Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
File: yOkLFy-IviG7mdVz_XWyf1v3RcI.mft (raw, json)
Hash identifier: 8VU/92O/eziMt0nuXgoY5bhHtWZ8fLu0dqCNyirHZGc=
Subject key identifier: 61:7F:C8:74:D2:45:D7:22:0C:83:B2:56:81:CC:84:8E:75:8C:0A:BC
Authority key identifier: C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
Certificate issuer: /CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Certificate serial: 019CACB4808211AE12DB75E51DB1EC267916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
Manifest number: 147C
Signing time: Mon 02 Mar 2026 04:00:36 +0000
Manifest this update: Mon 02 Mar 2026 04:00:36 +0000
Manifest next update: Tue 03 Mar 2026 04:00:36 +0000
Files and hashes: 1: 9KLhgHdDNsZBBUFEIyheUzLt-c0.roa (hash: c+1HpuSdzLNeAztTtHz4t/e6e0WWME4OFHOVd3MSwEs=)
2: yOkLFy-IviG7mdVz_XWyf1v3RcI.crl (hash: n16i6edjE8ZIDDrMAGAAgYlBeoYeIjOItZ7KEDaXVpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:80:82:11:ae:12:db:75:e5:1d:b1:ec:26:79:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Validity
Not Before: Mar 2 04:00:36 2026 GMT
Not After : Mar 3 04:00:36 2026 GMT
Subject: CN=617fc874d245d7220c83b25681cc848e758c0abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:de:71:34:44:9d:27:3b:66:a9:79:0b:53:25:
01:0e:50:ed:b3:8a:bd:a6:e0:fb:3c:4e:fa:40:7f:
79:f1:b9:e2:6a:3d:66:7f:f4:bf:e2:b1:26:ce:70:
53:7d:7c:40:01:4f:65:f4:37:b8:96:7e:26:4e:23:
9e:08:26:77:c1:a9:dd:11:15:6d:46:99:be:b2:7e:
34:71:9c:8a:6c:93:b0:c5:68:52:99:23:7f:3b:a8:
ea:2d:80:07:04:96:f8:26:30:c3:8c:ad:f9:01:28:
f6:e9:de:57:81:ea:eb:5c:dc:16:92:30:0f:60:10:
bb:1b:8d:71:28:34:9d:61:03:47:84:7e:52:73:42:
2a:50:74:ee:0d:20:ed:2c:a6:62:a2:f9:04:24:60:
83:0b:87:4f:f7:8d:db:c6:e5:b8:0c:c8:e1:17:49:
68:23:5c:f0:e9:3f:68:de:bc:5c:33:9c:82:42:dd:
0e:8d:4a:5a:d5:47:00:f8:09:d9:16:ab:82:e3:49:
16:1f:a8:21:77:85:44:7f:37:78:b6:bf:20:2d:25:
85:75:04:ff:cd:21:e3:50:bc:1d:59:b0:8d:e9:56:
ac:03:da:ef:43:43:06:77:b4:d2:e7:28:0b:0d:4e:
e6:1b:96:db:60:25:cb:0c:e8:57:64:2d:12:89:19:
fc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7F:C8:74:D2:45:D7:22:0C:83:B2:56:81:CC:84:8E:75:8C:0A:BC
X509v3 Authority Key Identifier:
keyid:C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c1:8d:20:d5:05:ca:99:9e:7f:51:9f:3b:9e:e4:22:bf:db:
75:a5:13:17:ef:f4:fb:67:6c:b1:d3:7d:8d:d5:d4:2b:bd:92:
e4:1e:1f:96:66:8f:ee:cb:1a:54:a1:60:b0:92:44:ad:bd:dc:
93:84:6f:ed:82:16:66:75:12:65:95:a5:cd:58:fc:b8:0e:77:
45:eb:d2:b5:b1:86:e7:b6:67:77:b4:a5:2f:76:0b:80:03:16:
aa:85:25:1b:67:41:4d:32:7d:3e:90:22:db:90:fa:db:42:b3:
27:fd:9a:26:88:0c:aa:74:56:85:32:54:23:b1:a2:91:32:8f:
66:e3:74:c0:62:b2:3b:a0:ed:20:df:ee:e0:7e:a0:e3:81:03:
a9:a0:3f:3d:8c:65:28:11:12:a7:74:a7:30:db:34:8b:6c:ef:
2f:9a:90:ad:5c:f5:7e:5a:29:e0:ca:34:cd:05:d8:cb:e6:81:
bd:e2:70:c4:c4:e8:d9:ff:1e:da:5a:8c:d0:bf:29:c4:7f:39:
48:23:9e:3e:71:2f:ad:8a:46:ef:b2:f6:0d:2e:d0:03:64:a2:
3e:a6:dc:4b:86:70:7e:5b:5f:70:36:d2:77:55:31:79:7c:fb:
b9:d9:84:58:40:f4:d4:ec:e2:da:23:10:08:46:19:dd:4e:29:
d6:d9:9b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:31 2026 by rpki-client