Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
File: y5idLhUgGyDjQIjdHARVslRE-Pw.mft (raw, json)
Hash identifier: A7HCMGFIBhn/kf5php0fFWTAdCfXHgbZt+NslmflfjI=
Subject key identifier: 52:22:BB:B4:C9:08:5B:E2:8B:DA:4B:9E:41:88:67:60:20:5B:7C:B4
Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Certificate serial: 019D25BAAC2F6BE4059C0A835E425C1AD9D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
Manifest number: 0EBF
Signing time: Wed 25 Mar 2026 16:01:23 +0000
Manifest this update: Wed 25 Mar 2026 16:01:23 +0000
Manifest next update: Thu 26 Mar 2026 16:01:23 +0000
Files and hashes: 1: H7NifDoSU6PPqAYGiGzy4_-XfNw.roa (hash: sk5Lex95/S0IAQQhow818tnsCZwdWLab0EALvw3QhYw=)
2: y5idLhUgGyDjQIjdHARVslRE-Pw.crl (hash: CM2B7Ek6U0Gy8RuVm8ohECuKvYuXWGKi7WjEEOWKkU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:ac:2f:6b:e4:05:9c:0a:83:5e:42:5c:1a:d9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Validity
Not Before: Mar 25 16:01:23 2026 GMT
Not After : Mar 26 16:01:23 2026 GMT
Subject: CN=5222bbb4c9085be28bda4b9e41886760205b7cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a8:b6:49:54:b0:28:2e:77:a3:37:78:66:d5:
45:e8:d6:37:3a:83:da:7a:c1:f6:db:17:61:b0:e6:
bf:fd:70:ac:de:97:6f:ff:37:6f:6c:6e:6e:79:30:
dc:f0:05:33:8b:e4:5b:63:b6:de:ae:94:24:96:54:
fa:c2:bd:a3:de:3d:02:8a:1d:80:25:4b:ca:4a:7c:
88:e6:dd:08:76:6d:69:65:f7:32:c3:6c:92:19:8c:
c2:14:c1:ed:c2:8c:f7:a6:9a:20:5e:42:1a:e6:31:
0b:21:cd:7b:a6:35:90:a7:b1:98:5d:33:04:ea:89:
6a:43:9d:f8:41:c1:f7:35:cc:3f:de:c3:ac:29:f3:
7a:28:59:be:c1:a4:8d:7f:28:51:4a:4f:26:e5:de:
c2:b6:e7:39:e4:aa:e3:60:f1:10:2b:f1:96:dd:94:
ca:58:49:6b:38:ff:e2:61:1e:b4:2f:a3:44:96:fc:
c0:84:51:d6:81:08:11:cd:62:2e:3b:77:e5:64:1e:
a4:cc:bd:7f:93:8d:31:b7:ae:86:fd:d6:7a:94:cd:
59:c0:26:5e:a3:65:5c:2c:ce:16:e5:40:04:0c:02:
dc:6a:de:a3:56:a3:8d:6a:ec:f2:c0:32:71:ee:f3:
1c:75:46:60:3e:44:7f:68:f7:9b:af:e3:88:b5:32:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:22:BB:B4:C9:08:5B:E2:8B:DA:4B:9E:41:88:67:60:20:5B:7C:B4
X509v3 Authority Key Identifier:
keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2c:ea:38:5a:69:59:36:2d:4c:63:ba:82:e2:d9:68:d9:94:
c6:50:fc:a0:55:24:72:de:ae:72:c0:c9:fe:fc:ce:43:03:cd:
39:bd:1c:82:3e:8e:af:6a:a8:7f:f4:c0:6b:28:a1:52:34:43:
e6:22:14:1f:e3:25:71:70:53:40:d3:95:2d:7a:b4:da:44:78:
35:82:e7:88:79:ab:1b:b5:ec:c3:dc:99:f0:c6:5f:b3:37:1f:
f7:08:96:6e:b6:97:85:c0:4e:dc:44:a0:36:a0:44:e6:ff:b9:
07:e1:d3:ef:3f:37:41:dd:3d:3c:00:2d:d6:b8:14:89:98:62:
ae:1a:31:26:87:0c:c9:1f:2e:0a:69:d7:5f:63:87:09:b8:2d:
66:94:b9:8f:0e:1d:49:1c:3f:ef:2e:dd:4d:6e:6c:69:ab:54:
86:ed:de:f0:85:fc:7d:02:6b:a7:61:fb:82:14:8f:94:9c:4b:
44:d9:83:02:da:26:41:59:9b:0f:cd:93:09:20:c8:c6:82:7c:
a7:9c:3f:fa:de:21:99:4e:ec:f9:4b:43:1f:83:7d:ed:ae:00:
8e:8e:c1:f2:fd:15:04:5b:2a:db:47:fd:31:6d:35:bb:6d:d2:
d6:47:2a:97:4e:62:4e:f3:4a:5f:d8:37:e0:89:93:3e:b6:79:
e1:fd:cb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:34 2026 by rpki-client