Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json)
Hash identifier: xVNfwxaRv44u+oukIdliCge0pcfvF4VtBqHuQfJ6PYY=
Subject key identifier: 93:17:17:A6:56:5E:A9:B5:F2:B6:BC:B9:A6:A5:6D:E9:5D:CC:17:AC
Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Certificate serial: 01A18299F5613CEC76598C9EA3D9892EAB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
Manifest number: 0DFD
Signing time: Wed 28 Oct 2026 13:01:30 +0000
Manifest this update: Wed 28 Oct 2026 13:01:30 +0000
Manifest next update: Thu 29 Oct 2026 13:01:30 +0000
Files and hashes: 1: ORD5CVRl8fHNkrGDCcDgKgiB4nA.roa (hash: SAvELpe3u4u8sy1W4tmIPkF/1bK/o7riGyIeb81WOH8=)
2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: rxfHF5b+dtrPsx1pUMZc5EGya854MLrTxHRHre/y7eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:f5:61:3c:ec:76:59:8c:9e:a3:d9:89:2e:ab:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Validity
Not Before: Oct 28 13:01:30 2026 GMT
Not After : Oct 29 13:01:30 2026 GMT
Subject: CN=931717a6565ea9b5f2b6bcb9a6a56de95dcc17ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:14:a3:93:7d:7a:a5:24:9e:61:73:75:60:c4:
2b:1f:47:5d:3a:e6:08:f5:c7:b4:04:4a:b8:06:06:
53:9e:37:0b:ea:61:f8:21:d5:0a:98:df:0f:5f:ac:
73:7d:50:13:7f:c5:39:d3:bb:9c:3b:b4:85:59:bc:
ab:58:e6:77:1d:a6:8e:00:47:a6:cc:e6:01:d2:a1:
44:34:6a:68:d3:62:0b:12:64:9d:75:45:e3:62:d7:
60:fb:89:0c:f8:2c:f8:b9:22:39:2c:ce:47:5e:a6:
27:b6:7b:c9:45:a5:bf:bb:d0:0d:5c:d3:8b:60:16:
b1:8b:dd:d5:f6:ea:53:30:95:09:eb:d3:2c:f9:cc:
b3:16:37:df:60:40:04:65:80:8d:f5:d8:2c:d0:e0:
78:92:ff:7e:41:df:fd:a0:1e:ca:5f:5f:9e:62:70:
d2:16:ce:e3:18:30:c1:f4:55:c6:a0:3d:f5:51:ec:
7d:33:c0:9b:1c:aa:6d:26:1c:a0:9e:5a:01:63:bb:
c4:10:fe:fc:2a:64:04:91:fe:b8:25:8b:e9:ec:5d:
31:6e:b6:40:f0:99:cd:e2:87:9d:50:0f:6d:8b:37:
a1:b3:54:9c:48:d4:48:bd:65:4d:82:b2:39:79:38:
f2:91:32:47:5e:59:4e:c1:f5:d4:a1:f3:72:4b:b0:
86:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:17:17:A6:56:5E:A9:B5:F2:B6:BC:B9:A6:A5:6D:E9:5D:CC:17:AC
X509v3 Authority Key Identifier:
keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:17:e0:46:2e:f0:c1:90:de:10:01:69:23:58:e8:14:be:c0:
4e:a0:fe:8e:9e:bb:20:ce:62:d2:d5:09:9e:47:a2:f6:c2:c2:
c5:9d:75:c8:36:23:4f:42:df:4f:ca:17:19:4d:d9:6f:a0:d9:
9f:74:8e:6e:e4:b7:06:62:b7:fd:8f:6b:53:3b:bd:9e:f0:e8:
89:02:46:1f:67:47:e9:ae:c5:bd:3d:4d:a5:29:3e:42:e4:ea:
9f:96:a5:90:d1:35:47:ae:b6:df:6e:99:77:26:80:dd:da:7d:
44:82:af:15:b3:07:46:76:21:c1:98:02:b9:a5:51:b7:e3:e2:
c1:97:1b:2c:7d:91:6b:ed:4c:b2:a2:a9:3f:df:0e:ce:47:de:
fc:d7:8d:22:da:a9:ac:91:cd:b0:97:9b:a0:d5:51:de:e8:74:
97:6c:f3:34:25:3a:50:73:aa:15:19:96:38:04:90:7d:f3:35:
e4:08:56:3d:07:99:51:16:ea:1b:e8:35:60:fc:03:8d:d5:a0:
95:4c:03:5b:b8:b4:7a:e8:cb:97:64:fe:59:cf:f0:f3:6a:b7:
d8:ff:eb:ca:48:a7:96:c2:d9:5d:c6:7f:30:a0:12:66:ae:4f:
3e:8d:df:8a:9b:d5:55:d0:a2:10:de:29:68:cb:2b:70:ac:ca:
80:7a:a3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:32:45 2026 by rpki-client