Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
File: yOx8SlcVXOjexbHNYv-oQBexb1g.mft (raw, json)
Hash identifier: +zgag03uPrhzrgowhw+0Vp9I/Q0uh0Vutmk9eO8A334=
Subject key identifier: 55:16:41:3A:BF:07:2F:BD:80:4D:AF:19:A0:BE:40:73:7C:44:29:DA
Authority key identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
Certificate issuer: /CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Certificate serial: 019D284D40055EA8E224CEBB734ED5FA1675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
Manifest number: 07AA
Signing time: Thu 26 Mar 2026 04:00:44 +0000
Manifest this update: Thu 26 Mar 2026 04:00:44 +0000
Manifest next update: Fri 27 Mar 2026 04:00:44 +0000
Files and hashes: 1: LA3jFcuaqgILmHo9nTpg4K4H2wU.roa (hash: kxF22odJcoiHzXYLzYGjkdPZsm3zZB8qlfFcOiIEMd0=)
2: yOx8SlcVXOjexbHNYv-oQBexb1g.crl (hash: 5k6dv9HdWgoorSMLnqU/DuQs26yWwIG+WBti7YI0KDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:40:05:5e:a8:e2:24:ce:bb:73:4e:d5:fa:16:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Validity
Not Before: Mar 26 04:00:44 2026 GMT
Not After : Mar 27 04:00:44 2026 GMT
Subject: CN=5516413abf072fbd804daf19a0be40737c4429da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:55:68:66:ec:e3:74:70:16:95:a9:c3:ff:
5c:f8:34:75:1d:94:94:9b:5d:27:bf:7e:c0:8e:8a:
82:cd:06:cc:2b:5a:64:3e:43:40:f4:20:fb:32:09:
13:b2:ec:05:cf:96:25:2b:7e:73:b1:bb:c5:ee:0c:
a7:f7:c1:08:a6:a4:b6:e0:b2:e3:68:7d:b1:05:5a:
b9:dd:af:a4:3f:5c:f7:87:72:75:e7:33:c6:8a:5c:
91:b9:e8:f1:8c:ab:77:b7:6d:99:c2:fc:e0:84:7f:
c2:f8:5f:ca:0e:98:f2:30:9d:5b:d9:eb:aa:fe:3a:
79:37:e4:79:2c:ca:78:ff:bc:90:91:89:5d:6d:2a:
fa:d9:bd:27:ee:32:31:93:1a:55:01:2a:3e:9f:7f:
d5:20:e9:e0:14:24:9b:97:9e:1d:ea:94:1c:1a:b3:
82:0c:4d:c4:71:e9:c4:3c:ab:2d:7a:f6:88:8b:88:
8e:62:d7:64:1e:48:fd:c0:c2:d9:01:c8:ad:9e:0e:
70:16:4e:39:6d:bf:13:ef:34:df:28:af:58:eb:5c:
83:08:b9:e0:91:c1:1a:30:fb:fd:2c:81:d7:19:fb:
26:96:9e:7c:a2:2c:b2:96:c8:21:4d:9c:b6:fe:7a:
31:57:8b:72:ef:4b:4f:5f:e0:f8:42:41:4d:b3:a2:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:16:41:3A:BF:07:2F:BD:80:4D:AF:19:A0:BE:40:73:7C:44:29:DA
X509v3 Authority Key Identifier:
keyid:C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1b:79:49:55:45:37:22:9b:7e:e7:e1:64:f7:f6:b5:7d:e4:
bc:5f:35:26:2d:5e:a4:3f:2b:6a:71:77:d7:f7:b5:0b:4a:13:
b0:74:04:4b:0e:08:37:4a:01:e1:30:e3:6c:63:04:db:26:f7:
a9:7d:d9:c6:62:6f:24:6f:c9:bc:e1:d5:c3:89:fb:8f:62:62:
01:83:48:12:8c:af:8a:19:ff:0d:11:b4:28:82:59:aa:3c:f4:
9f:cd:97:b1:77:3c:d8:56:c0:33:03:05:85:3e:c8:7c:73:f5:
f9:56:fb:42:6f:99:b0:86:a3:d7:95:25:8a:64:a5:0e:60:ec:
7e:0a:2d:de:b1:16:f5:a4:a4:be:4d:0d:32:4d:26:80:1e:61:
d8:d2:1c:d5:85:18:61:ea:a8:75:aa:ea:54:aa:72:ba:a8:55:
99:f5:9f:6d:79:d6:a2:c4:51:73:2a:53:30:db:e7:7e:fa:e4:
08:87:fd:dc:c5:65:64:58:af:91:1a:88:cf:39:0a:bf:07:62:
16:d1:45:90:cc:fe:e9:4e:55:28:65:74:7a:6f:2c:61:b1:ac:
86:86:a2:cd:b2:a4:e2:00:27:bf:3e:74:3d:2b:b8:59:14:bb:
5b:f3:b3:9a:7d:d4:e9:0b:70:0f:35:19:06:5c:ee:29:6a:c4:
98:26:d0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:56 2026 by rpki-client