Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: 13uE2C6MrhNEI6Kj6/36PBOlhoBgrkQ19sIaNKlDEJw=
Subject key identifier: 19:DE:DD:4E:07:97:5C:41:61:C2:46:7D:6A:9C:58:52:1F:23:6A:C5
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 01A17439D11E08047DF12630ECEFF4774639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 1ACD
Signing time: Sun 25 Oct 2026 18:01:48 +0000
Manifest this update: Sun 25 Oct 2026 18:01:48 +0000
Manifest next update: Mon 26 Oct 2026 18:01:48 +0000
Files and hashes: 1: JX9TtuwLkgqw7sG54SbhhV3TGs8.roa (hash: /gVraOwfvW9I8AC7MNv4oymRdtuKJdPXSNG+v0NFcHM=)
2: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: iEZ39laVaiR7xIre7HSZfqBARGDwttKVqnu7LqXZ1y0=)
3: fk7mY39tErf9E91KsoOlDrOBfU8.roa (hash: lngR8tmbGC/WTujFHgPebFJew1qfiHWhUb5haVGmuH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:39:d1:1e:08:04:7d:f1:26:30:ec:ef:f4:77:46:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Oct 25 18:01:48 2026 GMT
Not After : Oct 26 18:01:48 2026 GMT
Subject: CN=19dedd4e07975c4161c2467d6a9c58521f236ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:84:5f:41:71:1f:78:c2:88:99:b1:81:99:
ff:38:e8:66:1d:bb:54:4d:3d:93:11:f6:a4:f5:68:
81:91:9a:7c:f9:4a:f0:ce:fb:22:f2:b9:4a:7a:9b:
60:fd:80:ee:b0:8a:b7:7a:0b:42:04:f5:9a:07:ee:
59:fb:d1:4d:66:26:b2:cc:5b:55:00:9d:b4:86:00:
c3:90:6b:68:9e:16:b0:f0:ea:02:5b:f6:2a:e3:6b:
38:e7:03:a8:21:cf:ad:65:3d:95:23:e6:0e:98:e0:
86:7b:f6:a4:95:64:82:2c:3e:fb:fe:c1:d2:9c:a5:
b1:fc:b2:04:ae:d9:04:7b:00:8d:a0:de:ab:cc:c2:
a7:88:09:ba:dd:55:1e:bd:2a:d0:83:ae:2e:53:9a:
2c:ce:a2:de:98:4c:22:95:c1:7d:62:e1:48:46:25:
07:78:5e:fe:09:b0:e6:36:e4:83:33:79:f3:ac:48:
d2:13:4b:ae:dd:5c:2b:8f:46:5b:6a:7a:0c:61:d0:
48:df:b4:e1:ef:26:1f:f1:91:76:cd:21:3c:8f:9b:
b5:13:94:d8:b3:ff:c2:b1:ae:c0:6c:88:85:3c:9e:
ad:43:85:48:c1:fe:25:d4:2c:4d:d3:f1:69:11:cb:
b5:b4:6a:b1:84:ec:66:6d:a3:21:4a:a6:b7:ae:a4:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DE:DD:4E:07:97:5C:41:61:C2:46:7D:6A:9C:58:52:1F:23:6A:C5
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c7:ca:09:4f:57:94:dc:cf:6d:0a:b7:85:39:c5:6c:16:07:
ef:b2:01:49:59:7a:1b:bd:49:97:97:ea:2a:2f:a2:9e:dd:cb:
cd:90:85:2a:87:6a:28:4b:81:eb:0d:f6:ee:7c:97:ce:21:be:
aa:45:dc:ee:13:99:0a:e8:5b:bc:76:b8:b1:e3:81:cb:62:46:
06:28:70:7c:e8:07:78:d0:50:6a:62:2e:d2:ca:40:bb:76:f4:
85:ec:cf:11:28:18:fb:b1:c3:9e:4b:8c:c0:b4:19:61:86:4b:
9b:93:ba:d8:9d:a8:9a:e4:3a:07:e3:21:20:8b:63:90:a5:3a:
d3:c7:b4:30:2b:76:77:2b:bb:5b:2a:95:65:23:dd:b9:e6:ee:
82:13:3f:92:eb:c2:99:9c:f5:1a:e6:f6:c9:fa:80:20:07:18:
8b:c7:ac:17:fe:4e:3c:ed:12:5d:eb:b4:1d:d5:e3:79:4c:98:
06:23:83:5f:e5:70:16:b8:44:f0:88:e0:1f:46:95:b3:80:b9:
da:aa:61:67:e5:41:6f:6e:b7:38:b1:2a:33:fe:4f:b4:ce:5d:
15:e5:e5:ec:a2:d5:b6:82:8a:78:0e:4f:c1:87:b3:fd:b2:6a:
08:3d:97:89:7b:43:9a:0d:27:75:36:58:7c:f1:0b:42:67:00:
1d:58:5e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:41:58 2026 by rpki-client