
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
File: rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json)
Hash identifier: +6qJPr0cPtAYmdcaF9mhc/LkNjrOVpD24lxibyR8F34=
Subject key identifier: 4A:D4:16:29:70:53:4C:E0:FD:81:24:A1:F6:AA:DA:46:BA:DF:BF:1B
Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
Certificate issuer: /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Certificate serial: 01A17C297D316944E7A87510339FC42B2435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
Manifest number: 0D14
Signing time: Tue 27 Oct 2026 07:00:56 +0000
Manifest this update: Tue 27 Oct 2026 07:00:56 +0000
Manifest next update: Wed 28 Oct 2026 07:00:56 +0000
Files and hashes: 1: pfwLznvoYJJqfRCh4o2zmPQohuE.roa (hash: AfFbs4eSFCbfML477ZQsZuVVVQdsY3hUFmoLGoZMXTY=)
2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: fIj/NUtewM0bj3gU04RZeZrJ60PO26/wQn/d9mwRsjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:7d:31:69:44:e7:a8:75:10:33:9f:c4:2b:24:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Validity
Not Before: Oct 27 07:00:56 2026 GMT
Not After : Oct 28 07:00:56 2026 GMT
Subject: CN=4ad4162970534ce0fd8124a1f6aada46badfbf1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:60:54:13:1d:01:21:01:9d:ea:2b:e4:f4:
7b:af:ae:25:e1:ba:55:a9:e2:d5:b6:b3:7d:b3:4e:
7c:46:30:a4:e6:e0:f4:f4:dc:48:32:11:d5:fb:bb:
19:9a:d1:d7:4b:b6:bf:6d:e7:b4:54:27:13:f9:d9:
bf:ed:05:ab:27:07:d7:a8:db:4e:96:f6:3c:ce:0c:
09:e1:6c:d5:8e:c7:c8:17:a5:33:8a:b8:4b:4f:e8:
e4:35:85:89:8f:04:85:06:0f:cd:1f:0a:9d:11:c5:
dc:9a:51:b7:02:8d:2c:88:65:d3:ab:da:7c:11:12:
40:ee:91:1d:82:45:9d:d2:2d:49:95:3c:e4:6a:84:
fa:02:37:eb:04:f3:de:20:c7:27:56:cc:36:bf:4c:
aa:48:6e:4e:75:80:22:21:2d:8a:31:bb:84:6e:aa:
56:80:b3:fc:d7:55:23:56:86:ac:74:91:f9:a8:a7:
61:54:64:b6:9e:de:44:6c:79:bf:e9:77:6e:d4:50:
b2:00:e8:dd:83:d3:2b:87:90:a1:e4:93:11:7f:d7:
78:f9:3e:5f:76:38:c4:4a:89:3e:50:37:d3:3d:51:
99:c4:a2:eb:27:e5:fd:fc:ee:d5:3c:58:72:74:e6:
d8:f1:b9:54:6c:97:c0:4a:5b:a7:40:76:56:c1:74:
66:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D4:16:29:70:53:4C:E0:FD:81:24:A1:F6:AA:DA:46:BA:DF:BF:1B
X509v3 Authority Key Identifier:
keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:dc:e4:3a:ba:43:80:88:b8:bc:7a:64:f6:53:df:71:5b:e2:
c0:61:11:71:48:12:33:87:b6:a0:fe:4f:c1:ab:c7:44:a5:95:
0b:98:95:96:80:2f:9a:27:78:c4:e4:13:f5:9d:39:ff:8b:54:
06:61:4b:c4:6f:04:8c:63:69:49:27:86:67:e5:25:d1:aa:84:
f6:04:27:e9:71:97:61:2a:6f:54:86:41:70:0d:ea:3a:11:bf:
32:e1:0b:d3:6f:78:26:12:89:55:33:80:63:6a:18:73:87:c9:
64:20:f1:fb:1b:8e:18:03:f3:2a:ba:24:04:2e:c3:d8:47:c4:
d8:ba:4d:72:20:4f:a6:b8:1f:47:a1:0e:f8:8c:ea:8a:39:1c:
be:de:0e:13:a6:b8:f9:c4:ac:85:51:a1:b2:4b:d4:72:a5:dc:
e5:c7:94:37:3f:db:d1:44:b0:91:89:f4:3c:06:3f:4f:38:b8:
24:cb:98:48:23:d0:aa:0b:35:a3:63:6d:78:a0:d1:62:e7:22:
8f:91:95:aa:4d:2f:c0:ef:1b:f4:a1:95:4e:4c:a9:71:f0:d3:
e5:b4:42:ea:22:f2:a6:34:5d:2b:2d:f7:3e:9e:c0:be:d8:88:
33:9d:22:d0:9e:83:ff:72:2f:d2:d8:85:9d:49:64:e5:c6:cd:
99:49:9b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:32:30 2026 by rpki-client