Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
File: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft (raw, json)
Hash identifier: b2tEPrkJIpuwnOTLu5QcLAf3OgQt+f+OmGYssiakExk=
Subject key identifier: A2:1D:E4:65:F6:8B:92:AD:0A:7D:90:11:D9:1B:F0:27:7F:1C:14:9D
Authority key identifier: AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
Certificate issuer: /CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Certificate serial: 01A197A0623608080F8F8AFA6BC3AB681F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
Manifest number: 1ADA
Signing time: Sun 01 Nov 2026 15:00:32 +0000
Manifest this update: Sun 01 Nov 2026 15:00:32 +0000
Manifest next update: Mon 02 Nov 2026 15:00:32 +0000
Files and hashes: 1: 35RBbJH7O74ElGBsXDtzWelJCE8.asa (hash: VGTXJkpFVsNFQM4P5dimy32ItUqxw4xThmopk2UmxJs=)
2: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl (hash: odjVTZ3W91NDZ+L6w+gbXBY6KwCBKk3qEG/h+HzmPCA=)
3: weWWuV6jfsu20O1Kp8PZ_7w5-6I.roa (hash: hxVuyj93Sh3p92R2/8BnJWSOvPERrOV88q73B7vWqrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:a0:62:36:08:08:0f:8f:8a:fa:6b:c3:ab:68:1f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Validity
Not Before: Nov 1 15:00:32 2026 GMT
Not After : Nov 2 15:00:32 2026 GMT
Subject: CN=a21de465f68b92ad0a7d9011d91bf0277f1c149d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:4e:7d:fe:d8:3c:7b:8a:c4:49:bf:b1:cb:
1b:25:33:8c:70:e4:73:8f:97:ae:77:4a:1d:65:c8:
30:a1:eb:d6:f8:38:0a:e0:72:11:a1:55:31:cc:3e:
ed:b9:aa:b9:10:b7:d7:a0:98:04:ed:96:0f:28:24:
74:84:51:7f:1d:88:46:da:a9:18:08:bd:fd:e2:dd:
fd:b2:76:1b:01:2d:b2:7f:4c:70:0a:f1:19:7f:bf:
5a:bd:48:83:79:c0:d0:ea:79:b7:61:96:ca:30:3d:
3d:a2:b2:e8:12:62:f3:a6:6a:e2:ea:b2:3d:2b:b2:
c3:80:f9:11:f4:c3:ce:d5:0a:c9:02:a1:9c:ac:dc:
4c:08:04:54:90:10:90:37:32:98:0d:ef:70:72:b0:
ce:9a:c1:64:49:2b:25:75:21:c8:79:9b:ae:71:e4:
82:17:a4:e5:8b:e7:ae:28:2c:9a:90:43:74:a4:ab:
b6:cd:f0:39:59:b5:96:c6:a8:8a:0e:27:c2:f5:28:
f1:d9:27:e2:6a:25:7a:6c:dd:1b:cf:c3:64:31:9f:
68:e3:fd:c0:70:56:a0:ab:1a:f2:30:bd:d4:7b:76:
c4:9a:95:13:b8:7a:88:46:15:ac:52:85:dd:f7:b6:
f4:4d:a3:4f:45:32:72:28:bf:37:ac:25:59:1c:ed:
1f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1D:E4:65:F6:8B:92:AD:0A:7D:90:11:D9:1B:F0:27:7F:1C:14:9D
X509v3 Authority Key Identifier:
keyid:AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1a:8d:0a:64:06:3e:fd:c9:05:08:b0:d6:0a:26:a7:00:da:
39:f2:2f:cb:88:b8:90:dc:1a:d4:3d:a7:5f:81:48:87:52:ef:
2e:f8:f5:97:a9:25:0f:5e:44:3d:97:03:8b:ff:12:07:80:1e:
6e:0d:1b:7a:05:a0:e5:9f:94:a2:f9:67:d4:da:e9:34:81:0c:
54:d9:e9:3b:2b:80:da:7e:dc:f9:e7:19:7a:3a:8e:c4:8b:6f:
75:2f:7f:78:a3:b5:a6:7f:10:9e:9b:22:f5:dc:0b:ac:6b:ba:
06:0c:c7:7a:dd:78:69:08:12:c1:77:d1:e4:4c:0d:2d:36:6b:
40:24:b3:e9:bf:de:d0:04:9a:16:c2:b0:90:65:5d:16:f3:cb:
b4:31:cb:50:af:8e:ff:a6:3c:ee:31:f7:ea:d3:5b:ea:56:e7:
19:55:be:7f:6b:d9:62:ac:b1:6d:0b:a4:55:a1:eb:47:04:79:
a6:32:52:07:df:76:22:1b:e4:5b:f4:9d:fb:cd:6a:c1:c3:03:
d2:00:8f:2f:fb:aa:9c:84:56:6d:e6:d2:55:77:7b:e3:0e:3f:
a7:5d:89:1f:5b:27:55:8f:02:f0:91:98:c9:b8:0c:9d:71:51:
d4:9d:1f:3a:78:3d:0c:18:f8:7f:ce:21:b8:ae:96:e9:6d:1b:
f8:56:b4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 21:27:02 2026 by rpki-client