Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
File: yOx8SlcVXOjexbHNYv-oQBexb1g.mft (raw, json)
Hash identifier: YKD3kRcYmq/3kK76dyBbCVitwdWCY//jLMZVhzZE7pI=
Subject key identifier: B7:AB:28:FC:A5:CC:60:AF:41:50:ED:38:05:37:34:FC:6D:12:F4:8E
Authority key identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
Certificate issuer: /CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Certificate serial: 019D9A3DF5C6BD86F069F9C4164B6600C13C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
Manifest number: 07E5
Signing time: Fri 17 Apr 2026 07:00:45 +0000
Manifest this update: Fri 17 Apr 2026 07:00:45 +0000
Manifest next update: Sat 18 Apr 2026 07:00:45 +0000
Files and hashes: 1: LA3jFcuaqgILmHo9nTpg4K4H2wU.roa (hash: kxF22odJcoiHzXYLzYGjkdPZsm3zZB8qlfFcOiIEMd0=)
2: yOx8SlcVXOjexbHNYv-oQBexb1g.crl (hash: SbxzGjuZt4FyYSwlN6iOj/w5HrroiDY+H790bhA2d7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:f5:c6:bd:86:f0:69:f9:c4:16:4b:66:00:c1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Validity
Not Before: Apr 17 07:00:45 2026 GMT
Not After : Apr 18 07:00:45 2026 GMT
Subject: CN=b7ab28fca5cc60af4150ed38053734fc6d12f48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:2e:fd:0e:05:58:d1:d1:71:8e:3e:36:1d:
95:5b:4f:e5:fe:69:2c:65:fd:a8:2f:21:ce:29:c1:
9a:3e:13:c4:e6:65:f1:4c:93:3a:26:2c:48:f5:63:
91:4b:97:05:dc:61:13:af:41:4d:81:3b:a6:7f:db:
99:7f:87:58:dc:c8:06:9a:32:c4:19:42:65:2f:b5:
03:b1:67:25:53:67:eb:a5:6f:62:c0:9b:75:1e:4a:
bd:9b:dd:e9:46:c5:6c:2b:96:8f:0e:07:41:e7:70:
3f:56:34:bc:4d:ea:72:4a:c0:49:b1:d2:e1:46:8c:
2c:8f:81:50:17:9e:6b:73:fd:f2:43:9a:25:74:a6:
11:5a:37:26:f8:1d:46:d4:8d:4e:5c:92:d9:e5:90:
2c:0b:df:8a:13:16:fd:3d:56:a6:6b:d4:49:82:d7:
6a:97:76:0a:b8:83:db:32:6d:75:2b:cd:96:18:5d:
f8:a9:cc:30:ae:ed:de:98:b8:5b:c5:43:de:ce:e1:
d9:77:11:79:be:ae:99:96:84:e9:53:11:97:b5:87:
08:42:4c:6d:a1:4e:0b:b7:82:a8:b3:8b:0e:2c:cc:
7f:72:c7:c3:55:48:d6:a0:c1:08:68:51:bb:c0:85:
a6:7d:a8:7f:e9:86:1d:cd:e3:f5:f5:63:df:af:e4:
d2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AB:28:FC:A5:CC:60:AF:41:50:ED:38:05:37:34:FC:6D:12:F4:8E
X509v3 Authority Key Identifier:
keyid:C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c9:46:b7:8e:0b:40:ce:4a:1d:55:69:3e:f3:32:db:f7:c7:
75:ed:23:8e:6c:1e:51:b2:43:0d:63:d2:e1:32:c5:3a:6c:f7:
4d:5d:3f:38:2e:e0:03:f5:33:42:ab:34:b6:37:58:26:18:24:
dd:dc:00:4c:6f:6e:e0:d2:80:1f:7e:b8:7f:25:98:ef:93:b1:
43:f0:22:69:cb:2e:03:4e:0c:9e:a5:ab:27:87:49:13:22:ce:
7b:8a:b3:ab:57:52:38:40:18:3b:4c:be:10:72:4f:4e:2b:cb:
30:1d:89:46:20:3b:8d:3f:74:d4:af:b6:b9:e6:a3:b4:70:2f:
69:a3:a6:b3:59:10:43:5d:df:f9:4b:6c:52:4c:87:ef:9f:bb:
39:d2:5d:ac:02:69:73:27:e6:00:47:1e:ab:4d:fa:3d:91:1a:
e5:0d:12:00:70:54:4e:d4:11:ca:66:97:4d:e7:4e:5e:f8:8f:
a8:6b:5a:28:a7:30:1d:6d:fb:05:83:4b:ca:ff:bc:4f:fa:53:
73:35:f1:b8:32:32:be:84:d0:ed:f0:7c:fa:50:d3:9b:51:54:
97:14:da:70:27:57:bc:ef:c5:c1:e4:d6:38:77:f3:2c:b4:be:
75:c7:97:5d:fb:65:07:33:4e:55:02:9d:08:60:72:73:ca:1c:
84:4d:9e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:17 2026 by rpki-client