Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
File: yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft (raw, json)
Hash identifier: k8G7wKklCtjIoD1b3v69oy0qUDevmPrstlzUXJHn3hQ=
Subject key identifier: 8C:7F:D9:01:43:7C:71:29:4E:D5:92:FA:EE:66:B1:E0:44:3C:0A:E4
Authority key identifier: C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
Certificate issuer: /CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Certificate serial: 019D3A54B1D6014C2A0061E815968FFF9BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
Manifest number: 103D
Signing time: Sun 29 Mar 2026 16:02:02 +0000
Manifest this update: Sun 29 Mar 2026 16:02:02 +0000
Manifest next update: Mon 30 Mar 2026 16:02:02 +0000
Files and hashes: 1: JY81usnotweZyZdSahI8RyYPcPQ.roa (hash: a+Ax7M2k213Mauckfl1KLZA2jvBbE/xfAhO6740Uqk8=)
2: yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl (hash: yS535t7hMVcQogNt9mmoNDOTlApvS83zVfIGvOuxs5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:b1:d6:01:4c:2a:00:61:e8:15:96:8f:ff:9b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Validity
Not Before: Mar 29 16:02:02 2026 GMT
Not After : Mar 30 16:02:02 2026 GMT
Subject: CN=8c7fd901437c71294ed592faee66b1e0443c0ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3e:82:b6:75:90:6c:c2:bb:a4:ce:4c:da:83:
38:71:d2:26:0b:1d:a3:22:4c:23:6c:d3:89:2f:64:
99:ac:7d:4b:39:29:44:27:20:f0:2b:6f:c1:83:86:
8a:56:b1:8b:05:8f:51:55:20:db:10:5a:30:db:2e:
b4:c9:62:1d:08:35:3b:ef:32:ae:fd:af:a2:e5:13:
34:17:b3:51:30:96:62:57:be:0a:cc:96:51:3a:e3:
61:b0:ca:fc:49:5d:be:b4:69:70:30:84:46:52:7a:
ee:0d:fa:74:4f:e8:04:5c:ac:df:a1:91:96:a7:49:
80:9f:e3:f4:41:c7:0f:1d:dd:19:bd:4d:a8:12:5c:
ed:2b:77:4d:e7:82:3b:f4:69:62:b3:2b:0f:6c:52:
ec:b4:55:55:e1:f5:6e:33:f7:12:dd:ef:00:27:0a:
32:b7:a1:fe:46:2c:d7:01:3a:55:77:13:34:8e:39:
15:c1:51:ee:3c:35:22:3c:44:71:36:5f:96:b0:98:
c3:99:55:f7:ea:1e:e4:5c:44:19:fe:f7:bb:03:17:
db:62:66:98:c0:81:c6:8e:10:f9:c7:70:bb:b3:bd:
ad:89:b6:42:8d:f7:59:44:67:2a:91:93:d3:0a:68:
f6:0c:ce:08:c5:da:23:42:73:9e:ef:c8:00:d3:69:
c0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7F:D9:01:43:7C:71:29:4E:D5:92:FA:EE:66:B1:E0:44:3C:0A:E4
X509v3 Authority Key Identifier:
keyid:C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d9:83:0b:e1:a2:41:6e:51:31:38:ea:dd:a8:09:17:8c:3d:
b3:1a:ab:7d:cb:90:72:85:50:1f:10:d4:be:19:1b:54:bb:c3:
72:85:b4:c1:dc:07:f4:be:92:96:73:c3:ff:1e:ed:59:2a:49:
86:dc:78:15:dc:db:34:01:f9:4a:77:fa:25:0b:5b:1a:24:56:
6a:eb:be:97:6e:75:00:e7:4d:1f:3c:ae:9e:2d:bc:65:94:41:
f7:59:4c:8a:00:e3:2d:89:06:63:d1:3e:7c:c2:fb:a5:d0:b1:
b6:73:23:57:48:25:93:49:29:ab:ed:4a:11:d7:69:f8:21:45:
fe:d4:2f:b5:6e:40:54:c2:ac:ac:59:83:0c:9f:8a:cd:78:3f:
bf:f6:14:76:9c:ba:a6:58:91:ac:71:bc:d9:cc:41:eb:ff:55:
66:8a:3d:cf:be:66:72:82:61:25:d0:c5:e3:57:17:13:e6:9a:
e9:85:df:ae:b5:71:fa:63:17:ab:cf:9a:ee:f4:f1:21:8d:67:
f7:21:46:29:75:7c:02:b4:2a:df:4d:fe:1c:41:74:9c:66:52:
b8:ae:bc:fa:a6:ee:6d:0a:25:d3:b8:ca:04:2a:29:38:cf:18:
10:cf:0b:89:ee:d3:16:84:8c:bd:2a:cf:3c:35:36:01:4a:d1:
97:92:3c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:23 2026 by rpki-client