Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
File: yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft (raw, json)
Hash identifier: wAC5urJ9M8nWqppjE7irB7HVMlkhC/bNQNrMIcqDKXM=
Subject key identifier: 3F:25:5E:AF:AF:B4:C6:61:5D:2D:83:70:9A:D9:40:3C:03:BF:C8:7A
Authority key identifier: C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
Certificate issuer: /CN=c8df337cea56a083f46b799072e70da345cc2364
Certificate serial: 019CAA8FBABCA9DA1B00B4F9A4074A9AA2BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 18:01:11 +0000
Manifest this update: Sun 01 Mar 2026 18:01:11 +0000
Manifest next update: Mon 02 Mar 2026 18:01:11 +0000
Files and hashes: 1: k2ViBnovBSrJ6-QzUlh_SgfUQTc.roa (hash: 9Q1EqZG/a6iEl1F6uqJOmdn36R+djh5MF5HhvgX3ijc=)
2: yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl (hash: OiHepa2EnqDa5bz2+fF+wx8wO1z8CxUuYWH9sUQi+6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:ba:bc:a9:da:1b:00:b4:f9:a4:07:4a:9a:a2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8df337cea56a083f46b799072e70da345cc2364
Validity
Not Before: Mar 1 18:01:11 2026 GMT
Not After : Mar 2 18:01:11 2026 GMT
Subject: CN=3f255eafafb4c6615d2d83709ad9403c03bfc87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:8d:c9:6d:f8:c2:30:38:68:20:56:e8:63:
29:c9:d6:f3:c0:19:9f:41:d7:b3:86:ed:dc:48:6e:
8c:29:4a:d2:9e:68:48:33:7c:64:66:15:14:ba:53:
77:77:f1:a2:4b:55:58:8c:28:5c:9f:85:12:74:e6:
28:fb:e3:c8:70:70:bd:a7:cb:5a:8b:19:f0:59:b0:
40:d0:05:1b:b9:f2:99:ba:7a:9d:fb:65:5d:0d:5d:
97:71:48:cd:87:7e:49:a9:77:00:f1:d3:89:4f:ac:
8b:7b:66:b8:dc:00:35:fd:d3:da:44:2d:d4:3e:43:
b3:22:1c:ec:20:bf:76:2f:de:48:bf:82:62:a3:4a:
d8:8b:53:80:41:48:02:2c:a7:de:bf:d3:eb:c8:07:
39:32:52:ae:ce:69:07:52:81:77:0b:8f:95:b2:e2:
3d:e7:27:aa:85:c8:d7:31:c8:6e:36:ae:23:b1:08:
05:9e:c6:76:92:02:e8:c7:7a:8c:d1:ee:24:3e:20:
0d:fb:2e:51:66:65:40:00:63:b3:fc:a5:bb:cf:c7:
36:40:01:30:46:a8:57:09:55:b7:25:c0:32:1f:0c:
4d:e1:fd:5b:56:83:02:1d:25:d9:00:98:c0:dc:94:
6d:6b:57:f0:7e:2d:fa:4e:0b:b6:e0:68:c7:73:59:
d1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:25:5E:AF:AF:B4:C6:61:5D:2D:83:70:9A:D9:40:3C:03:BF:C8:7A
X509v3 Authority Key Identifier:
keyid:C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9f:ef:3f:ce:33:06:87:50:02:ed:9a:50:7c:22:bd:a7:05:
dc:23:60:c6:a9:3a:ec:b5:e7:f5:9b:4b:c8:af:d4:0c:6f:e5:
c3:c2:41:9e:b1:65:28:61:45:10:bd:58:85:51:39:f1:91:fa:
07:86:39:3e:5c:5e:b4:43:f1:63:91:ad:7a:65:9c:9f:10:03:
9c:1d:8a:ba:0b:32:79:60:6b:bb:3a:7f:c7:b7:93:cd:63:ba:
53:f4:dd:65:48:5f:13:b1:7e:86:67:85:86:2a:72:bf:e9:d9:
16:e2:32:96:f2:dd:1f:94:d9:1f:37:18:f6:41:1d:9c:b4:4e:
90:c0:ce:44:49:78:06:e4:71:3d:f2:42:9d:d1:e8:a7:f0:79:
bb:f6:97:d0:09:58:7a:9a:b7:32:8e:e2:8a:fd:10:8b:3d:16:
39:f2:c2:fe:75:ed:30:66:19:8d:8c:57:c2:c2:fb:b6:f7:ce:
74:d3:01:83:b5:01:6b:d1:81:ee:de:84:3d:7a:62:f6:f5:dc:
fb:65:06:d6:cf:b6:61:76:e1:04:de:56:e7:13:70:5e:fe:b5:
aa:31:68:62:e8:4f:ee:a8:4c:95:99:1b:88:8b:32:65:d2:57:
86:45:65:67:68:6f:64:f0:d9:31:cc:d0:df:e1:1d:90:4b:82:
f5:5b:db:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:01 2026 by rpki-client