Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
File: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft (raw, json)
Hash identifier: l1EpUXIGfQ7AGtm1eeu9o5O1FZ5rakui2wjQ8uHSAfY=
Subject key identifier: BA:E0:B8:21:9D:D5:55:1E:8B:62:96:B0:00:5E:46:84:79:58:B9:F4
Authority key identifier: C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
Certificate issuer: /CN=c8e50ca17134837a50d3063d43d443385abe6f49
Certificate serial: 019CAD226E28F6A53C25B8C73137C0AFA942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
Manifest number: 17BC
Signing time: Mon 02 Mar 2026 06:00:40 +0000
Manifest this update: Mon 02 Mar 2026 06:00:40 +0000
Manifest next update: Tue 03 Mar 2026 06:00:40 +0000
Files and hashes: 1: KruYfdwnUNYxfXkcEK0pRrgHkqg.roa (hash: UrG6tcE8plAV8A8NaRxXB6Nz6rhzF4jRdCMcfNiMj5Q=)
2: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl (hash: 75MjVqlozGVtZRl70QNxCNWcJ7aiS7bb1ncB5bo/0uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:6e:28:f6:a5:3c:25:b8:c7:31:37:c0:af:a9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e50ca17134837a50d3063d43d443385abe6f49
Validity
Not Before: Mar 2 06:00:40 2026 GMT
Not After : Mar 3 06:00:40 2026 GMT
Subject: CN=bae0b8219dd5551e8b6296b0005e46847958b9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cf:fb:07:07:8d:0d:4c:63:98:57:8e:a9:82:
25:23:5d:01:1f:34:d0:cf:e5:41:ba:0b:ed:47:6f:
89:f2:82:84:e4:f2:9f:16:80:a3:70:8c:9c:93:ad:
4f:63:2d:02:eb:88:dc:26:53:80:23:49:7a:d1:30:
e2:4f:de:28:2e:8a:d9:c2:ee:02:1b:06:73:a1:f5:
e7:af:70:6d:db:5d:6a:66:24:b5:ca:97:88:46:aa:
db:3d:d8:e6:e3:66:b5:17:54:aa:a4:b9:7e:26:e2:
20:22:22:2f:57:77:ac:f8:36:c0:00:45:94:54:4d:
b6:a1:60:48:b4:d7:09:f3:e3:af:9a:9a:90:95:73:
dd:a1:77:75:89:8b:24:d3:43:7c:07:65:c3:8a:31:
b4:3b:26:81:91:6d:76:89:ab:61:8e:a4:f8:82:97:
0d:44:9b:44:72:21:5c:f4:09:9c:a7:00:a1:27:fd:
28:3f:6f:45:75:94:2b:e2:8d:80:fd:6d:a4:a7:a8:
54:9d:a5:df:3c:28:4f:14:45:9e:d9:f8:1e:90:7b:
1d:7a:83:c6:3f:74:a7:c9:66:05:a7:63:6e:1a:48:
a5:8b:12:e2:f3:03:1b:f7:3f:13:e2:dd:d5:aa:f6:
39:91:95:b0:e3:36:17:61:a1:70:72:47:9f:3b:58:
f9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E0:B8:21:9D:D5:55:1E:8B:62:96:B0:00:5E:46:84:79:58:B9:F4
X509v3 Authority Key Identifier:
keyid:C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:05:41:15:60:3a:b0:9e:2e:13:3a:a0:43:a3:c4:cc:27:25:
06:42:78:52:ca:76:d0:64:68:0f:c3:90:54:f2:3b:d6:2c:8a:
ff:73:47:6a:49:ae:12:c0:33:04:d3:b9:a2:b3:a5:07:74:2a:
b9:78:75:ce:c7:97:e6:e5:ee:c5:94:54:6e:34:0d:ff:7c:10:
1f:6b:1e:87:af:30:b0:26:83:3d:12:15:9b:5d:73:35:2f:94:
2b:3b:f8:e3:86:ce:83:dc:b3:53:ef:66:1f:d0:47:32:bb:bf:
38:9c:49:bb:96:49:87:c4:d0:5e:80:a0:d4:7b:35:ef:a5:41:
eb:37:cb:7f:6f:f5:7c:48:f9:cc:6e:98:33:b0:03:6a:3b:66:
c5:be:90:c3:ff:eb:43:b6:2a:d0:73:6e:79:e0:a0:08:7c:f1:
9f:36:b8:b4:44:9c:87:4c:24:fd:b5:b5:28:37:f7:09:53:31:
41:81:58:92:bc:e2:50:19:0f:bf:71:fc:af:19:eb:f8:0e:9f:
f9:f3:c6:95:e8:d6:80:d1:2c:a5:85:3b:e7:3e:71:52:fb:26:
5d:4e:6a:40:70:1d:f6:48:70:2b:db:6b:e5:60:20:91:86:a4:
37:0d:38:53:1b:0c:78:8e:db:af:f3:82:07:ed:08:38:70:59:
19:25:6f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:59 2026 by rpki-client