Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: TXM7vXBsgU6MloOmY2Mi/2UNdSVaaIyMqQmk8Hx5L2s=
Subject key identifier: 41:62:5F:79:F2:77:73:2E:88:D6:30:94:32:FB:4E:DB:FE:94:C3:64
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 01A180E1D5A2A8FE38BC5E5AC8DF02AEE728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 09A0
Signing time: Wed 28 Oct 2026 05:00:46 +0000
Manifest this update: Wed 28 Oct 2026 05:00:46 +0000
Manifest next update: Thu 29 Oct 2026 05:00:46 +0000
Files and hashes: 1: 6ZBPRGxMRhzUL39PVDVSduo6FUc.roa (hash: mXhPY8g7CrKLHAIlSEURMCEabcnrrTvn2LVrA4zymb8=)
2: B0WU8sYjxbF2I99DOG4CZtJFemU.roa (hash: kZf8Vi7lYB4Gl+U+zxW5wY6bn3f+hQC1mSLMVib18Xg=)
3: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: e6Fuxs85VaxcNN/zB1VkGrxIfD2+zcb5W+RdDckDn80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e1:d5:a2:a8:fe:38:bc:5e:5a:c8:df:02:ae:e7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Oct 28 05:00:46 2026 GMT
Not After : Oct 29 05:00:46 2026 GMT
Subject: CN=41625f79f277732e88d6309432fb4edbfe94c364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:ab:2c:ff:4b:72:46:07:0f:55:4f:5e:4a:
0d:9c:8d:ee:b6:16:7c:d6:c1:4e:8f:e5:55:85:be:
58:3c:71:8d:62:b7:37:e4:39:7a:e2:54:4f:a7:ec:
30:77:80:1f:dd:84:2c:d2:9b:38:37:8c:1e:1d:86:
d2:4e:a8:63:1c:6e:48:ee:f9:a2:5b:f1:0c:ed:9b:
50:30:16:93:af:40:9a:bb:b3:68:52:2e:3c:bf:fc:
29:b8:f9:a5:c0:97:ed:50:60:2a:fe:7d:18:a4:d7:
5b:ad:35:9a:7b:ef:bd:ee:70:ec:81:db:d5:50:03:
ef:d9:20:8d:80:cb:db:ff:31:35:fe:33:31:e0:a3:
09:dc:ba:6c:7a:02:a5:38:f9:b7:8d:1b:d3:ab:05:
62:6f:99:45:43:e8:4d:3b:b2:0d:cf:00:d3:1c:bb:
18:4a:1d:4c:88:32:aa:22:95:79:b3:89:8e:69:30:
7d:0c:aa:62:64:bc:f4:bd:30:76:ef:77:e2:f7:ae:
19:5c:ed:c5:f0:b8:08:0c:c4:f7:fa:66:f5:8a:85:
68:02:d7:49:d7:8b:3b:92:3e:fa:14:c3:81:63:63:
1e:fd:09:85:42:63:e0:16:fc:78:81:38:42:f0:a4:
e2:46:f0:36:af:8b:19:ef:b1:60:5f:42:dd:37:af:
3c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:62:5F:79:F2:77:73:2E:88:D6:30:94:32:FB:4E:DB:FE:94:C3:64
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:df:e4:4b:af:8a:1b:cf:81:0a:cc:46:8f:50:b4:96:5f:33:
53:9f:8b:3b:a0:19:0a:df:7d:7b:f6:3e:00:88:ad:5c:ce:41:
e4:f6:f2:8a:10:ad:d3:44:b1:91:ac:67:bb:0f:91:ef:40:58:
df:70:85:ac:de:97:f3:cf:a9:c7:ae:75:ec:c8:ae:52:20:e7:
d9:1f:83:8e:1c:c9:e6:de:c6:16:31:8c:ed:0d:df:05:75:f3:
3c:7b:e2:ac:b6:23:98:cd:b9:76:75:e7:d1:22:7e:19:06:7a:
fa:a6:59:4d:fa:25:ea:7b:03:d7:ee:5a:86:da:63:be:ec:d6:
05:b5:67:6a:92:0c:f9:fa:80:36:6a:25:9b:c1:47:1a:53:26:
5b:9f:e5:d6:37:89:97:aa:e2:23:0e:cc:e5:8f:75:af:2e:2e:
7e:ff:e3:13:b1:0b:03:08:aa:39:f8:6c:b1:06:cb:df:1f:87:
a7:25:f0:13:71:b9:3b:49:88:a7:28:92:a7:bf:98:c0:37:57:
fd:14:7e:0f:42:19:92:08:cb:6e:0c:a4:ab:15:0e:34:cd:8e:
77:24:13:0f:98:6b:99:c1:b2:c2:7d:36:ec:93:8b:09:d7:7b:
00:9f:67:fd:bc:5e:f9:24:41:db:c9:49:f8:bc:db:ad:10:f5:
be:27:da:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:20:50 2026 by rpki-client