Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: rwu1WCbfXBLm9Ii1ucJpmbNQNLZg7DFtLabsf2A8Em4=
Subject key identifier: 03:D6:1F:1B:61:B7:F9:61:64:3C:0A:2B:D3:01:45:B4:75:34:E5:A8
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 01A187BFCB349F06D0C46009B8229FB09D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 0E87
Signing time: Thu 29 Oct 2026 13:00:55 +0000
Manifest this update: Thu 29 Oct 2026 13:00:55 +0000
Manifest next update: Fri 30 Oct 2026 13:00:55 +0000
Files and hashes: 1: 6PWOGz_KqRkb1zSJBPSYqwA3Obk.roa (hash: 2QNX7SpmW+cQkXWOHdllDN5APRnT1YGjOBVoLe9iX0U=)
2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: ozCimSR2RTyaNgDNnGlZSfff4UTMnyXJedxq+1Gw0z8=)
3: prAX8QK9sJ83-_8sb5b9uyxyLB0.roa (hash: MGpYm8TiAMHtR6UX1RiE9OEkX3HH/xl2rU9chl3K2sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:bf:cb:34:9f:06:d0:c4:60:09:b8:22:9f:b0:9d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Oct 29 13:00:55 2026 GMT
Not After : Oct 30 13:00:55 2026 GMT
Subject: CN=03d61f1b61b7f961643c0a2bd30145b47534e5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bf:73:5f:3a:0f:d3:22:43:d3:e7:99:c0:1e:
21:d1:28:45:f9:15:72:ab:84:38:3e:75:8a:25:2e:
a7:34:2b:87:c4:4b:94:1a:02:56:5e:ae:a2:29:38:
b2:9c:e0:b4:d8:61:84:55:ec:f1:be:09:45:3e:f9:
a1:30:5f:a1:ec:74:0b:d0:dc:d7:89:a2:4d:2b:4e:
49:f1:e6:29:39:b2:25:b7:8d:cd:2f:22:22:b9:ed:
97:e1:0e:56:8b:65:6c:b4:b3:83:e0:50:33:43:58:
17:9c:30:74:0a:8d:32:e1:06:3a:79:86:d7:ec:7b:
b6:70:1e:8f:c1:30:be:da:6d:e1:70:21:cb:22:e3:
73:a2:8f:41:ca:6f:40:22:58:17:33:a6:ec:21:c0:
4e:16:43:81:91:a2:d6:5d:e3:90:2b:b9:da:cc:a4:
c0:f2:38:f6:b1:60:c8:85:30:ea:f9:3a:25:cb:07:
05:87:58:fb:f0:fd:8a:6f:35:0a:f8:c6:da:c0:03:
c3:7c:b6:bc:9c:ec:a1:d7:42:fb:d7:35:41:a7:e1:
52:be:5b:f0:91:e0:78:7b:5f:39:b5:f9:5a:4c:e3:
5d:5a:06:94:8d:0a:50:8a:d8:94:d5:21:d0:65:8c:
54:da:4a:da:19:ff:8a:c0:77:ae:d4:7e:ba:0e:c0:
25:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D6:1F:1B:61:B7:F9:61:64:3C:0A:2B:D3:01:45:B4:75:34:E5:A8
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0d:76:9a:54:7d:80:20:18:18:44:9a:1f:7d:fd:d9:96:41:
32:db:0f:86:f7:8d:9c:ed:29:99:6a:6d:46:38:e3:da:74:f5:
e6:ad:a5:fd:d7:b0:c0:e4:84:1c:e2:43:d1:cf:dc:32:81:68:
f9:0b:e8:34:dd:91:2b:1f:7c:43:f6:d3:ab:92:9b:96:f0:a5:
08:68:18:d1:36:be:49:87:f2:85:9b:86:7e:a3:54:06:21:02:
cb:ab:dc:58:71:94:ea:cc:d6:e7:66:42:aa:70:31:02:0f:93:
5f:3c:21:56:d4:de:a2:cc:53:98:0a:88:f8:df:34:b3:10:86:
2e:7a:e1:6a:6f:d2:17:b3:bf:dd:e9:ca:6d:34:8d:c6:ef:43:
61:1e:3c:b3:1e:df:d4:23:9c:7a:f7:1d:f6:7f:27:e2:58:9a:
d5:16:aa:ff:7a:b9:e7:16:41:8c:6f:ec:51:49:bb:8a:d9:a0:
f3:f9:e3:5d:b9:86:ab:ac:58:1d:62:e5:be:06:66:ad:3b:e1:
6c:58:19:be:66:48:3a:c6:1c:d2:5b:13:6a:55:4f:67:2c:1c:
03:37:ec:73:0d:22:23:3f:c6:77:7a:73:43:dd:2c:72:c3:52:
6b:35:96:98:39:bd:90:21:b6:a7:23:8c:aa:b6:e0:c6:8d:23:
82:e9:eb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 18:47:04 2026 by rpki-client