8:91:d5:0f:ff:6e:4c:22:e9:8f:31:bc:4e:
b7:a9:2e:f1:48:30:8c:6d:b0:fe:33:a1:b0:e6:7d:
68:aa:b0:7b:ac:1c:5d:79:d2:dc:53:60:7a:3f:e3:
73:35:a3:59:cc:8e:bc:91:e4:81:73:db:24:ea:a6:
77:04:0f:18:07:16:8a:f7:bf:3d:14:09:44:ad:35:
db:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AC:46:B6:36:92:24:3D:E9:17:95:CA:A3:BF:19:2E:A0:4E:32:50
X509v3 Authority Key Identifier:
keyid:C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1e:a5:10:c9:50:83:d5:b1:b4:c6:8c:91:53:d5:cb:46:28:
61:fe:c4:c0:72:4c:30:3d:d8:3d:85:63:1f:cc:7a:8c:6b:c3:
92:ff:64:62:f0:83:32:22:3e:07:16:1a:90:24:fc:0a:cb:a9:
19:7b:95:f8:ca:e1:c4:d4:72:2d:dc:9d:c7:93:a9:42:7a:1a:
c1:d0:59:e1:07:a1:54:fd:78:e9:8c:f4:25:73:af:2c:8c:2a:
9e:47:ff:ed:10:90:04:05:e3:7f:89:cf:53:d1:c2:86:76:99:
6b:a1:b9:c7:78:7f:27:57:9b:c3:c7:82:51:1f:b6:73:d2:c0:
d9:77:0f:d7:60:5a:d5:e9:c3:e0:7f:f8:b2:85:f2:0f:9d:60:
06:d7:d4:60:52:ed:7a:86:30:e5:fd:99:e0:3a:a2:fa:ae:1d:
3b:e4:09:ce:9d:a3:3f:28:d4:83:7e:03:0f:10:fd:90:ac:31:
62:d4:78:10:a8:4e:7e:e1:89:d3:d7:8d:47:7c:46:a8:91:cb:
4d:2e:c9:52:83:b2:4a:15:3a:78:e3:15:4e:2a:59:1a:0b:37:
ba:b6:c9:6c:b5:35:99:f8:1c:5a:f1:d3:1d:7d:95:50:46:cd:
f9:69:30:94:b6:f9:ba:ce:1a:6d:aa:fe:91:5a:69:ff:6b:de:
b6:dc:b2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:25 2026 by rpki-client