Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
File: 8yRYHkNogl1eE_TyoNb_jkhMleY.mft (raw, json)
Hash identifier: G+9Fi1hdyCtVDhu7xbwdv1c4xFqWGb8408aOmC9N+jA=
Subject key identifier: 14:15:4E:E7:B0:DF:27:77:B3:33:DA:AF:93:97:D6:69:CD:5F:F7:30
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 01A1754BEF465938FB581DEEBC6E2437C47A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
Manifest number: 0589
Signing time: Sun 25 Oct 2026 23:01:12 +0000
Manifest this update: Sun 25 Oct 2026 23:01:12 +0000
Manifest next update: Mon 26 Oct 2026 23:01:12 +0000
Files and hashes: 1: 8yRYHkNogl1eE_TyoNb_jkhMleY.crl (hash: zY8UZsl37TRTaytfsfqY9gLKiFAmwoI6vVb3c5E93sA=)
2: WYwz05XWytebFaVA_u49sTXq4vA.roa (hash: Ji40cgBzh5DAGJwSZnJu29tUWR5tPtn/hQZygjSqJ/g=)
3: k2qy4H1iATX3ljyTKxCT8RsgkE0.asa (hash: SHwlY+KbvB0ejHAvGpMfuyoAa/T8eGhpsnZ00cd3GgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:4b:ef:46:59:38:fb:58:1d:ee:bc:6e:24:37:c4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Oct 25 23:01:12 2026 GMT
Not After : Oct 26 23:01:12 2026 GMT
Subject: CN=14154ee7b0df2777b333daaf9397d669cd5ff730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:df:e5:c3:90:7c:37:bf:36:4c:7b:47:4e:
81:21:ff:5c:10:cd:19:6f:89:a9:77:63:df:b4:28:
fd:ad:6f:b6:b0:ea:91:e5:d7:b9:f8:0e:a3:2c:11:
46:08:5c:cc:d4:04:bc:df:ff:d1:aa:b7:d6:a8:e4:
50:ac:8c:a5:ec:0b:61:35:98:eb:5f:99:87:eb:00:
7f:14:46:71:09:ca:ee:f2:60:61:78:9e:7b:08:ca:
5f:d6:e7:b2:16:63:0d:c4:04:72:31:15:0d:52:d8:
81:76:53:e3:2b:be:8d:b1:7f:87:4a:c7:ee:0c:aa:
9d:ed:0d:b9:f2:08:0e:b5:d3:ee:87:81:60:f7:c8:
c0:87:c4:0e:e4:d0:55:0b:41:03:b2:47:f5:b8:ce:
03:d0:4b:ac:ae:d1:f5:bb:b8:6c:f2:c9:ce:4f:50:
e3:47:a5:ab:8c:58:48:02:84:a8:89:a0:34:26:4e:
39:97:16:a0:41:cd:f7:af:43:03:b2:57:99:2f:83:
eb:6c:7c:05:70:1b:30:7a:d1:87:63:a2:01:f0:f2:
84:84:a5:cb:66:9b:67:88:e8:af:99:2c:e1:bc:57:
18:8e:2f:2b:04:70:4a:b1:c8:ab:97:b7:cf:55:e6:
b2:8b:cd:ed:69:f0:be:5e:68:c4:63:23:e2:d0:3b:
17:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:15:4E:E7:B0:DF:27:77:B3:33:DA:AF:93:97:D6:69:CD:5F:F7:30
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:06:86:52:90:cf:8c:8f:58:5a:10:61:c9:25:93:9e:0b:b1:
b9:99:bb:42:8d:78:e6:15:1c:34:cf:7c:ce:7e:f2:b3:f1:8e:
4f:72:4e:9a:0e:63:10:56:9f:85:c1:d7:b4:d2:17:59:8b:37:
d3:db:8a:43:32:67:e7:cc:e3:47:59:91:38:bb:1d:8e:65:aa:
58:64:0f:84:e3:e8:e6:f3:26:2e:9c:ab:b9:9e:8f:23:e2:1e:
30:9f:c3:e1:ce:1f:58:12:93:e3:76:a3:64:86:c6:51:5d:4b:
15:35:d3:4c:38:cd:69:ae:6a:ca:ee:08:9a:cd:da:a8:76:b2:
e8:1d:05:b7:46:b7:05:80:6d:28:73:e7:34:a1:3e:57:5b:c2:
75:c4:2c:eb:d8:bb:b8:9a:d0:4d:6e:83:a1:20:d7:e8:67:96:
f1:63:61:c5:fa:21:64:7b:a6:19:30:6e:02:d7:ee:6b:f0:0c:
33:5f:4b:5a:03:81:04:eb:26:ad:31:f4:2b:e8:93:14:c0:7e:
e1:59:ce:23:e9:c3:57:eb:84:81:fb:69:00:0d:78:c9:3d:dc:
14:39:02:51:d7:c6:b9:11:e1:89:a1:ea:1c:cb:03:3f:df:9d:
13:a7:38:a4:27:ea:ac:07:60:f4:ab:46:8b:81:bc:4d:da:a1:
b6:1c:a1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:44:15 2026 by rpki-client