Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.mft
File: yoaOeySqNaTdEKyVmfBkqpadAx0.mft (raw, json)
Hash identifier: qXhL2P5V2yriWJfKuMeZgN/45eNesd0t5d4TrGQ9jRQ=
Subject key identifier: 7B:63:88:D6:29:19:D3:4C:9C:FA:E3:AF:73:2E:96:15:81:56:B9:5E
Authority key identifier: CA:86:8E:7B:24:AA:35:A4:DD:10:AC:95:99:F0:64:AA:96:9D:03:1D
Certificate issuer: /CN=ca868e7b24aa35a4dd10ac9599f064aa969d031d
Certificate serial: 019CAA8F6DF2C42EE1AF7ADD640A928EAF1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yoaOeySqNaTdEKyVmfBkqpadAx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.mft
Manifest number: 04B7
Signing time: Sun 01 Mar 2026 18:00:52 +0000
Manifest this update: Sun 01 Mar 2026 18:00:52 +0000
Manifest next update: Mon 02 Mar 2026 18:00:52 +0000
Files and hashes: 1: yoaOeySqNaTdEKyVmfBkqpadAx0.crl (hash: N2MwWlC2XjeBfBr/cGT6lr3FJFB208kRpgjhQ5nyYms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yoaOeySqNaTdEKyVmfBkqpadAx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:6d:f2:c4:2e:e1:af:7a:dd:64:0a:92:8e:af:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca868e7b24aa35a4dd10ac9599f064aa969d031d
Validity
Not Before: Mar 1 18:00:52 2026 GMT
Not After : Mar 2 18:00:52 2026 GMT
Subject: CN=7b6388d62919d34c9cfae3af732e96158156b95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:6a:7b:25:19:b8:b6:1f:42:7b:be:88:48:
12:06:7b:7c:40:91:bc:30:9d:07:eb:2f:70:dc:fc:
d7:58:42:8e:0c:f4:5f:4e:66:2a:a3:3c:52:e1:8b:
97:17:40:43:89:8b:96:2e:c0:e3:42:f3:27:2f:a4:
b3:7c:f8:f1:0f:38:6e:8a:38:e6:3f:e3:ba:49:ae:
0e:8b:23:ad:aa:e2:fb:ac:91:c3:10:c4:10:d0:a7:
d6:d4:f1:a5:60:36:21:db:11:ae:74:08:f3:ae:bd:
a1:a2:f7:bc:50:fa:f7:28:01:e1:4b:9f:e2:85:f3:
c0:81:ac:ad:c9:c0:aa:6b:2a:1f:a3:94:fa:83:2c:
ca:d6:0a:b8:33:50:22:ba:57:9f:8b:25:a6:e4:83:
a8:4c:63:e0:b1:a8:3c:dc:16:0f:8a:89:d6:e6:b2:
64:8c:9e:2d:3a:6a:95:fc:f7:af:e8:6c:51:8d:16:
4e:25:3d:df:07:2c:2a:77:8e:8c:7e:e7:9b:03:a0:
d0:a3:72:48:da:8f:d8:53:4b:46:23:bb:9b:34:fe:
d8:ea:c9:01:d3:4f:32:71:98:d0:c5:88:59:4d:ec:
7b:2c:6a:78:b7:d6:82:03:b2:56:b2:4e:7c:9e:f4:
34:5d:3f:ec:10:37:56:5e:6d:94:fe:c6:01:57:02:
a1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:63:88:D6:29:19:D3:4C:9C:FA:E3:AF:73:2E:96:15:81:56:B9:5E
X509v3 Authority Key Identifier:
keyid:CA:86:8E:7B:24:AA:35:A4:DD:10:AC:95:99:F0:64:AA:96:9D:03:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yoaOeySqNaTdEKyVmfBkqpadAx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f327eb-d71a-4279-af22-b8d06f46aec3/1/yoaOeySqNaTdEKyVmfBkqpadAx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cc:22:01:09:71:e5:46:1c:cb:3b:49:d1:48:cb:21:f1:4c:
51:58:e2:04:84:3c:69:db:a0:d4:7d:18:09:63:17:47:59:d9:
11:b0:c4:ca:ca:7f:7b:4b:b9:9c:2b:26:55:de:6e:45:e3:ad:
86:8e:77:d1:70:92:96:1e:94:2b:57:65:6b:3b:2a:4d:7e:f7:
5f:91:48:ab:9a:2d:9f:d6:ce:59:b9:50:60:6d:ce:4f:49:ce:
1c:e0:a2:38:de:67:4e:5e:3f:96:de:7c:27:23:24:cc:ad:a2:
87:86:e6:ae:ff:44:61:8d:db:52:3e:08:4d:98:18:d8:dd:5b:
42:b2:0e:14:ea:e1:ba:51:50:13:35:be:9c:d3:95:95:78:b7:
83:7e:e0:07:15:cc:05:c3:67:11:84:2d:19:13:c7:ab:77:ad:
11:fe:00:5a:39:59:4b:b5:13:c5:06:ff:f8:60:90:9d:74:b1:
e2:07:ba:05:84:86:5b:f6:91:89:88:82:0e:cc:3e:df:58:de:
a5:4c:a1:6a:e7:b3:a5:02:01:d0:cd:2a:ee:e4:46:20:2f:81:
d0:0e:d2:73:66:c4:4f:97:35:1c:b4:47:9a:fb:a5:19:7b:20:
5a:c8:98:d0:e2:3c:1e:9b:7c:13:2f:f7:6e:94:15:2a:66:36:
40:86:04:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:39 2026 by rpki-client