Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
File: _sY8Uk5V3zS_dYKCd1PnenaZx6I.mft (raw, json)
Hash identifier: des+q8TyAJ90ZUxQYlqDZIxTIw9CS1AfFKD5VjYqmVw=
Subject key identifier: BA:74:A9:52:56:3F:A4:8C:A7:76:24:F5:12:00:6E:A0:3D:C5:D8:58
Authority key identifier: FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
Certificate issuer: /CN=fec63c524e55df34bf7582827753e77a7699c7a2
Certificate serial: 01A187F6C447E4C0BCEC83F877230FD8409B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
Manifest number: 16D1
Signing time: Thu 29 Oct 2026 14:00:58 +0000
Manifest this update: Thu 29 Oct 2026 14:00:58 +0000
Manifest next update: Fri 30 Oct 2026 14:00:58 +0000
Files and hashes: 1: PDlzLdRSfiCWn5Cn9n1N3CZ3lEA.roa (hash: EEEk6xoAWgV2qpYCMx9BhEvvCT14wds/MjLsIpjnFvU=)
2: _sY8Uk5V3zS_dYKCd1PnenaZx6I.crl (hash: SjvgbTw+QYMAXHbMdzlJpmUHUs61E97XfKvLFVce8OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:f6:c4:47:e4:c0:bc:ec:83:f8:77:23:0f:d8:40:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec63c524e55df34bf7582827753e77a7699c7a2
Validity
Not Before: Oct 29 14:00:58 2026 GMT
Not After : Oct 30 14:00:58 2026 GMT
Subject: CN=ba74a952563fa48ca77624f512006ea03dc5d858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0f:0b:c0:fb:74:04:29:0b:d5:29:2d:dd:c1:
39:92:f8:ec:44:69:74:34:e3:40:26:2a:6b:16:41:
d3:3e:e4:95:79:97:88:eb:d0:a1:17:31:3b:69:f0:
ec:3d:15:d6:14:f4:f7:48:10:aa:8d:ed:49:08:fd:
0a:4f:e7:53:77:6a:d8:19:a9:19:93:69:41:d1:00:
79:f1:79:eb:4d:9c:1a:51:6c:73:00:08:2e:cf:6f:
3c:0b:5a:db:e3:68:ca:3e:41:5a:47:87:11:f3:a9:
8b:51:ed:63:7e:35:7c:aa:87:42:50:47:8c:e2:81:
75:f6:c7:4c:13:cd:6c:d7:6a:91:de:17:81:ef:70:
1b:eb:fc:4e:52:b6:f9:8e:9d:0a:af:81:f6:60:07:
e0:8b:9c:ec:d4:69:f3:d8:44:04:5b:18:37:02:4d:
ff:02:15:6a:2f:7c:45:4a:2a:8e:b2:1d:8c:06:05:
b3:dd:72:85:8b:98:f5:ed:8a:ce:24:2f:46:dc:cd:
2b:f3:2a:6e:23:11:65:df:a1:bf:a9:74:b2:af:cf:
a4:8a:6a:7a:32:04:bf:47:25:e2:f5:a8:22:2c:d6:
2e:4b:9c:62:f1:04:f6:f9:1d:8f:a1:18:dc:14:d1:
83:13:68:9f:b3:50:d2:29:25:e1:bc:9b:da:20:d3:
d8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:74:A9:52:56:3F:A4:8C:A7:76:24:F5:12:00:6E:A0:3D:C5:D8:58
X509v3 Authority Key Identifier:
keyid:FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:79:60:53:fa:a8:71:3c:be:91:b3:33:dc:4e:31:14:40:92:
d6:e4:4c:86:8c:72:00:48:9d:0b:48:de:16:a3:b2:c5:81:a4:
68:5c:e3:de:4a:43:cb:d3:d2:27:f1:ce:72:62:16:b0:3b:07:
5b:07:74:f5:b4:0b:a5:54:73:02:a2:65:59:e0:5d:50:72:55:
bc:dc:05:cc:86:e2:39:18:6f:4b:58:08:bc:15:bd:66:d9:7d:
68:b6:4b:e4:fb:1f:05:67:23:8d:dd:32:4c:4f:22:9c:ce:4f:
d0:78:95:ea:bd:e4:dd:4c:09:d7:22:48:f7:b8:3f:73:49:d5:
13:59:3a:b8:60:4f:30:d6:0d:bf:95:6b:39:41:af:62:d8:a3:
fd:02:e0:1a:6a:45:e9:87:0c:d5:39:cf:19:e8:22:91:cc:42:
51:37:83:ac:eb:f7:ad:74:87:d8:f7:0a:bd:e7:bc:71:53:39:
fe:78:8c:61:21:b8:6d:08:84:0b:c6:87:7b:0b:b5:6c:11:ff:
d3:9a:27:e9:7a:c2:0b:a4:56:95:31:6b:d9:f3:92:e9:82:df:
a3:40:03:60:e8:72:37:04:3f:31:e9:53:1d:05:aa:f8:90:a2:
c5:3b:09:57:d7:d5:4e:1e:c7:60:6d:a0:cf:8f:68:56:c0:d7:
ef:07:4b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 18:41:44 2026 by rpki-client