Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
File: 7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft (raw, json)
Hash identifier: dWSsp2arL5StemNx8CkACShGkZPGHxSlqvtjhK8H9BI=
Subject key identifier: 03:5A:42:03:94:63:E9:1D:F5:CD:16:91:8A:4C:52:75:FA:DD:5A:4C
Authority key identifier: ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22
Certificate issuer: /CN=ed82f323359382d801ed0b93ec1bfa030de63622
Certificate serial: 019CAA8FFAA8FA683CD9F07DDF3FC26D3B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
Manifest number: C8
Signing time: Sun 01 Mar 2026 18:01:28 +0000
Manifest this update: Sun 01 Mar 2026 18:01:28 +0000
Manifest next update: Mon 02 Mar 2026 18:01:28 +0000
Files and hashes: 1: 7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl (hash: gJE8HB7XMI/LAvt8y78s+6dEg+Ev2lxRolysbRMn2sc=)
2: KrMAKHUoQ7DCojxr2JV7WevtfuU.asa (hash: 6gOFRqSNT9IfTn2CyMN0Yl8x2WVaFnGFx6aC2n5aVLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:fa:a8:fa:68:3c:d9:f0:7d:df:3f:c2:6d:3b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed82f323359382d801ed0b93ec1bfa030de63622
Validity
Not Before: Mar 1 18:01:28 2026 GMT
Not After : Mar 2 18:01:28 2026 GMT
Subject: CN=035a42039463e91df5cd16918a4c5275fadd5a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:96:4c:74:58:c6:a4:e4:89:d6:02:8b:3b:
0a:c0:c6:13:b6:1a:2c:f8:d3:36:e6:48:49:07:e6:
7b:3c:12:42:53:46:77:4c:86:1b:67:8e:94:ce:ed:
02:ba:d1:ad:f0:48:a6:8c:2c:6b:5a:5f:0e:fb:d8:
ba:18:bb:41:b9:da:41:bc:19:07:5b:92:20:3d:9e:
23:f6:2a:d8:23:f4:65:ac:bc:e1:38:c0:7e:8c:99:
47:00:99:9e:ea:19:94:f7:09:c1:a4:b7:63:39:e7:
7d:65:7b:db:b4:eb:f3:c9:f7:06:f0:94:d1:53:b4:
a5:04:53:91:7b:99:e8:0d:6d:7e:63:f7:01:46:f1:
72:64:1d:d7:00:f0:aa:06:3f:cf:61:12:b8:ad:91:
1e:bc:28:60:5b:da:c5:93:e2:41:b6:31:57:0d:f9:
bb:7b:24:28:21:96:45:99:2a:68:c3:cf:8e:6d:77:
68:bb:f9:7d:de:99:9a:3e:04:d5:17:1f:2b:3d:cd:
f9:ba:bd:92:13:c2:d5:1b:b5:c1:3f:a7:e1:42:80:
92:75:63:ce:b3:8d:a1:22:9e:9a:5c:ab:a4:12:bf:
17:68:c3:49:38:fd:fd:2e:a0:f7:7a:46:9f:3e:ef:
70:77:12:ee:0d:62:2a:4a:3b:50:d2:40:57:7f:50:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5A:42:03:94:63:E9:1D:F5:CD:16:91:8A:4C:52:75:FA:DD:5A:4C
X509v3 Authority Key Identifier:
keyid:ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d0:ff:8b:2a:b4:cd:f3:a5:fc:04:95:f6:87:24:5e:15:cf:
b9:5b:ec:d0:60:61:0c:c7:af:17:fb:6c:69:7f:28:35:e1:d6:
9b:a9:c8:74:cc:a1:10:74:04:39:00:97:d5:77:89:70:fb:3e:
80:c2:52:02:07:d6:b0:93:e1:95:ed:10:74:a3:37:26:76:e0:
ee:1b:a7:d2:93:ea:25:eb:dc:2d:cc:7a:1b:fa:c8:7b:0e:05:
be:54:66:7f:8e:80:20:8d:22:92:d8:a6:01:78:19:e4:c9:c5:
e1:ff:58:18:72:f1:aa:9b:b7:02:7a:73:7a:c6:e5:37:73:58:
f4:8e:ee:ad:43:9f:48:d9:67:b1:64:49:03:b8:02:43:cb:1e:
1f:19:31:6d:c2:79:4e:61:2b:51:8c:f1:4d:e2:7f:e7:ac:98:
89:9c:47:c9:43:bf:57:29:83:76:f6:8f:14:5e:66:5b:04:89:
c6:a0:39:1b:48:74:a4:71:b5:22:ab:1a:fb:cb:14:d8:29:4e:
70:2f:ad:a1:85:27:ab:74:f5:fb:54:a5:95:48:a5:dd:56:14:
24:aa:f1:7c:f2:3c:46:23:2d:aa:c1:e8:c3:d2:65:74:90:43:
90:84:16:7c:d3:91:44:99:da:f9:dd:25:6a:16:8e:f7:6b:55:
b3:a3:d0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:10 2026 by rpki-client