Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
File: yOx8SlcVXOjexbHNYv-oQBexb1g.mft (raw, json)
Hash identifier: mQ7RAeshCbr3ZHuWz9pHnC5LfiOuxJRZoFwkPuWXXq4=
Subject key identifier: AC:A7:5C:68:8A:D6:64:A0:D9:08:63:CF:16:7D:AC:03:3F:48:99:78
Authority key identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
Certificate issuer: /CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Certificate serial: 019CAAC5FBE62AB08A18F7E56BAF85391C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
Manifest number: 0769
Signing time: Sun 01 Mar 2026 19:00:27 +0000
Manifest this update: Sun 01 Mar 2026 19:00:27 +0000
Manifest next update: Mon 02 Mar 2026 19:00:27 +0000
Files and hashes: 1: LA3jFcuaqgILmHo9nTpg4K4H2wU.roa (hash: kxF22odJcoiHzXYLzYGjkdPZsm3zZB8qlfFcOiIEMd0=)
2: yOx8SlcVXOjexbHNYv-oQBexb1g.crl (hash: TJJX/3wtZBQDLqGTwri+zDz40kqJxaDylV81rscXX0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c5:fb:e6:2a:b0:8a:18:f7:e5:6b:af:85:39:1c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Validity
Not Before: Mar 1 19:00:27 2026 GMT
Not After : Mar 2 19:00:27 2026 GMT
Subject: CN=aca75c688ad664a0d90863cf167dac033f489978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:82:0c:5c:92:83:7d:79:d1:0b:8a:f2:72:
47:ad:ff:39:a1:77:15:3e:b4:79:c4:dc:f4:50:1c:
99:bb:93:f4:6e:0f:ac:bd:e9:ed:c1:37:69:71:d2:
21:d9:30:06:c7:ea:d5:b2:0c:f3:36:97:2a:66:a8:
1e:bb:ef:c7:55:bf:c8:ca:b2:2b:35:5b:b2:c7:72:
fe:0b:c4:e1:c0:92:12:91:6e:c9:5e:0c:97:30:f8:
5b:cf:5f:4b:9d:2c:16:ff:ad:67:41:4b:5f:2a:cb:
0a:4d:76:33:0d:3d:a5:44:ee:52:d8:05:df:0a:17:
e3:9b:28:13:15:0a:85:49:9a:bc:49:b1:68:71:9f:
9d:21:a6:38:9b:61:c9:1c:11:12:09:25:ce:3e:b5:
90:52:e5:58:e9:00:55:f4:8b:c9:dc:ba:2a:53:f3:
16:a5:6b:8f:a0:76:ea:af:5b:83:13:9b:a6:b0:3c:
ec:ef:7c:f7:34:ef:fa:16:ac:df:17:5e:d8:00:a5:
78:db:9f:3e:60:ba:90:24:66:17:03:67:a5:a5:14:
9a:da:c9:c9:ef:94:df:b7:53:fd:7b:78:29:79:bf:
32:e7:e3:27:fe:11:6d:eb:5d:b4:13:21:df:37:82:
86:ef:de:eb:40:3e:2a:af:3b:60:0f:79:d0:06:af:
5f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A7:5C:68:8A:D6:64:A0:D9:08:63:CF:16:7D:AC:03:3F:48:99:78
X509v3 Authority Key Identifier:
keyid:C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:30:00:10:0b:87:2e:75:3e:cc:2c:f7:2a:b6:3a:b4:06:94:
4a:ba:c1:44:61:16:6d:a4:5e:20:de:9f:69:48:d1:e3:f8:d7:
b5:36:91:59:ff:08:dc:2a:7d:cc:7d:3b:05:6a:68:22:d3:6f:
4d:32:c4:af:3b:4d:09:8a:ed:f4:5f:a6:c8:7b:62:60:4b:93:
63:4e:f0:74:6a:a2:d9:7c:d8:05:67:24:9e:39:45:c3:3b:56:
d1:be:73:4b:6a:64:14:10:c6:65:0f:3c:3f:9b:bd:0b:7d:9a:
31:05:ba:0f:f7:06:4b:51:8f:e9:8b:39:cb:0f:4e:ca:a9:57:
74:90:29:81:bb:c4:3d:4a:bb:3b:f0:f0:9e:8e:88:c5:d2:2b:
58:4e:3c:3d:51:d6:d5:e8:ed:64:71:d8:9a:1c:e6:21:e3:99:
15:01:f9:75:a5:e4:05:85:a3:47:b2:ac:45:a2:e9:59:24:3b:
6f:f3:c7:94:b7:a9:83:eb:f5:5a:52:4f:32:cd:cc:d3:e8:42:
8d:23:00:78:e8:be:34:1e:2f:9f:63:27:49:64:9e:29:d0:b5:
e9:05:f3:ba:72:a5:d1:b7:c5:83:e6:6b:3d:30:e3:8f:bf:12:
33:b0:76:b0:e6:c5:6d:a1:8b:9d:49:f6:c2:74:64:26:d8:f8:
f8:19:25:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:30 2026 by rpki-client