Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
File: Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json)
Hash identifier: ye0EzoMQpUifd4/HELUX6/BCIVcE3r7NBmLxp3D0KIU=
Subject key identifier: D0:67:0C:65:34:CA:A7:EE:D5:13:17:CC:F0:63:D3:FE:8E:00:7D:CD
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 01A113AA609DA479F39EDA8506BC0CECE864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
Manifest number: 1A98
Signing time: Wed 07 Oct 2026 00:01:35 +0000
Manifest this update: Wed 07 Oct 2026 00:01:35 +0000
Manifest next update: Thu 08 Oct 2026 00:01:35 +0000
Files and hashes: 1: 8EQw8scn945EBI3nr8f8oaXNu5k.roa (hash: Pc5eAGErA0CLNaCRm8m5LzZW6f6RQyf0pkKeLb9c9vc=)
2: GkXYgdVFP2_HexVVs3gomnNY70U.roa (hash: Aaxv9YVnKsaCjNY2StCqQ1xmto/cCalggSwSd56aIwk=)
3: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: uTBdsDvcg0wdDErod6VtxQsDGwrR2jG0NBHVxLvn+Es=)
4: hcEiOVl0IV3IE4216hs1e5DZGR4.roa (hash: ZC5U5qcJYYjeF6N2SbLW1XrnWze6Jseft5QLvx76FJw=)
5: jVymcQq0h9Y68MDNVjUwnbOR388.roa (hash: MSWDR6kx5EFIH7f8Omshc4kgj1g3khlr4OFNZuTrRzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:aa:60:9d:a4:79:f3:9e:da:85:06:bc:0c:ec:e8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Oct 7 00:01:35 2026 GMT
Not After : Oct 8 00:01:35 2026 GMT
Subject: CN=d0670c6534caa7eed51317ccf063d3fe8e007dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:86:2f:da:95:66:79:0b:7f:76:d2:5e:ce:
8d:09:d0:b7:2d:d5:55:b8:f3:74:4c:db:a9:a4:fb:
23:96:bb:25:06:09:87:da:25:ac:ba:4a:9e:fb:18:
b1:a9:67:27:f4:b7:35:73:1d:fa:cc:39:46:21:f0:
26:d2:38:c0:7d:f1:6f:f9:25:df:d7:4a:b9:9f:ff:
4f:46:cc:fc:2d:78:2b:1b:c0:fe:a4:76:08:1c:5c:
c1:b2:c9:04:59:04:e5:bf:a8:6d:5e:2b:f7:d5:33:
cd:2a:98:ee:48:e4:c1:58:c8:dd:99:90:e7:4a:3e:
4e:01:22:8f:e8:30:95:69:f6:66:9b:e6:ec:a1:a4:
77:ee:53:b1:7a:0d:9c:f1:70:5c:cb:6f:bc:2c:d6:
b7:0a:7a:0c:33:ba:75:fe:2f:5d:fd:cb:86:44:78:
8b:b4:d7:10:56:0b:88:0b:c0:c6:2d:88:4a:56:9d:
19:4e:fb:7a:81:5d:38:62:00:2c:23:d3:69:cf:aa:
e3:3e:3f:1c:73:63:04:13:d2:16:31:29:ea:c7:97:
26:fe:78:d7:e4:dd:9a:59:35:01:9a:35:ac:9c:f2:
98:d0:d7:4a:c6:11:99:af:7e:a5:50:82:00:8e:5e:
62:19:ee:1d:b6:cd:54:b1:ba:3b:23:b8:c3:34:88:
32:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:67:0C:65:34:CA:A7:EE:D5:13:17:CC:F0:63:D3:FE:8E:00:7D:CD
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:de:0e:3c:6f:ce:be:96:7c:c6:3c:f7:35:d8:2e:62:0e:de:
ab:f5:e8:33:37:c1:b6:7d:5e:4f:42:73:e5:f6:8f:cc:0f:9d:
48:86:d5:85:c0:0a:f7:02:02:6f:2b:f9:7f:0e:9e:c3:3d:af:
a9:23:11:c0:a0:e9:af:cd:07:06:5c:cc:86:48:45:69:4d:24:
a3:e2:be:a5:95:9e:1d:c7:be:97:69:61:72:55:af:8b:d3:1d:
69:92:d1:ba:41:36:24:50:33:26:c3:31:a9:de:5d:f0:92:6a:
06:d8:98:d1:41:e1:5d:8e:c3:d0:6a:02:87:d7:98:e8:05:65:
35:82:99:91:1c:c6:bd:75:48:63:c1:78:65:8d:1c:6c:8b:25:
0d:a1:97:e6:d9:50:e7:4a:20:b4:9f:47:0d:dc:04:e1:0b:f9:
34:60:bf:92:86:00:e7:b7:dd:89:e0:8e:51:4b:9c:bb:15:d0:
a8:78:50:f6:94:ec:7e:48:52:d0:6a:3e:ad:29:ea:8a:a1:67:
f3:37:ed:92:5a:4d:20:4d:80:c8:2d:3b:5b:7c:bb:ff:1c:37:
e3:b3:f1:8d:4a:d7:6f:5b:d8:7c:53:f9:8b:d1:7a:ee:55:c8:
e9:5c:92:28:41:77:f5:8f:fa:17:97:22:8e:be:37:06:b6:04:
f4:b6:12:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:11:23 2026 by rpki-client