Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
File: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft (raw, json)
Hash identifier: insYL1X4o/fLMfsRgcFC7ajsz4RxluC4AhHWH6TA/4Q=
Subject key identifier: D7:CC:82:82:5F:CA:20:8C:29:20:03:6A:9A:BF:73:EF:7D:D3:DA:BF
Authority key identifier: 3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
Certificate issuer: /CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Certificate serial: 01A17ADF764326F19AFB3ACF9C22273B1347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
Manifest number: 1AC4
Signing time: Tue 27 Oct 2026 01:00:27 +0000
Manifest this update: Tue 27 Oct 2026 01:00:27 +0000
Manifest next update: Wed 28 Oct 2026 01:00:27 +0000
Files and hashes: 1: 01b-_lSQYswp0XJqCFkWTN3FBao.roa (hash: ewH/zDZQ3rLluYv2guw0C+nvriPG/1vP0wlE4tPc+1Y=)
2: EGoSQ-IvTDuR6KeRNIfT2U3LRKg.roa (hash: L6sNJPWIZpchbyuvO0NFOoU8EkTxoHjIUljX0hT8hYU=)
3: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl (hash: kddI9HFT98eJZLXEqVL/ORBw3v7HN0o1laYxdSaF56Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:76:43:26:f1:9a:fb:3a:cf:9c:22:27:3b:13:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Validity
Not Before: Oct 27 01:00:27 2026 GMT
Not After : Oct 28 01:00:27 2026 GMT
Subject: CN=d7cc82825fca208c2920036a9abf73ef7dd3dabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:bb:9f:8c:53:72:44:a0:f4:50:df:c0:cf:
6f:70:85:c0:04:b5:0a:66:13:8b:7d:6b:08:99:01:
6e:8e:c3:da:df:44:01:2c:a7:51:a4:5d:78:c0:da:
6c:46:3d:bb:be:c6:31:75:94:fa:e2:78:d9:a3:7e:
99:d3:88:27:3b:db:c7:75:82:7f:d1:46:f6:e4:8a:
5b:69:f1:ef:2d:24:6e:c7:aa:0a:c1:7b:c2:ca:cf:
b8:48:91:3d:de:49:14:71:35:3c:e3:86:70:35:59:
95:19:5b:c6:6d:10:7b:f9:76:17:52:05:b9:a0:a7:
d0:f0:bd:9d:34:bd:55:b7:d8:8d:2a:6d:44:14:d4:
f0:61:4b:e0:fb:5e:fd:3b:76:21:b6:24:13:2e:f1:
09:51:b2:1c:9c:fa:6b:db:6b:19:ea:6c:7f:8c:1b:
ed:ca:64:53:55:03:42:44:dd:e0:cb:79:3b:3b:b9:
f5:75:38:56:7f:cf:51:bc:8a:c6:7a:9d:3c:5f:4b:
57:26:66:68:2d:56:14:3c:3f:b9:81:e4:db:6a:6b:
19:d4:72:41:16:c7:f4:4f:7e:f3:53:33:c4:6f:bb:
23:74:0c:69:3c:65:24:71:dd:6b:14:b2:90:0c:a7:
22:fb:c4:be:ab:a3:6a:07:72:21:8b:09:26:32:5f:
c5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CC:82:82:5F:CA:20:8C:29:20:03:6A:9A:BF:73:EF:7D:D3:DA:BF
X509v3 Authority Key Identifier:
keyid:3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f7:ec:be:4b:12:d8:96:c3:f8:49:ab:50:e4:db:8b:3a:9f:
44:48:35:e7:bc:3d:15:ab:7d:09:ed:a8:7f:79:15:2b:17:2a:
c7:01:a5:b6:23:73:5f:15:b3:d0:85:0d:b5:ca:54:16:27:3d:
1e:88:d4:ac:56:09:9c:4a:f1:54:ab:9f:95:c5:9d:42:1d:b1:
12:41:7e:95:31:5b:ae:e1:b6:dc:65:ae:78:93:0d:b4:30:ca:
eb:70:bf:c1:5e:4a:99:33:b2:85:33:96:b7:05:88:29:5d:bc:
09:b1:d0:12:9c:96:2f:ce:8c:56:39:a0:49:e0:b0:2f:7b:a9:
9f:26:8e:ab:0d:c2:8f:36:6f:9c:29:d0:fd:ed:98:94:54:ba:
5d:f2:41:1f:a8:2c:f2:97:fe:25:9f:59:11:8a:18:c6:5b:73:
54:df:3a:c1:89:a0:ec:58:00:09:81:f5:dc:12:6e:f4:1e:ac:
c6:18:22:b8:f5:c9:ba:50:c3:2f:87:d3:ec:a1:57:2c:81:05:
d1:90:96:eb:13:c5:22:4f:3a:02:47:cf:6b:fe:7f:f4:8f:98:
d0:40:ad:26:5e:6d:bf:9c:5e:3f:f0:c0:76:04:4c:4b:46:eb:
94:17:b5:69:a9:a2:1d:dc:07:6b:60:cb:09:44:88:a3:37:32:
0f:29:f0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:14:45 2026 by rpki-client