Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
File: e-ykASv3tQVuLgoWHrRhiHbJESo.mft (raw, json)
Hash identifier: ModhRl3ZbkjPw2NwQ7ozAO3rJjlp0/xCaQ8sKARMpmY=
Subject key identifier: F8:F5:C0:92:C7:1F:2B:87:83:4E:28:46:5D:26:D3:06:55:BB:9D:E4
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Certificate issuer: /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial: 019CAAC6730B2F099509502F47AFF539D174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:00:58 +0000
Manifest this update: Sun 01 Mar 2026 19:00:58 +0000
Manifest next update: Mon 02 Mar 2026 19:00:58 +0000
Files and hashes: 1: TrY6aUvOznEWPgwFCDr7RM2O3ms.roa (hash: DDvKuMgIkfq65IcNVG0b6/9Oq5NsQ98eHZFJJ6S6qiM=)
2: YddULzzqlHaijBKc45wV-2A9NRg.roa (hash: DJJK0mLKzBAwLMCbEIMtOEBhlQs/ecomUOMz09kFmzw=)
3: e-ykASv3tQVuLgoWHrRhiHbJESo.crl (hash: hq4ho+G165w/qQGhpQZfgFhQuj/6qYhyJgfHWi2+lU4=)
4: g4nCWXK_03YbprQHpph4RAU5af4.roa (hash: bja30FhVlRyFoYSsgn4yCXyL+dT+/OEpibcb3uOS2oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:73:0b:2f:09:95:09:50:2f:47:af:f5:39:d1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Validity
Not Before: Mar 1 19:00:58 2026 GMT
Not After : Mar 2 19:00:58 2026 GMT
Subject: CN=f8f5c092c71f2b87834e28465d26d30655bb9de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:1b:23:33:65:ba:af:6e:8b:85:d7:9e:ed:
5a:a0:75:d4:8b:74:cc:25:69:52:0a:a1:58:01:bc:
66:ba:07:ae:7a:50:ce:30:27:73:23:fa:1a:0c:e2:
46:3e:36:10:09:ad:59:c7:44:df:71:5e:5c:df:89:
26:72:4c:e2:0d:f1:58:f5:61:df:83:a1:e9:4b:d7:
0a:f7:b5:ff:fd:58:8f:43:7d:6b:ad:59:a6:60:76:
f0:66:32:02:42:29:34:62:77:9e:92:f0:79:fd:ae:
8a:69:8a:15:bf:01:c6:95:b9:df:83:f1:62:a7:aa:
e8:d0:f4:6c:aa:67:ff:92:94:e0:db:b3:70:3a:5b:
98:85:f3:0f:8b:f1:15:a5:b1:6c:77:93:5e:74:e3:
cd:3e:92:5e:7b:a5:4f:98:71:95:53:29:64:35:8d:
8f:92:4c:0d:b7:3a:95:ea:4c:e0:17:f3:7e:e2:55:
e2:f6:13:6f:f9:31:bf:67:b6:b1:38:b6:d8:77:f1:
52:54:66:8f:23:6c:d8:b9:2f:29:7c:8f:49:77:e3:
06:48:cd:9a:e9:d5:cf:4e:7d:22:5a:84:57:30:74:
4e:8c:19:69:3f:4a:b8:98:fe:95:ce:d6:c4:d5:4a:
ea:3b:93:c4:7f:40:ac:19:f4:26:4a:41:4b:a4:fe:
7e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F5:C0:92:C7:1F:2B:87:83:4E:28:46:5D:26:D3:06:55:BB:9D:E4
X509v3 Authority Key Identifier:
keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d0:cc:c9:6a:c9:2c:77:b1:0c:67:6f:b7:06:cc:a5:55:f8:
80:e3:48:86:e8:81:af:63:54:7c:69:aa:6f:52:48:a7:c6:55:
8b:48:1b:b4:a5:2e:40:3c:65:17:51:c0:d2:1e:a9:bf:c4:a7:
77:ae:5c:df:e2:78:86:af:53:cb:0f:3b:01:6d:14:21:33:b3:
09:08:21:19:a1:8f:f0:68:df:7e:a1:88:7a:e6:25:14:5c:32:
bb:28:e6:84:7a:60:28:90:d9:6a:4f:a9:71:51:1e:6b:e9:a9:
0b:d5:bb:b5:7c:01:33:f0:02:86:3b:08:f0:8f:f9:17:22:ff:
1c:dd:66:89:75:be:ce:77:cc:66:1a:be:f9:6c:4a:64:6b:93:
cc:9e:6a:21:2d:0a:66:4c:c0:de:bb:20:6c:95:0f:af:b3:95:
46:d5:37:28:a3:ee:c4:9a:2a:dc:86:32:05:d2:0f:f0:a4:61:
d6:74:34:40:d9:22:55:34:6d:b2:70:06:82:92:5e:e9:7a:eb:
19:20:c2:83:3c:52:d2:4a:53:47:84:77:96:45:18:e7:8c:32:
e4:10:c9:6f:b9:af:3b:0f:93:df:a6:1a:b6:65:aa:a2:bf:cf:
be:80:16:ce:8f:5d:b4:4a:67:6d:ca:05:8f:9c:90:26:08:8a:
31:a0:74:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:09:47 2026 by rpki-client