Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
File: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft (raw, json)
Hash identifier: 9ei5Zug1aghuKJ9DG5s4XDpnFH7qJOhZ8zbLkUC+MWI=
Subject key identifier: 2F:46:B7:6E:92:03:BB:E6:FB:FB:46:50:D9:6A:2D:BF:A7:E4:5E:1C
Authority key identifier: C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
Certificate issuer: /CN=c8e50ca17134837a50d3063d43d443385abe6f49
Certificate serial: 019D26CD16B1BD4587DA8406E75FA41A428F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
Manifest number: 17FB
Signing time: Wed 25 Mar 2026 21:01:07 +0000
Manifest this update: Wed 25 Mar 2026 21:01:07 +0000
Manifest next update: Thu 26 Mar 2026 21:01:07 +0000
Files and hashes: 1: KruYfdwnUNYxfXkcEK0pRrgHkqg.roa (hash: UrG6tcE8plAV8A8NaRxXB6Nz6rhzF4jRdCMcfNiMj5Q=)
2: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl (hash: fHMXOQGOri2H1w9T/gNDe1UyLFYxePDgiYTQHDUpuuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:16:b1:bd:45:87:da:84:06:e7:5f:a4:1a:42:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e50ca17134837a50d3063d43d443385abe6f49
Validity
Not Before: Mar 25 21:01:07 2026 GMT
Not After : Mar 26 21:01:07 2026 GMT
Subject: CN=2f46b76e9203bbe6fbfb4650d96a2dbfa7e45e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:1d:7a:13:8d:94:31:53:8d:0f:35:dd:4d:
85:7b:19:03:25:7f:62:2a:6d:d2:9f:59:84:f9:53:
3c:66:c6:36:e7:ff:c1:b7:7b:e9:0f:55:e3:6c:e0:
ad:9c:1f:e7:2f:91:1d:92:0e:7c:d5:98:0f:04:bc:
0d:ef:21:ee:1a:84:19:d8:5a:de:e1:db:a5:2a:4f:
0e:a4:87:2f:01:39:05:a5:ab:fe:65:ac:84:9a:3f:
f1:2a:39:4a:37:ea:d4:d4:71:23:e1:ec:39:a5:86:
21:ad:42:ae:15:8a:81:eb:6e:4f:2e:ee:2d:4e:94:
a6:76:48:7e:3c:60:8c:bf:5d:31:8b:11:9e:10:8c:
65:a6:29:b7:f4:86:8d:57:6f:61:64:7e:22:86:13:
d5:b7:96:35:05:79:c7:f6:96:52:a9:84:7d:f9:8a:
38:95:90:62:e2:ca:1c:ae:98:cb:8d:14:2e:0e:f5:
d4:cd:8d:a8:5f:74:99:0c:00:84:51:5d:64:e5:21:
af:2d:d6:5b:1f:cd:37:25:48:73:15:81:12:72:c6:
57:d9:1c:89:79:f2:74:84:9e:1d:28:c7:76:9a:95:
8b:ef:b9:1d:06:61:be:3d:4c:e3:f6:8b:ed:9a:76:
6e:5d:25:01:3c:4c:ba:f8:79:31:0b:34:a0:3d:a8:
40:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:46:B7:6E:92:03:BB:E6:FB:FB:46:50:D9:6A:2D:BF:A7:E4:5E:1C
X509v3 Authority Key Identifier:
keyid:C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:31:c0:2d:6a:55:b8:bb:ea:4e:fb:f8:6b:27:c6:3a:c3:3e:
f4:b4:8f:c9:4f:aa:35:21:5f:72:52:d6:ed:a7:af:3e:cd:51:
65:b9:4b:e5:9b:84:9d:01:5d:1b:f6:28:de:da:37:04:ed:cd:
0e:4b:98:11:b2:75:45:4d:6e:46:16:21:15:52:6d:f0:fe:46:
54:74:ba:01:7a:b1:80:4c:f2:95:c5:e0:a7:b9:2b:e6:ed:ca:
91:4a:3a:ee:66:af:d3:05:6b:9e:43:46:6e:a5:9b:ad:19:0c:
0b:6f:10:93:26:f9:c3:78:c4:5e:61:00:d5:77:35:0f:ac:b1:
f3:81:65:49:50:67:54:9c:7b:5c:68:b2:de:a2:2f:92:44:ef:
e6:90:45:84:ec:e7:de:0e:35:12:c0:4c:cc:1c:35:ac:bc:d3:
65:4d:51:06:52:4d:a5:26:97:3c:63:83:53:39:b4:94:7a:42:
70:da:bb:c3:e8:ef:06:89:71:32:fb:78:2e:9a:ff:01:4b:a2:
bc:ae:22:a1:0b:e5:97:ec:1b:91:44:bf:28:63:ae:c9:a2:3a:
cd:db:3b:b7:bc:5b:84:a3:8d:dd:56:5f:d7:95:47:9d:51:54:
10:84:cd:d7:69:22:28:62:07:a9:13:30:66:d0:73:ac:fd:80:
98:74:43:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:40 2026 by rpki-client