Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
File: RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json)
Hash identifier: kwRASIVjsf7fugfmKVgfvS1W5vmgKYJ2JnSe23nNDY8=
Subject key identifier: FE:48:C0:90:DE:E9:9D:B1:53:64:8A:23:D2:94:54:00:DB:F9:6C:48
Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Certificate serial: 01A176CC292FC38F031DA8367AB33FAE3B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
Manifest number: 0C1B
Signing time: Mon 26 Oct 2026 06:00:53 +0000
Manifest this update: Mon 26 Oct 2026 06:00:53 +0000
Manifest next update: Tue 27 Oct 2026 06:00:53 +0000
Files and hashes: 1: Q3uvcJk1aivu7ToH0eZwM2MePrY.roa (hash: j0i6DOSkvpYiLwStrAAsU53hjHyyfEDy63fjeik32sA=)
2: QBmUJCRtL8qMx8nsM_8h7M8Ntmk.roa (hash: oRqg090yxLTopHF59OGl/QFkoOTyNIVLSNChAWZxm8c=)
3: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: CBgtBxE1POoaf18BD806Agkf8IUHK8FIsMkFn/3QrQg=)
4: _6K6ekLgN63ACFr7Nc4QqX8mO9Q.roa (hash: GR7VM23RiAdX5cDnkEi212fYKZ9tRoD66kVKX08kLSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:cc:29:2f:c3:8f:03:1d:a8:36:7a:b3:3f:ae:3b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Validity
Not Before: Oct 26 06:00:53 2026 GMT
Not After : Oct 27 06:00:53 2026 GMT
Subject: CN=fe48c090dee99db153648a23d2945400dbf96c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:80:69:bc:3e:e2:fb:a1:52:f6:93:51:bf:
73:2c:00:6a:29:0a:dd:8a:d2:62:ec:89:c9:30:db:
04:85:a8:aa:20:c8:2a:ab:c5:53:72:5f:6d:bd:d9:
6c:c7:a2:ba:25:19:aa:21:07:9f:0f:3b:78:a1:43:
5b:db:77:46:d7:d6:7a:2d:b7:b0:79:a5:89:75:67:
3a:63:7c:62:11:d8:67:a1:60:2e:fd:91:5e:d7:79:
c0:49:ae:51:0f:69:5b:5b:ee:39:b5:d6:8c:2d:21:
ac:6a:97:25:a4:11:58:d7:f8:27:dc:76:c8:40:79:
11:8c:35:6e:80:29:54:12:70:cc:71:01:38:18:5a:
c1:f0:2f:71:4c:57:81:53:73:4d:4d:e3:3c:4b:47:
45:34:07:b2:ea:4a:8a:63:ac:db:9f:fa:72:e6:14:
50:0a:52:0f:8d:8e:ca:d5:80:52:e7:e6:f8:36:60:
00:3b:ab:29:14:71:c6:33:7f:97:7e:15:fd:0a:c5:
c0:86:34:db:30:91:ed:cc:53:c0:8f:9f:85:45:f1:
60:40:5c:e9:24:bd:ff:47:75:14:26:60:d4:17:8a:
6a:85:8f:4c:95:ad:1c:58:c0:f4:fd:37:8f:33:b5:
4e:9d:2c:8e:87:12:3e:d4:e1:e1:2b:b7:fd:cc:27:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:48:C0:90:DE:E9:9D:B1:53:64:8A:23:D2:94:54:00:DB:F9:6C:48
X509v3 Authority Key Identifier:
keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6d:1b:5a:6c:20:b8:10:63:d5:93:f6:24:28:07:2a:78:f4:
6b:d3:f5:b8:c9:f1:fe:70:d5:c2:f0:62:f6:22:1d:e0:1d:01:
39:c0:35:2d:c7:90:0c:08:3f:62:6b:25:29:5d:04:53:c2:0f:
c8:34:aa:b0:72:b1:9f:9f:48:0f:41:ea:6d:9f:8c:59:9a:5b:
7e:8c:9d:89:ef:05:be:47:26:53:f1:7c:47:86:0f:eb:84:b6:
4f:b7:33:02:8b:60:01:e7:de:f7:b2:b4:72:47:19:a8:7d:11:
26:3a:b5:0c:1c:93:47:56:2c:bf:79:ee:65:a4:7f:f0:a7:98:
9f:43:b6:a5:1b:7b:a5:0d:74:8f:e5:d6:78:94:9a:b6:07:0d:
79:23:9f:d2:a4:55:d0:8d:23:0d:d0:3f:dc:29:7f:84:f0:93:
e5:ed:8c:5b:5f:19:0f:c6:f4:bb:00:9a:3b:f5:5f:c3:42:20:
f0:cb:d5:01:dd:6c:ab:11:d3:53:95:ec:b2:b3:07:a5:a3:72:
c8:dc:04:77:a4:60:d8:0a:b0:f7:a1:f9:e0:20:2e:f9:4a:67:
ba:90:50:9f:09:90:d1:4f:cf:ad:ea:d2:fc:82:1e:4e:97:bd:
77:eb:18:0f:50:c2:15:4c:0b:67:61:f5:0f:c6:04:d8:32:51:
5f:ff:e2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:47:31 2026 by rpki-client