Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
File: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft (raw, json)
Hash identifier: QwJZ1BQG0Ju54PO5GmPDTsDDsiLs4nD1dIHlGg61Ak8=
Subject key identifier: C9:EC:27:5E:1F:2B:CD:C1:7D:A9:6C:49:F9:33:07:21:3E:FE:C7:F1
Authority key identifier: 63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
Certificate issuer: /CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Certificate serial: 01A1777081EAA179877077719CDD06989DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
Manifest number: 10D6
Signing time: Mon 26 Oct 2026 09:00:24 +0000
Manifest this update: Mon 26 Oct 2026 09:00:24 +0000
Manifest next update: Tue 27 Oct 2026 09:00:24 +0000
Files and hashes: 1: 1ucIqM3WJrp6fSAjkIA0n0TVtcs.roa (hash: shxMQ3h1iaMAoofuE3ugk4LgNhtgq4pRT6mevjRyS7k=)
2: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl (hash: L42wat5M7mFCv92j7dV+G9/NHa/thkOi5L+Nj9Fzeao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:70:81:ea:a1:79:87:70:77:71:9c:dd:06:98:9d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Validity
Not Before: Oct 26 09:00:24 2026 GMT
Not After : Oct 27 09:00:24 2026 GMT
Subject: CN=c9ec275e1f2bcdc17da96c49f93307213efec7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:96:b6:93:46:47:5b:64:7a:55:99:9a:fc:
92:5b:23:95:94:d7:9c:fc:5c:73:a5:bc:70:90:be:
a8:fe:0e:82:16:f6:3d:ac:85:69:45:a3:28:15:69:
70:68:78:18:3e:90:d5:f4:27:21:4d:51:78:93:06:
b6:a6:ae:8f:49:7a:ba:18:2a:36:2e:71:e9:b8:7e:
e8:c1:5f:9b:b4:7e:02:6c:86:b9:d4:c5:24:cb:a0:
47:38:02:52:0a:4f:d5:e4:fc:03:12:d2:80:83:dc:
f3:52:ff:2e:75:9a:48:31:26:02:de:ea:41:f6:c1:
9d:03:8f:4e:95:b7:ea:f5:75:db:ea:47:c0:2b:95:
79:b5:52:4f:2f:76:89:24:c2:c5:73:16:ff:46:1c:
8a:c7:a0:d3:88:01:62:a1:94:5c:68:07:44:05:f3:
60:26:68:09:fb:fc:68:ba:ea:a9:29:c6:c0:f9:a3:
8f:f8:48:69:fa:29:00:ca:84:e0:1d:a2:e2:cd:93:
4d:16:15:1d:00:36:0d:f6:fa:18:1c:fd:d1:2c:34:
43:ac:a0:c1:37:d1:3a:dc:f9:a8:ed:9b:fe:83:a0:
44:f7:84:af:70:4e:15:6f:f0:2e:8d:c9:f7:c5:2e:
d1:d7:dc:74:e5:6a:35:3a:bb:60:6c:68:62:bb:05:
5d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EC:27:5E:1F:2B:CD:C1:7D:A9:6C:49:F9:33:07:21:3E:FE:C7:F1
X509v3 Authority Key Identifier:
keyid:63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:69:ec:a3:03:fa:8a:83:3c:5e:b4:53:4b:68:2b:a9:c7:2b:
f1:2e:6c:09:ea:bb:f6:cb:99:83:d8:69:f6:b1:c4:62:2c:90:
34:85:c5:ac:7b:9f:1e:24:af:ec:5f:0c:cd:b4:a5:2d:eb:61:
82:1f:58:30:cf:f9:59:04:6d:9f:07:07:de:6f:62:e4:ac:08:
a7:9d:46:44:5e:85:91:f8:e4:37:61:89:33:52:97:bc:fc:8d:
66:17:16:d5:2b:d1:39:29:2b:6b:bf:23:fa:97:64:d4:bc:5d:
40:84:d9:07:cb:05:49:9c:0b:fe:40:20:e4:02:d2:3a:33:eb:
79:ae:df:1a:09:da:ca:18:6d:c6:12:9c:a7:4f:1d:42:0c:bb:
ed:bb:77:85:1d:29:71:01:da:68:b1:65:6a:5b:43:dd:7c:8c:
ab:75:f1:23:53:23:3b:7f:af:e4:60:eb:9f:7c:b7:53:2e:7f:
3d:85:72:96:0a:97:6f:94:02:ee:55:c7:7e:41:90:77:09:66:
91:d0:01:93:30:d9:ca:a8:1d:20:1c:79:0c:51:56:90:1e:76:
ff:a7:d6:87:06:2c:8f:cf:7a:a7:f9:1f:2c:53:cd:bc:1a:e0:
cd:17:d0:5b:70:00:a9:0b:a4:31:62:1f:78:15:75:de:e7:74:
f2:12:1e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:54:15 2026 by rpki-client