Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
File: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft (raw, json)
Hash identifier: OUxm/V4+OHRfQqRtyvE0ia34c8fBaryy5A+PngrLUVk=
Subject key identifier: BC:9D:70:3A:4B:96:89:C6:5F:DF:03:72:8F:06:8B:F2:A0:27:E7:E2
Authority key identifier: CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C
Certificate issuer: /CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
Certificate serial: 019CABD8EB37FDD738CDEF79BC39431A1B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
Manifest number: 0235
Signing time: Mon 02 Mar 2026 00:00:45 +0000
Manifest this update: Mon 02 Mar 2026 00:00:45 +0000
Manifest next update: Tue 03 Mar 2026 00:00:45 +0000
Files and hashes: 1: 8MxTJlqau9S1ZV5fA_n_hiU2OjQ.roa (hash: ZFi66z5+x2HZHjEf8Mnf2qe4zKNsSEknPsHvSK6VhIc=)
2: DNbiYi8RnmHbs53ufR4Wo4EOQD4.roa (hash: 1O4zlMEhLqsXNNh16SOVPGWJLESJzqVd3J7KSAE8smE=)
3: EBV1N0nyc3uDjy8VuxK9uZr58ys.roa (hash: Ua/lKqQMivBauR1brwmNmnYyYEQG+PCmKakmmH7OZoQ=)
4: wgW5ViWtyw-hcjNoVsfmKE4EIG8.roa (hash: HhTkFaNAcVHstP72WGd6nJS+mIOkBQF6lfIRGmZJYHI=)
5: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl (hash: NClCeegm1ZYtMFCjn5B9ooL0HcdXuCz3otRqkuZkets=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:eb:37:fd:d7:38:cd:ef:79:bc:39:43:1a:1b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
Validity
Not Before: Mar 2 00:00:45 2026 GMT
Not After : Mar 3 00:00:45 2026 GMT
Subject: CN=bc9d703a4b9689c65fdf03728f068bf2a027e7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:46:86:7a:05:72:2c:69:21:b2:66:1d:2c:
31:5a:fe:a6:6f:e9:19:44:db:f6:06:27:b9:69:89:
0b:8a:10:6e:5b:45:b3:95:88:e4:99:3d:18:e0:75:
a5:d5:6c:a8:a8:a3:c3:89:ed:34:6b:f7:c5:af:7e:
c2:15:8c:3c:79:7d:bc:94:de:91:41:a6:05:16:6f:
b8:48:26:c5:30:91:18:29:12:6f:b0:38:c6:19:4b:
46:b0:f3:e6:37:28:d8:b6:18:7e:73:0a:1c:d2:dc:
71:bd:f6:13:6c:ab:1f:56:a6:83:2e:e4:56:f3:b7:
b2:b1:a7:11:6d:33:54:4c:1b:00:43:70:19:de:e8:
3e:0b:61:69:e1:cd:f8:25:37:f3:2d:dc:ea:8c:ea:
c6:73:6b:da:3c:8f:e6:f1:6c:7b:6e:b2:76:d4:6e:
3a:9d:94:9d:ed:8f:c5:6e:9a:62:44:d1:a2:a6:c6:
af:8b:71:f0:55:f7:2b:5f:02:e7:a9:38:13:37:ac:
c7:f0:13:6d:dc:00:74:d0:d2:1c:47:01:9f:f6:24:
20:47:9b:08:88:cc:7e:66:99:b2:2a:b4:71:82:6d:
41:eb:dd:c7:8f:c3:e1:c9:e9:f4:f6:c8:ac:19:e9:
6e:f8:a3:52:20:c4:a3:58:1a:d3:51:95:19:ea:29:
c2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9D:70:3A:4B:96:89:C6:5F:DF:03:72:8F:06:8B:F2:A0:27:E7:E2
X509v3 Authority Key Identifier:
keyid:CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:43:c6:09:d5:cd:6a:37:f5:78:8d:80:3b:e5:2f:ed:85:61:
1b:c5:cd:58:ca:ed:14:ed:88:7d:26:a1:05:4e:dd:b5:a6:90:
4b:f2:d7:61:cc:b8:69:f1:80:a6:cc:c7:b4:51:52:09:78:69:
2a:d8:a0:e4:a0:a7:9b:ce:c0:d2:28:59:e4:78:24:ba:b9:37:
82:b6:a4:3b:55:a7:64:f7:85:73:0f:77:d5:a4:b7:b8:f3:11:
b0:6e:5d:4c:cd:4f:4f:9b:c8:80:2b:44:dc:9b:16:45:55:5a:
87:ee:27:db:22:f4:38:b6:3d:6d:92:fe:9c:7a:41:76:b8:4e:
0d:b6:2b:bd:b4:00:0f:07:03:2b:32:db:cc:4a:e0:5f:aa:9f:
c0:b3:58:87:24:df:7d:1b:d3:e5:28:0a:6e:3c:86:ca:ed:9a:
7b:ff:df:90:75:56:80:b3:68:3c:58:4e:f2:0a:3b:54:7b:e9:
1a:86:5b:cb:1d:2b:7f:29:8c:28:5d:e1:49:55:12:2e:40:3b:
21:7c:eb:28:45:70:68:0d:71:60:3f:5a:96:7c:66:b9:8a:48:
a1:88:f8:32:59:ed:1b:dd:d2:79:e7:21:76:82:7d:bd:28:ed:
ad:fe:02:79:11:9e:39:03:50:be:5f:61:65:53:88:15:fa:c6:
30:cf:13:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:05 2026 by rpki-client