Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
File: Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft (raw, json)
Hash identifier: KMYylYt8gMEwZwNtbEKv/pqxc26UpU0HqTmCAgBgwrU=
Subject key identifier: B2:B0:83:22:A6:6A:60:A8:13:27:EF:35:9F:91:9C:19:87:21:6D:3D
Authority key identifier: 63:CB:81:A7:AF:13:6D:96:F0:C7:60:51:DA:6E:4D:05:D1:FF:63:3D
Certificate issuer: /CN=63cb81a7af136d96f0c76051da6e4d05d1ff633d
Certificate serial: 01A143F1FCA4156F8493AD3C258BDEEF987C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
Manifest number: 0121
Signing time: Fri 16 Oct 2026 09:01:34 +0000
Manifest this update: Fri 16 Oct 2026 09:01:34 +0000
Manifest next update: Sat 17 Oct 2026 09:01:34 +0000
Files and hashes: 1: 7cTjsLRiYYSxjEiyyxvrM7VcUoM.roa (hash: 9oRDcj/n0yIWrTx9daAB6UyBKfL+1eMjORwY8HvJ18Y=)
2: Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl (hash: xAivVylU9ty1IGa2ukC9ZNSb4HzP12HWQ2KMmSexrGA=)
3: p0eoEVp2ZRfAFQIEeNZFFp6BKKo.roa (hash: 7ygvBpXf/4xZkV++cCRPOzyCKN66G0s7NhzA+lJoryE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:f1:fc:a4:15:6f:84:93:ad:3c:25:8b:de:ef:98:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63cb81a7af136d96f0c76051da6e4d05d1ff633d
Validity
Not Before: Oct 16 09:01:34 2026 GMT
Not After : Oct 17 09:01:34 2026 GMT
Subject: CN=b2b08322a66a60a81327ef359f919c1987216d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:28:1b:40:ac:17:f9:8f:62:9d:8e:44:8d:
af:e1:ab:d1:6c:d9:a9:98:d6:13:fd:39:3e:e2:af:
c8:81:f6:8e:3e:57:b8:7b:b1:39:a4:d3:55:a6:fb:
53:42:95:71:e0:b6:ac:db:94:78:d8:fb:01:58:0c:
b0:8c:9c:87:5c:a9:68:e4:da:51:43:c4:2c:d8:4e:
2f:eb:6f:f9:53:7b:24:dd:fe:5b:e5:9e:1e:da:f9:
82:85:fa:a6:09:57:bf:06:04:62:73:c1:30:4c:1d:
85:02:8c:ce:7e:44:5f:0a:f0:40:02:a1:c5:09:94:
ba:d5:80:86:89:f5:dc:46:60:87:84:f4:19:c1:32:
e9:45:77:54:33:bb:46:2a:4a:3b:5c:97:fd:27:d0:
00:67:ea:57:10:5f:8e:9a:b6:24:fc:c0:a5:66:cb:
66:6d:85:fb:3d:ed:07:31:27:c2:03:6e:5b:70:e0:
19:95:4e:04:f7:ad:37:39:89:9c:2d:d4:4c:69:82:
bf:5a:ba:19:42:bd:15:fd:55:94:10:7c:02:81:fa:
2c:28:82:a1:62:33:0a:8e:70:b2:75:61:48:c1:d0:
14:6f:42:d7:b7:a1:f7:d7:af:a7:2e:3b:b1:cf:ae:
e8:c9:ea:a6:9f:d6:88:8f:b7:d1:bf:1f:2b:ac:68:
c3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B0:83:22:A6:6A:60:A8:13:27:EF:35:9F:91:9C:19:87:21:6D:3D
X509v3 Authority Key Identifier:
keyid:63:CB:81:A7:AF:13:6D:96:F0:C7:60:51:DA:6E:4D:05:D1:FF:63:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:08:69:98:40:c5:84:33:30:c1:0d:ab:77:42:21:8f:b4:1a:
43:8b:22:af:3f:69:06:ba:52:e3:13:0f:87:48:9b:02:7c:17:
44:8a:14:05:fc:4d:39:85:9b:0a:32:0b:1c:bf:da:4d:67:43:
35:14:c6:1c:6e:b7:2b:51:69:4d:c1:6b:56:8d:64:40:37:39:
b9:ff:65:e4:49:0a:36:17:d7:59:6a:88:f7:91:06:94:58:c2:
7e:ef:45:98:84:05:29:61:a4:23:76:b1:96:67:82:4f:2d:32:
34:70:59:a2:6c:f4:ca:fd:af:1e:3c:97:c3:57:69:e8:f7:7d:
57:29:0e:d5:49:39:78:4b:a3:f7:f7:41:71:f8:d0:48:f8:84:
9d:ec:57:36:b7:f0:c6:7c:ac:d2:d1:76:9f:f6:41:a7:ba:9e:
6b:f0:74:0b:17:6f:2d:ef:45:a6:ca:c8:4d:6b:db:15:6d:df:
ff:af:fc:5c:e1:89:bf:38:60:9e:a7:ee:39:dd:77:5f:98:b0:
16:b4:f9:6f:a0:99:a9:e8:cc:85:e9:95:5f:44:bd:88:d4:fb:
3c:af:7c:d7:7c:4c:ba:e1:53:f1:be:bc:81:51:af:a5:d7:f8:
c0:e0:53:ed:12:a8:1d:a1:8a:f1:9d:53:8c:26:ef:66:ed:83:
6c:8e:d5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 14:48:52 2026 by rpki-client