Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
File: y0ANSAMtEp2UvQjtJxepofTPL0s.mft (raw, json)
Hash identifier: ZgP8WMZP3cHjHQUWzCNXktnfIyH9owAlHswbISdYoFQ=
Subject key identifier: 92:E0:8A:23:02:0E:C3:74:C4:87:E6:0C:58:4D:F7:56:7F:18:43:AC
Authority key identifier: CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
Certificate issuer: /CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Certificate serial: 019D2695DF80F7EEAE5BFFF4ADBD1DABE0EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
Manifest number: 07E8
Signing time: Wed 25 Mar 2026 20:00:49 +0000
Manifest this update: Wed 25 Mar 2026 20:00:49 +0000
Manifest next update: Thu 26 Mar 2026 20:00:49 +0000
Files and hashes: 1: 1-LKZq6XNPJkWbyIzGez7MxFQ8jE.roa (hash: Y5nTzS0daALZPNuteXZIXM9RcMdrGEprlXo2RcFxCsA=)
2: y0ANSAMtEp2UvQjtJxepofTPL0s.crl (hash: AjmN52/lVugcSHw5eUbF8b/i3fE1Nzha9cbi3nkDlwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:df:80:f7:ee:ae:5b:ff:f4:ad:bd:1d:ab:e0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Validity
Not Before: Mar 25 20:00:49 2026 GMT
Not After : Mar 26 20:00:49 2026 GMT
Subject: CN=92e08a23020ec374c487e60c584df7567f1843ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:bc:fb:98:45:f7:25:68:4a:cd:fa:db:bd:
40:28:6e:2e:41:53:26:6b:77:9b:4b:9c:1c:1a:10:
af:46:1d:cc:2a:08:66:aa:ad:06:3c:19:5d:99:a2:
80:ec:cb:e8:e0:de:57:6d:27:80:3f:c6:98:ee:af:
bd:80:56:b8:4d:81:d9:50:86:35:4d:3b:b9:d3:d7:
19:08:2b:ce:dd:bd:9b:cd:80:f0:c7:f7:bd:28:44:
95:57:ad:8f:b8:80:dc:7c:d5:aa:be:b0:ac:fc:1b:
48:26:46:24:92:ac:e4:f7:b1:eb:70:da:0b:c5:6c:
bd:54:a6:f7:e5:0d:de:83:69:2b:00:c8:2f:4b:f9:
5f:be:35:71:22:db:99:94:0c:9e:09:59:50:49:83:
57:1e:87:5e:cd:48:30:64:62:58:c7:0c:c2:f2:c4:
60:9b:bb:e3:77:f3:d3:8d:41:81:fd:c7:d7:ef:80:
e6:4d:d7:d6:a9:ad:ee:1d:c7:74:3a:c9:44:93:90:
e9:9b:91:3a:87:83:cc:c4:f1:a5:a4:13:4a:55:f5:
b9:09:17:be:a8:be:85:6f:61:ba:f9:b5:bc:fa:e9:
fb:80:b1:ed:d9:54:4c:30:90:76:86:4d:fb:50:1a:
04:6d:49:fa:73:06:e2:b4:11:7c:84:5e:f7:1d:c8:
df:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E0:8A:23:02:0E:C3:74:C4:87:E6:0C:58:4D:F7:56:7F:18:43:AC
X509v3 Authority Key Identifier:
keyid:CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:52:56:49:a1:bf:ce:e9:cc:8d:1f:ed:71:92:9b:32:94:45:
8a:cb:9a:e0:13:3a:04:cf:4b:99:d4:74:de:36:1f:26:e5:83:
76:e0:62:e6:ca:ba:31:0b:9e:1d:24:c5:6e:01:39:3f:1c:95:
ba:20:cb:af:0d:66:72:6a:15:8c:0d:4a:78:55:f5:78:60:c2:
97:3a:73:39:9e:9d:9e:be:f3:8d:17:d6:f1:49:57:fe:ea:70:
8a:fb:25:b3:57:9b:87:fa:74:b5:a6:d3:0b:89:c2:f6:36:b1:
fc:e5:b7:97:bf:fd:09:14:f1:73:e1:9e:aa:cf:ee:93:c8:ee:
a2:fd:02:7b:f0:38:44:9e:04:97:56:70:b8:c9:0e:82:02:f3:
5c:e8:11:15:27:4e:ed:4c:67:26:56:29:0f:c5:a9:4f:4c:22:
10:b4:6e:8e:4b:7e:0b:05:39:42:03:15:ae:6b:b6:7a:cf:51:
84:72:d0:37:e7:01:c9:8a:84:f2:0b:02:8c:0a:1e:23:64:c9:
30:c8:9f:73:57:41:3e:01:e2:f7:df:96:32:1b:7b:7d:86:a7:
ce:d2:ed:83:79:34:46:f4:d2:eb:59:d6:44:06:f3:2d:b3:17:
6f:66:fe:ca:0a:b1:e5:91:f6:d6:7f:ee:da:e9:03:e5:bf:dd:
69:d4:97:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:22 2026 by rpki-client