Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier: gn2aKfPkYbldlhppxWdBEaZv1US5npv/cxVhpyH0xFY=
Subject key identifier: 68:F2:8C:E3:2E:E3:36:AF:99:2E:99:11:52:8B:ED:20:A8:8D:F0:1F
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial: 019CAC7E010C674278A524E13283FB18E27F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number: 0E8A
Signing time: Mon 02 Mar 2026 03:01:04 +0000
Manifest this update: Mon 02 Mar 2026 03:01:04 +0000
Manifest next update: Tue 03 Mar 2026 03:01:04 +0000
Files and hashes: 1: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: BeHV4imQdQKJbW4WrFiLXPdUo6QVg+VtXITL7nnDZg8=)
2: yZypMalDZN_1H34j86whs9HOsns.roa (hash: QTHAsSMIZiio2WTla/ss5QYgZ5yq+TMYt6pBCLwJH0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:01:0c:67:42:78:a5:24:e1:32:83:fb:18:e2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Validity
Not Before: Mar 2 03:01:04 2026 GMT
Not After : Mar 3 03:01:04 2026 GMT
Subject: CN=68f28ce32ee336af992e9911528bed20a88df01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:04:0f:dd:2a:b5:c2:8b:a3:f5:6d:31:d5:
93:39:ff:6a:e9:4f:c3:81:41:f7:b9:57:33:96:5a:
07:be:37:e6:93:37:9f:d0:a3:91:48:9f:16:6e:57:
14:54:60:3b:4a:05:c2:a0:dd:17:cf:e4:95:21:e3:
42:43:2d:72:74:c2:60:a0:1d:6f:11:45:30:91:1e:
81:d1:e2:39:03:5f:cf:37:ac:77:94:57:19:94:8b:
eb:69:b6:da:dd:2d:f5:0c:58:f5:cd:f4:e0:43:c3:
be:84:56:4c:73:60:2a:95:12:84:1f:fa:71:cb:67:
24:f3:35:c3:04:c9:68:b5:6f:22:88:2c:61:81:de:
66:92:e4:5e:cd:bc:b9:97:5d:a8:d4:41:98:6a:1c:
e6:a3:fa:61:d2:03:c2:46:be:ea:84:d8:ec:79:51:
72:12:94:7c:70:24:ac:71:6c:c2:b4:fc:64:d3:ba:
7d:3b:88:a9:38:cd:46:c2:97:50:c5:44:27:c2:6a:
9a:ef:56:3a:f2:a3:9e:71:f7:98:44:a2:5b:0c:15:
e2:ce:01:7b:9f:28:fe:b6:52:e8:f4:a9:31:ff:eb:
b9:87:c7:ee:6a:9c:c9:5c:c7:b5:59:d3:e7:bc:c0:
9e:ed:a0:61:2f:89:2a:78:df:18:3f:e5:71:d1:52:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F2:8C:E3:2E:E3:36:AF:99:2E:99:11:52:8B:ED:20:A8:8D:F0:1F
X509v3 Authority Key Identifier:
keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ea:8d:26:d3:db:f4:e5:1b:07:6a:2e:23:09:e3:78:86:9f:
5c:cb:2e:62:3d:b7:3d:e1:7f:28:78:03:4d:80:78:4b:ba:62:
f1:1e:5d:03:ed:8f:38:23:6c:22:36:0c:f3:77:7d:4e:c8:7e:
64:d3:df:1e:52:f4:92:70:c5:43:7a:5c:38:1a:26:09:bd:04:
2e:b5:aa:ac:b2:1d:c7:69:c7:51:96:bd:47:ad:33:61:01:3c:
b0:a2:bf:b6:40:5f:72:c8:46:af:b0:11:b0:d1:34:ae:d0:bd:
e7:c4:d2:64:b4:60:8d:30:88:94:cb:9b:64:18:4f:b1:2d:c7:
9e:c4:12:1f:88:8d:94:11:95:4b:04:99:59:38:f0:5c:d6:20:
e7:49:5e:5a:3e:33:29:7c:13:bd:c5:e8:3d:79:b7:6b:ff:6a:
d5:f7:58:c8:3f:05:43:01:94:3f:cf:ce:e1:56:09:e2:17:10:
66:2e:97:f5:c7:d4:d9:af:28:11:e3:3b:66:d0:4d:1f:9b:b5:
02:22:31:2b:5f:eb:44:b5:ac:60:8f:77:d6:9e:f3:e8:0d:73:
53:77:69:b3:6b:a1:07:f2:88:89:7e:1f:21:e3:d1:02:2e:91:
8d:b8:ad:6e:9c:33:8f:cc:9a:66:a2:ef:4c:a1:b6:2f:12:05:
9b:b3:72:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:14 2026 by rpki-client