Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
File: Y7gncq89YRuZsbpuPrbL_RaWU2M.mft (raw, json)
Hash identifier: PHX3/fI6nhqDnmiXVgSIOyk8gI6Bt1ELBlS1T0DOdsI=
Subject key identifier: 18:99:15:8C:B7:9E:7F:4F:A7:A8:39:67:25:8B:06:E5:DE:86:36:48
Authority key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
Certificate issuer: /CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Certificate serial: 01A174701E66B756F239EFCDB0ED9D9467C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
Manifest number: 1AC3
Signing time: Sun 25 Oct 2026 19:01:06 +0000
Manifest this update: Sun 25 Oct 2026 19:01:06 +0000
Manifest next update: Mon 26 Oct 2026 19:01:06 +0000
Files and hashes: 1: 3B1_EUp7x7N1kARo16GQ1nuj9Is.roa (hash: aSJvJUBxwg2ZnRrO3zv+qRAM43Ox0HLnky8GrLpOBIA=)
2: NUUQjDeFWzC4FPVGBmAx-z5bJ0E.roa (hash: wnbRGeNLfXYztX1J3cZAfrSN12bQBDpo4cnmGFyaLCs=)
3: Y7gncq89YRuZsbpuPrbL_RaWU2M.crl (hash: TNZH+RYMH1rzri47/ogP/INwpTTeXmen3ECtytfFtBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:70:1e:66:b7:56:f2:39:ef:cd:b0:ed:9d:94:67:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Validity
Not Before: Oct 25 19:01:06 2026 GMT
Not After : Oct 26 19:01:06 2026 GMT
Subject: CN=1899158cb79e7f4fa7a83967258b06e5de863648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:f6:13:f0:64:3a:0e:4f:b6:d8:6a:23:69:
f4:65:b3:e3:3c:cb:d5:9a:74:b3:45:4b:ef:07:19:
f3:f1:10:0d:3f:fe:2c:a1:53:e7:af:5e:9e:fb:63:
cd:81:e4:27:d9:95:d8:8c:1d:bc:83:55:3e:ae:bf:
e3:74:78:04:4e:b4:f2:c4:e4:cf:ef:1c:07:9f:0c:
9d:6d:f3:ad:ee:23:5b:a0:93:8b:01:19:07:43:7a:
8c:f2:a0:18:9f:ed:6f:bd:1d:77:96:4a:96:b2:ef:
f7:d4:ec:f5:83:24:8f:ab:5f:b3:85:00:3d:0d:d0:
92:24:63:19:19:ac:53:46:f9:e0:ce:24:ed:60:62:
6d:13:88:cd:c7:59:13:67:8b:2b:74:82:d0:4e:cc:
46:1d:89:9b:bc:5c:12:0c:86:29:4b:eb:2d:38:4d:
89:0b:c8:d4:f1:f0:23:e5:85:2e:d9:2f:24:bd:1d:
6a:20:3a:f4:34:9b:ad:e7:89:9f:66:30:eb:97:2a:
73:ae:31:1a:a7:5b:83:10:bd:91:9e:5a:2d:0b:47:
fc:03:fe:47:cb:c8:b4:22:83:68:91:aa:1c:99:6a:
d3:ef:c9:35:47:5f:ef:0c:6f:36:fb:e0:9a:41:c2:
95:78:8f:57:0c:a7:b5:86:fb:26:7f:dc:bd:ef:56:
73:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:99:15:8C:B7:9E:7F:4F:A7:A8:39:67:25:8B:06:E5:DE:86:36:48
X509v3 Authority Key Identifier:
keyid:63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:65:66:08:41:d7:23:02:71:1f:e6:2e:6b:1c:48:14:ba:b2:
96:c9:46:31:4c:3d:94:b9:b1:33:45:00:8a:22:3b:66:ab:ed:
73:e9:a0:39:1e:9c:6e:a9:a0:e2:6e:f5:de:cb:06:0f:87:5e:
c6:bc:58:de:4b:7f:55:7a:5a:56:b5:01:1f:05:33:59:06:00:
1c:4d:bf:19:2f:2f:e1:2c:08:f7:80:d9:07:ce:93:62:5e:a3:
b1:a2:22:3e:fc:9a:c7:4a:1f:b9:96:b0:a1:d8:8b:65:a3:13:
48:da:19:79:1e:56:b3:3a:2a:eb:25:67:19:20:4a:3f:76:5a:
99:93:e7:f2:10:53:64:6f:29:33:22:9e:74:a5:40:c1:f0:ba:
08:49:e1:8a:8f:f9:07:0c:74:b4:05:f2:b5:cd:6e:2c:de:63:
f9:6e:36:0b:d8:11:b3:71:c3:3d:6d:0d:00:00:80:13:b1:94:
df:a8:b0:08:1c:a5:15:8d:c2:9d:8c:5b:8e:17:39:f2:c3:b6:
01:54:23:ff:fb:5f:89:00:1e:61:cc:d0:b5:17:d2:64:9a:35:
90:3b:b4:f3:03:17:07:ed:ed:64:8a:2c:b3:fe:17:a8:48:d3:
49:10:1c:b0:32:4c:61:d5:b1:08:2c:64:ee:92:e8:9f:0a:9f:
f0:42:da:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:47:16 2026 by rpki-client