Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json)
Hash identifier: LjTNG6yaOItSegR0b2R3MIabaqL5ZC4VyEC0WhOePgo=
Subject key identifier: B8:AD:00:29:53:20:AE:54:F4:10:B0:BA:20:37:39:B9:9A:D7:12:C2
Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Certificate serial: 01A08F45398EA7899E93164839F2E72639E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
Manifest number: 0D7F
Signing time: Fri 11 Sep 2026 07:01:13 +0000
Manifest this update: Fri 11 Sep 2026 07:01:13 +0000
Manifest next update: Sat 12 Sep 2026 07:01:13 +0000
Files and hashes: 1: ORD5CVRl8fHNkrGDCcDgKgiB4nA.roa (hash: SAvELpe3u4u8sy1W4tmIPkF/1bK/o7riGyIeb81WOH8=)
2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: jjDrtP0TAkVLCDovnXeftzO8CbrpCvIV1Ujw0Fg5tLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:45:39:8e:a7:89:9e:93:16:48:39:f2:e7:26:39:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Validity
Not Before: Sep 11 07:01:13 2026 GMT
Not After : Sep 12 07:01:13 2026 GMT
Subject: CN=b8ad00295320ae54f410b0ba203739b99ad712c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:99:10:2e:a5:ce:6c:d8:2b:12:b4:e7:47:
51:66:7a:25:8a:49:4b:f5:a2:09:f6:e3:68:2c:01:
42:dc:f0:48:11:97:ac:ef:d6:b0:af:a1:df:06:03:
6a:a6:54:ff:b2:79:04:b7:fe:66:73:e1:20:d0:a6:
c6:79:1f:70:87:90:c9:60:d7:31:0b:31:8d:39:75:
4b:80:b7:7a:3f:c0:5b:aa:1c:bf:33:46:90:0c:99:
89:94:b7:33:2c:60:ee:32:cc:84:da:1b:f7:6c:8a:
08:d9:24:56:1e:a2:2d:00:d5:3b:26:9f:70:ee:13:
5b:98:1c:b0:8f:61:39:79:9d:4d:71:81:46:ae:8c:
e7:49:e4:39:b0:d1:0f:5f:11:d8:13:3c:72:d1:5f:
98:d0:71:65:34:36:30:cb:7e:d9:1f:2a:08:ee:83:
15:a7:33:6e:3f:88:d0:6f:f4:51:69:6f:c2:7d:d5:
d5:f2:2d:cf:ea:de:be:09:d3:da:f1:25:f0:b9:0b:
fc:2d:80:86:6f:29:38:b6:55:41:a4:c7:c2:dd:cc:
7a:07:d8:91:f3:65:ab:0b:46:1c:60:74:18:fd:aa:
69:50:4b:c4:80:62:ab:1e:91:b1:0d:7e:e7:ee:87:
54:16:b3:be:d8:9f:52:6a:d7:29:1c:f9:a5:67:e8:
84:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AD:00:29:53:20:AE:54:F4:10:B0:BA:20:37:39:B9:9A:D7:12:C2
X509v3 Authority Key Identifier:
keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0e:41:b4:48:4a:63:53:c1:b3:b2:de:a3:9b:d5:1b:d0:0d:
8b:91:5b:ed:83:d0:dd:4b:22:c8:a2:4e:04:3b:ef:25:7f:3d:
e0:c0:7d:23:09:35:7f:ba:d8:00:3a:61:97:5f:d5:32:f6:18:
25:62:64:a6:05:a1:2f:90:42:1d:27:5c:31:7a:bd:11:78:c9:
4b:fc:8b:8e:4c:23:ac:4e:3b:8f:ca:23:55:55:3d:59:46:6d:
ff:ee:32:65:8e:e9:29:4b:18:4c:0d:71:d1:ec:96:af:25:cd:
98:39:6a:1b:92:d3:0f:01:30:f1:6f:86:40:7b:6f:d6:2f:cb:
53:93:48:22:0e:5e:91:c7:70:84:66:bd:8a:f5:39:84:92:19:
e9:81:f9:0c:35:9b:20:2e:0a:83:29:d9:86:d6:89:16:95:ce:
ce:d8:a6:87:8b:d4:3c:ea:9e:89:34:41:61:c0:e8:96:18:50:
19:32:7b:77:b0:63:7d:ba:b7:2f:1a:2b:7c:c5:8e:a2:dd:65:
90:17:c8:81:52:98:1c:a0:da:a4:52:72:db:2d:91:de:26:53:
13:5f:fa:d2:bd:34:1b:e6:e8:4c:72:3d:c0:89:93:9d:67:35:
18:2e:94:35:cd:7a:70:f5:29:27:bf:fd:e7:fe:fb:49:26:e4:
bd:5a:5c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 18:09:35 2026 by rpki-client