Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File: Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier: xCWrrbKp02yhvdZL+KKLpxQJlljVxgx0sHx89m7X+Bc=
Subject key identifier: B7:0A:F2:0A:35:D0:7C:B3:A4:C0:26:4B:92:BD:0C:BE:5E:DD:22:AD
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial: 01A155F818AE5E71C145DDFA9676CBA0825B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number: 0B89
Signing time: Mon 19 Oct 2026 21:01:24 +0000
Manifest this update: Mon 19 Oct 2026 21:01:24 +0000
Manifest next update: Tue 20 Oct 2026 21:01:24 +0000
Files and hashes: 1: OZwTEhhz89DG-d3VUUmj7RDclB0.roa (hash: VGKfh4SeFwSQNLUtXLKPpcLTHLslj6UGjADg7S741KI=)
2: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: x8zGm2kpmbj0V9UA5AG/YC0ddn2A9HnzDdbAseiM4J0=)
3: _cO3dPrIFou0SkBFKvSED_RiaEA.roa (hash: l5NyYi26dL87o5NLg8E85DjdFhJOd6MAl45991rZZ/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:f8:18:ae:5e:71:c1:45:dd:fa:96:76:cb:a0:82:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
Validity
Not Before: Oct 19 21:01:24 2026 GMT
Not After : Oct 20 21:01:24 2026 GMT
Subject: CN=b70af20a35d07cb3a4c0264b92bd0cbe5edd22ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:76:27:75:e6:a0:33:46:bd:bd:f0:07:86:
78:36:39:15:1f:ee:89:37:26:75:ce:af:6f:0b:f3:
b7:1f:02:0c:00:03:cc:e1:14:0d:49:84:22:c2:da:
d1:01:8d:71:75:3d:38:63:9a:39:ba:ef:d6:22:27:
9b:0d:ae:0f:a2:c3:d2:77:e9:9d:b0:78:7f:b1:d4:
ca:b1:47:92:1e:45:c4:19:07:c3:9c:83:85:ea:ac:
df:f5:4a:b4:d1:3f:1f:14:d0:5e:be:50:ca:2a:d5:
92:5f:74:11:7b:23:b0:c7:da:8a:3b:83:e2:97:33:
18:8a:56:b7:77:97:2f:39:dd:34:6e:d7:84:90:88:
cf:c5:36:32:ce:b8:69:2c:94:35:3a:2c:95:47:9d:
03:90:f4:4c:6f:73:b4:94:dc:0a:e5:d1:35:ee:22:
6f:05:67:10:4a:44:ff:2a:af:38:0e:ea:77:cf:d3:
63:6f:a1:db:48:6a:31:9e:be:02:65:10:cb:19:eb:
f9:a3:2f:0a:ae:09:cf:27:b9:8f:46:4e:e8:c9:74:
b8:15:06:4d:aa:b8:66:ef:93:73:ad:69:4b:9b:1d:
54:c6:99:ad:03:36:c5:6c:06:8a:d7:9a:79:02:60:
7f:3a:af:57:13:66:ad:92:24:5f:2c:27:52:f6:12:
48:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0A:F2:0A:35:D0:7C:B3:A4:C0:26:4B:92:BD:0C:BE:5E:DD:22:AD
X509v3 Authority Key Identifier:
keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:25:03:84:ed:e2:44:09:49:44:4b:be:2c:76:47:b5:e2:dd:
43:d3:c6:3d:62:68:0c:c2:ff:ab:2e:1f:d4:9f:a7:43:33:a0:
bd:03:8d:a0:77:58:59:32:23:bd:98:82:ea:77:17:ab:02:ac:
c1:81:09:03:30:5b:1b:c2:5e:7d:cb:54:96:54:55:b8:5f:a4:
56:2b:5c:cd:78:20:ee:94:24:f9:9b:1e:db:6f:1d:71:62:85:
cd:de:9a:85:ba:6d:1b:8a:68:ed:16:12:71:13:f4:f9:c5:c0:
a0:e2:8e:b8:b0:ae:2b:ca:17:ab:36:c1:da:21:ce:e0:71:26:
b1:04:59:7b:fc:ab:cf:26:a6:0d:f8:a4:9a:14:93:6b:a6:02:
cb:df:c0:94:70:24:3d:56:25:b2:df:a5:26:b4:69:77:28:96:
df:6f:26:0a:52:69:e6:ac:79:0d:77:6a:bb:ee:fb:c7:a9:ab:
a1:88:cc:39:c9:61:78:6c:48:63:3b:2f:4d:d1:63:c8:00:72:
19:3f:f1:a7:9c:b4:eb:d3:c9:24:9d:ea:b5:e6:4d:32:2d:ca:
f6:7e:c0:0f:b7:50:c0:be:4b:d0:57:ea:89:2f:11:06:9d:cd:
62:78:ce:34:fc:42:de:9f:fb:c2:e0:3e:29:9b:e5:02:e0:32:
98:5f:e6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:53:10 2026 by rpki-client