Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
File: yOx8SlcVXOjexbHNYv-oQBexb1g.mft (raw, json)
Hash identifier: +l4v+c2xAaraVWwkygdICA2TjuFkyCOk7mHpGlgQzTY=
Subject key identifier: B0:B4:FF:2F:F6:6B:84:9E:58:61:9B:DF:8A:BB:D8:41:EB:B2:63:3A
Authority key identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
Certificate issuer: /CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Certificate serial: 019E1D90F1469C514B12AE63247187D167A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
Manifest number: 0829
Signing time: Tue 12 May 2026 19:01:38 +0000
Manifest this update: Tue 12 May 2026 19:01:38 +0000
Manifest next update: Wed 13 May 2026 19:01:38 +0000
Files and hashes: 1: LA3jFcuaqgILmHo9nTpg4K4H2wU.roa (hash: kxF22odJcoiHzXYLzYGjkdPZsm3zZB8qlfFcOiIEMd0=)
2: yOx8SlcVXOjexbHNYv-oQBexb1g.crl (hash: +a6CM/Y9sHehT3LBusJPRGwTqACME2j66foZRRG5Fzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:f1:46:9c:51:4b:12:ae:63:24:71:87:d1:67:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Validity
Not Before: May 12 19:01:38 2026 GMT
Not After : May 13 19:01:38 2026 GMT
Subject: CN=b0b4ff2ff66b849e58619bdf8abbd841ebb2633a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9d:19:e6:68:fb:4a:cb:ea:d0:69:e7:44:68:
fa:f0:3b:8e:60:c3:71:0c:43:73:2f:75:51:e9:86:
39:bf:e7:8f:dc:40:9b:34:8f:90:1b:92:d9:74:80:
c6:9e:36:92:51:65:a3:3d:54:8f:ee:61:69:fa:b8:
ca:83:a4:55:97:ab:ad:34:e1:47:54:76:d2:23:d8:
e2:04:37:dd:ae:bb:01:ea:55:8b:c1:cd:a0:77:63:
bc:17:52:9f:06:61:42:e3:2a:91:e1:98:c4:40:a5:
fd:67:e9:57:3a:af:22:5f:e5:a6:40:84:15:a2:3e:
5d:c2:53:fb:13:a6:85:75:9b:42:c0:14:fd:4a:14:
56:4d:28:6a:74:cb:b4:6a:0a:1d:45:bb:35:79:e3:
1b:a2:58:b5:02:48:c3:16:82:de:d5:0d:fc:0c:48:
3e:d0:e0:a3:ff:36:6c:d9:01:ca:b3:44:fc:bf:b0:
46:b4:6e:eb:9f:43:5d:09:2d:cf:40:ad:39:20:0f:
7b:6a:9c:7d:76:76:ba:20:e6:c9:52:97:28:70:19:
cd:79:d0:29:45:ba:a1:86:6c:a8:e1:18:f5:df:ab:
08:af:ab:c8:ef:f9:4a:cc:96:5b:0a:25:7b:b0:cc:
4e:db:41:a7:de:dc:83:b1:35:32:20:b6:dc:a9:17:
4b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B4:FF:2F:F6:6B:84:9E:58:61:9B:DF:8A:BB:D8:41:EB:B2:63:3A
X509v3 Authority Key Identifier:
keyid:C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:89:89:3a:1c:9d:8f:e7:70:1e:20:57:a6:4d:09:88:1e:54:
9c:08:f9:25:8f:bc:0a:75:3d:ed:50:9d:13:d6:b2:7b:0a:7c:
b6:c4:a4:f2:21:80:65:b0:70:b5:54:a0:bc:16:ec:6d:7d:64:
c9:f3:06:71:49:19:79:e2:23:1c:4e:27:bc:25:a8:87:c8:4e:
58:f1:34:b3:b5:11:58:99:66:ad:fe:31:35:d3:24:a1:3e:2b:
c5:e4:67:29:5b:0b:85:61:25:18:c0:73:3e:84:a2:ed:6a:16:
cf:27:3d:92:c5:d8:fc:f1:90:c6:6e:ec:15:8b:19:7d:db:f5:
47:98:49:88:9b:c0:b1:4f:11:8d:47:4b:88:58:d3:54:fc:d9:
04:1e:24:52:8c:5e:74:e9:00:bd:3f:df:49:ae:d4:e3:b1:12:
58:9d:fb:82:49:a8:74:d6:a9:37:3c:c0:d7:de:f7:b2:58:f6:
04:f3:98:b3:9c:c3:fe:b8:d9:0a:5f:8a:f3:7a:4e:61:d5:32:
a4:9e:7e:1d:33:63:cb:5d:1b:bf:58:8b:10:61:f4:61:32:de:
c1:62:81:a4:cd:73:80:b3:99:c5:12:2b:d6:3e:7f:31:4a:20:
70:f5:3f:63:61:d7:1f:f8:b1:9d:76:97:b0:e7:40:02:78:a2:
e7:4e:99:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:56 2026 by rpki-client