Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
File: y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft (raw, json)
Hash identifier: BscsvZ1i3WH9NBhp1DlrXeTlMbHM/3gNQpubQDb/BeQ=
Subject key identifier: 85:BE:E1:31:D4:44:54:81:67:7D:2D:C9:1B:88:E6:96:83:CA:58:71
Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
Certificate issuer: /CN=cb4d83a67fb35af88de83c1304c6743a51531361
Certificate serial: 01A188D1EE6F50EDA99164FECFDCE82176DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
Manifest number: 0D49
Signing time: Thu 29 Oct 2026 18:00:21 +0000
Manifest this update: Thu 29 Oct 2026 18:00:21 +0000
Manifest next update: Fri 30 Oct 2026 18:00:21 +0000
Files and hashes: 1: LBuMJhT9HI_N-o97AGqRNMobN2k.roa (hash: J1YinkBVmpDcd/nfyc1eO3Q9IO60Z11LEvtRdzK2OZo=)
2: kd0M99nX3mEAE8mM8gT2op45MsU.roa (hash: qbE/jcnwxy0lIpkGkzTB/U3L+6e4tnUzWLrv92qEK9A=)
3: wTlbzeF26X067XNQG4ixA_F7gss.roa (hash: mmrxsWqMHEhPszYdixQQAOjmiWohzdeiT/VZLFaDvkA=)
4: y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl (hash: VX5FYUDMgGxD99VjVgZEJCCChQNeoHeyVjjUNiDGblc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:d1:ee:6f:50:ed:a9:91:64:fe:cf:dc:e8:21:76:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361
Validity
Not Before: Oct 29 18:00:21 2026 GMT
Not After : Oct 30 18:00:21 2026 GMT
Subject: CN=85bee131d4445481677d2dc91b88e69683ca5871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:27:c5:80:56:1e:2d:fb:56:7d:1b:65:c8:
81:fb:b3:98:d9:b1:d4:09:93:ad:82:0f:03:04:49:
12:6e:26:7d:68:86:ef:8f:ef:86:a8:93:c9:75:72:
bd:7d:a9:39:46:10:8f:9a:7d:d0:10:fc:fb:69:eb:
59:55:4a:d3:cb:59:ae:69:ea:fc:3e:18:c7:a7:d4:
51:bd:ec:fb:b6:ec:d8:de:14:4c:b5:af:61:9f:a3:
87:03:c3:b6:21:72:67:cb:53:a7:51:b2:b5:69:2d:
ad:ee:a0:0d:51:dc:18:fc:37:13:9d:0b:06:bd:8b:
33:c5:16:d4:e7:57:94:52:fd:37:68:bc:ac:da:9a:
b0:7f:64:4a:c7:23:60:e5:89:9d:a1:a9:d9:16:69:
ae:62:10:05:5e:e8:ad:d6:06:a9:54:bf:e1:2e:f3:
74:6c:1b:5b:de:6a:04:2c:07:88:34:37:37:a8:1b:
7f:01:0c:72:57:9f:97:1e:dc:5a:b8:7c:55:b4:25:
5d:51:6b:be:d8:96:6d:9d:1f:27:f1:7f:11:e4:cb:
83:e0:82:2a:21:38:14:f8:7b:89:25:20:3e:bf:2c:
4e:d8:e1:e4:08:8b:f0:e5:4b:1c:ea:d4:b3:cd:8b:
0f:93:6e:8e:3e:65:c8:26:13:45:41:1a:20:98:a9:
fb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BE:E1:31:D4:44:54:81:67:7D:2D:C9:1B:88:E6:96:83:CA:58:71
X509v3 Authority Key Identifier:
keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:67:62:0a:06:29:c5:94:4f:7b:5b:56:84:12:6d:a7:11:34:
3b:8f:f6:69:10:b5:80:93:cf:ea:ce:79:fd:1f:0d:82:77:29:
8d:9c:8d:bf:8f:a1:10:11:1e:51:ba:34:b0:65:b0:2f:f4:44:
09:ea:f9:c5:51:6c:e4:e0:01:8b:ec:b8:f1:79:d9:e4:89:f0:
77:89:6a:fd:6e:00:e6:44:eb:bc:20:14:b7:ea:f4:1b:41:ba:
7d:f8:ea:43:7c:83:64:56:a2:6a:c0:71:1f:44:88:ae:85:a8:
7c:75:32:df:53:90:3b:b5:93:83:88:fc:74:e2:83:23:00:5b:
ca:f7:74:90:1a:44:b9:b3:ee:0b:1b:0c:81:b8:db:5d:bb:eb:
16:a7:6e:08:56:a2:b5:a7:b3:5d:28:cb:3e:9a:04:d8:ec:87:
d0:dd:80:3d:8d:5b:ba:3d:92:db:2a:a2:9d:c2:9c:c1:72:21:
87:4a:a2:df:fc:74:41:33:e6:a7:6d:ff:a1:63:15:33:40:81:
9c:54:a3:15:e1:91:11:e8:29:8b:05:be:c1:67:ed:e4:bd:b0:
50:4a:65:a5:53:05:92:06:6e:58:e7:9a:82:7b:97:90:e6:6f:
bc:dc:df:6e:5e:a0:73:b4:ef:27:06:6f:b1:c5:7d:76:db:97:
19:89:97:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:56:26 2026 by rpki-client