Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
File: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft (raw, json)
Hash identifier: mj7T8HUiDsA4YSRyYy/hnaVQ/ASyuRdHoOoZWVqtLI4=
Subject key identifier: 99:89:72:A8:50:73:FA:F8:8F:31:21:40:A9:0A:EC:CD:21:FF:77:F4
Authority key identifier: CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C
Certificate issuer: /CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
Certificate serial: 019D9D3FFF2989B69DD8F52143DAEF366E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
Manifest number: 02B2
Signing time: Fri 17 Apr 2026 21:01:50 +0000
Manifest this update: Fri 17 Apr 2026 21:01:50 +0000
Manifest next update: Sat 18 Apr 2026 21:01:50 +0000
Files and hashes: 1: 8MxTJlqau9S1ZV5fA_n_hiU2OjQ.roa (hash: ZFi66z5+x2HZHjEf8Mnf2qe4zKNsSEknPsHvSK6VhIc=)
2: DNbiYi8RnmHbs53ufR4Wo4EOQD4.roa (hash: 1O4zlMEhLqsXNNh16SOVPGWJLESJzqVd3J7KSAE8smE=)
3: EBV1N0nyc3uDjy8VuxK9uZr58ys.roa (hash: Ua/lKqQMivBauR1brwmNmnYyYEQG+PCmKakmmH7OZoQ=)
4: wgW5ViWtyw-hcjNoVsfmKE4EIG8.roa (hash: HhTkFaNAcVHstP72WGd6nJS+mIOkBQF6lfIRGmZJYHI=)
5: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl (hash: lOMcsIc6rrMFon4Ur2tAgc/xhYCvznNmw0vmeWxdh24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:ff:29:89:b6:9d:d8:f5:21:43:da:ef:36:6e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
Validity
Not Before: Apr 17 21:01:50 2026 GMT
Not After : Apr 18 21:01:50 2026 GMT
Subject: CN=998972a85073faf88f312140a90aeccd21ff77f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0b:fb:2d:6e:85:ad:fe:90:2f:bf:84:05:c1:
e7:61:4d:8f:29:c5:1f:ca:29:be:6a:6f:a6:5b:03:
d7:47:b7:d0:f9:38:7c:87:0e:d6:32:cf:37:81:56:
d8:dd:8b:47:a7:68:1d:53:fd:7b:49:88:30:97:e3:
71:01:e6:b2:88:6a:92:d4:25:11:f2:42:82:61:9b:
6d:25:7b:6e:f7:08:90:e8:44:a3:ad:7e:08:29:67:
59:ba:6d:c1:c2:77:b7:d9:ed:6c:bb:7f:70:30:0c:
96:2d:b7:e3:cf:4a:c2:1b:e6:04:c7:c0:4d:0d:3c:
ec:97:33:d0:bf:df:42:61:ee:4f:42:25:fe:74:67:
d0:4c:c2:11:3c:c4:99:8d:39:87:2f:1a:c4:c4:4c:
a4:65:2d:de:4f:b3:c3:20:ed:31:94:5e:d5:85:7f:
4b:12:94:88:8e:b5:36:89:99:99:22:f7:b9:78:8b:
f3:b3:ea:b0:09:e3:ae:94:04:1e:1a:17:f4:44:43:
a6:32:be:4f:ff:ab:3d:c6:a9:2f:88:2c:81:0e:1f:
f0:43:81:74:10:67:8d:63:62:14:52:f6:d2:71:cf:
9c:65:03:6a:fb:83:75:cb:34:1d:5f:0a:00:e7:ac:
51:eb:3c:4c:e7:ed:80:2a:97:be:da:d7:55:93:a1:
0f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:89:72:A8:50:73:FA:F8:8F:31:21:40:A9:0A:EC:CD:21:FF:77:F4
X509v3 Authority Key Identifier:
keyid:CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c2:26:16:d9:78:e3:af:6d:c6:4f:b4:86:ab:6b:40:5b:5c:
b8:9a:62:61:5c:d5:30:7a:a0:12:d7:e1:c2:57:fd:13:88:c4:
8c:47:27:bb:45:97:d2:19:f0:bd:7f:bb:e3:99:51:f6:e1:71:
d6:d7:80:1b:79:e4:89:7a:6b:68:4f:e6:d1:f4:15:98:72:a8:
66:bc:fb:8e:b8:e0:50:1e:9a:5f:ee:e8:50:cb:37:cd:5c:4c:
4b:a2:e9:4d:77:c7:65:06:0b:ee:25:1a:bb:b1:a0:3e:73:e5:
e0:a9:6c:00:83:c1:e0:52:8a:96:4f:ec:a7:bc:4b:a7:34:c1:
d7:52:24:3e:c4:3b:a7:46:58:13:9d:00:27:75:dd:40:7e:81:
57:5f:be:34:9d:fd:cf:3c:d2:05:d1:d6:17:4a:0e:38:39:c0:
45:a4:ce:93:60:8f:5d:67:e7:bd:9b:62:24:2f:06:aa:53:03:
05:58:d5:b9:8d:92:dc:47:9d:94:d5:7b:a1:b1:46:0f:35:ac:
a1:27:c7:7e:dc:e7:44:d5:86:61:24:5f:62:90:78:93:49:21:
eb:90:19:b2:07:1d:90:cb:09:de:2d:4c:8f:3f:62:fd:5f:13:
52:f9:62:3a:c5:4a:ef:1f:7f:fa:9b:77:f7:20:99:50:df:7f:
e4:b1:4d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:17:16 2026 by rpki-client