Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: SaSsqEIeHd7xK+gj8Pwcid2kr1rEmXajptmzyb2Efzw=
Subject key identifier: E9:2A:9F:D6:72:64:40:E3:2E:03:2C:C3:C3:23:7E:1C:6C:5D:BC:DD
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 01A1784C5BA34C957D569B991684919CEC9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 1AC3
Signing time: Mon 26 Oct 2026 13:00:32 +0000
Manifest this update: Mon 26 Oct 2026 13:00:32 +0000
Manifest next update: Tue 27 Oct 2026 13:00:32 +0000
Files and hashes: 1: 1-qkqvwRQTgG1xf7HZtZ-QtlNeBQ.roa (hash: uAnzzs6q7U6un+U0t3+PFFv4SIJ/S56dCg4WUcRKDUE=)
2: 9BzFpLnLB1lQperfgmv4qrzYH0o.roa (hash: SqfjtbEZOdrWLg54xvBk/hWboyrJmqo9/XjbAhZrvws=)
3: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: TDgyZK5dyGEvU8fKCexKwQlI43R331Nboe8KT8ZfoP4=)
4: yxoCaKfgeTweKDIo2zxWc2jeH10.roa (hash: iUYOXpm89oJ723QbmJPdvxscW5Vo8+6ZFKBfX+z5wi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:4c:5b:a3:4c:95:7d:56:9b:99:16:84:91:9c:ec:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: Oct 26 13:00:32 2026 GMT
Not After : Oct 27 13:00:32 2026 GMT
Subject: CN=e92a9fd6726440e32e032cc3c3237e1c6c5dbcdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:33:56:18:35:17:76:0c:f6:f2:33:c1:fd:
e9:4f:52:86:e1:50:ee:39:ff:48:43:c6:5a:c0:a8:
54:09:5d:23:d0:8f:4e:63:bb:5b:dd:5e:c9:28:2f:
bf:67:48:8e:73:33:0f:e3:85:0f:c6:27:02:71:ff:
87:7f:d4:ce:8f:47:af:1b:13:65:f2:a8:3a:a2:88:
c9:b4:41:94:eb:87:4a:f3:da:fe:11:b1:0c:95:b3:
fe:ad:8c:e7:fa:87:07:3b:2a:ab:d9:69:fd:8c:db:
d9:11:81:65:c5:0d:b1:fc:08:73:98:16:d5:80:e1:
7d:54:80:84:c9:24:90:aa:0b:fe:6a:b5:b4:6c:be:
ee:5d:8a:5d:09:1f:86:45:af:8e:e3:06:33:d1:e2:
91:4c:f6:b2:b7:48:fd:35:48:a6:4a:32:df:38:1f:
e6:e7:68:a1:1f:4f:1b:0e:1e:d7:f1:07:ea:61:5e:
aa:c9:02:ad:64:3a:d9:fd:f0:69:8f:8e:fd:41:8b:
d4:8d:cf:d7:c1:ce:24:d9:ab:6c:10:12:9d:d8:3b:
09:9f:03:6a:78:34:e7:df:97:f2:f5:8b:45:ee:b6:
08:6c:9f:f8:23:13:37:3f:26:cb:30:77:7d:05:a1:
1e:eb:54:3f:12:06:7f:b6:31:55:e1:64:0c:86:38:
96:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2A:9F:D6:72:64:40:E3:2E:03:2C:C3:C3:23:7E:1C:6C:5D:BC:DD
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c7:41:67:98:73:6e:ba:fe:54:7e:20:5b:42:ed:bf:6b:57:
eb:67:e7:78:96:03:56:ad:73:2c:57:94:1a:64:d4:a1:76:3f:
59:05:f8:34:13:d3:33:f5:17:42:c9:21:8c:9a:8b:b7:93:a1:
66:d7:cc:e9:e6:b5:d0:bb:52:e1:8b:fc:3e:01:9d:08:c5:f0:
12:94:ec:cb:f0:d3:33:cd:c5:15:69:b0:ab:f2:28:0a:60:69:
8e:79:f3:b7:74:c7:34:16:66:f3:17:fc:4a:1c:dd:83:e0:42:
14:6f:bd:9e:ac:dd:9e:3a:39:07:18:c4:0d:d0:30:49:99:d6:
0c:f3:87:e8:fb:c9:12:cd:6a:6f:a1:ef:ec:9a:5a:17:1f:19:
1f:a6:b7:63:2e:e4:9f:84:80:0c:7e:99:aa:e7:91:2b:d4:57:
1e:63:7f:f9:a8:4c:fe:3d:77:a5:3b:02:f3:07:e0:fb:4c:86:
5a:1d:ec:a0:c7:a8:13:2c:37:ef:09:45:1e:32:54:23:e8:65:
44:9a:bf:7c:d4:2e:8e:f7:c2:ca:02:31:ab:ae:e0:33:f2:8b:
13:61:61:1e:7a:d8:78:63:34:ba:ee:c8:2b:39:b7:2a:bb:ce:
fb:02:bf:f3:a1:36:31:4b:b1:23:02:e2:56:3c:69:1e:fd:37:
22:36:db:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 18:01:12 2026 by rpki-client