Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier: HuvIMBO7jUPZmd4/FEa05rCdlHkR+wU/Pg3glMzdYck=
Subject key identifier: AA:91:21:F6:EB:AD:08:A4:F2:8A:D3:C7:1A:8E:25:47:EA:BF:D5:58
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 01A146849E9C5A9074188F867152ACAD7F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number: 1AA9
Signing time: Fri 16 Oct 2026 21:00:58 +0000
Manifest this update: Fri 16 Oct 2026 21:00:58 +0000
Manifest next update: Sat 17 Oct 2026 21:00:58 +0000
Files and hashes: 1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: OQCqSqvB6oWsmVtkzpf211kZlBfIfYSTFHrFQ2ewDoI=)
2: LbD2tYPsPC8uP37pndvidAshgOM.roa (hash: ePxnnXcYkNMYiZIwMvTVXJah+jChUGFP5Kv/37gIREs=)
3: yV2l8jCuUkBjhG1YrGK34ROvjco.roa (hash: OW+ZvGgaMJR1U5WGE2eB0o2w9cCprc/bpgV1/vZl/uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 15:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:84:9e:9c:5a:90:74:18:8f:86:71:52:ac:ad:7f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: Oct 16 21:00:58 2026 GMT
Not After : Oct 17 21:00:58 2026 GMT
Subject: CN=aa9121f6ebad08a4f28ad3c71a8e2547eabfd558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:1e:cd:0e:63:be:b4:55:a6:68:45:38:71:
ed:d3:96:9b:64:69:ab:1e:6c:95:5d:99:d0:84:5e:
97:99:75:b4:bd:12:8e:c5:a9:2c:b7:ef:8a:d4:e7:
08:73:89:95:41:ea:24:20:cf:85:b8:9d:de:0b:b0:
02:9b:6e:24:b5:59:2b:2b:3c:eb:ef:1e:5c:31:00:
d2:d4:aa:a3:55:98:e8:a5:f9:d9:de:c9:32:b6:d2:
4f:55:50:88:af:4d:94:cf:6b:67:a4:36:5e:1d:46:
f5:6b:36:f2:4d:a5:4f:12:7c:c0:88:78:a1:b5:17:
9f:3e:c1:25:f0:72:c1:1a:30:cb:19:aa:86:a5:48:
03:e6:a9:30:d7:b7:d6:04:b6:a0:c6:46:90:76:18:
4e:a6:b7:90:0b:f0:27:df:15:7f:36:d4:b4:62:e6:
32:9d:52:d9:12:81:62:64:a6:7c:50:2a:32:7c:eb:
02:82:4b:17:de:72:7d:8e:d4:a0:99:cf:4a:8c:7e:
a3:2b:f7:44:89:23:cb:51:ee:21:a1:48:86:47:e9:
74:f3:99:a6:93:1e:f0:4d:ec:c2:5b:f3:bf:41:c6:
aa:9b:09:3e:2a:07:38:0d:c9:2a:c7:9b:2d:7e:e0:
42:20:ea:28:71:c3:55:0b:7f:f1:45:24:2c:ec:a8:
cf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:91:21:F6:EB:AD:08:A4:F2:8A:D3:C7:1A:8E:25:47:EA:BF:D5:58
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:cf:88:f0:ef:10:1e:e4:37:cf:e2:84:09:d7:90:72:a1:4d:
eb:bd:8a:b2:45:9c:13:f3:c5:a2:83:2b:2a:e7:41:32:c4:b7:
c3:ba:5a:dd:1e:82:a5:23:cc:50:87:a9:35:30:32:ea:6e:aa:
11:c0:75:20:e6:8f:8e:62:fd:20:1a:98:cf:d4:7b:ed:33:1f:
32:2c:e0:bd:f3:d2:91:54:e1:41:ec:58:26:81:9d:66:78:fb:
2b:94:22:7f:ee:85:86:02:a4:97:be:2e:8d:95:28:62:2e:20:
27:f1:54:52:fb:b7:be:53:4d:de:7c:d6:59:6c:39:bd:be:a1:
ad:07:bb:5b:c9:3b:ce:92:14:4d:cd:21:80:bb:1e:9a:b9:97:
7a:5c:7f:67:5f:e5:6f:07:3e:53:52:4e:5c:27:6a:48:fc:81:
ac:d4:f9:b5:8b:c1:82:1d:d7:b9:ca:af:7c:4f:13:91:36:5b:
dd:d7:5a:f6:32:a6:7f:1d:62:9c:0f:bb:44:61:29:3a:1b:e7:
24:95:10:74:e0:61:e0:83:69:bf:5b:16:bd:65:b4:06:52:d9:
b6:04:e5:81:3d:73:46:61:41:e8:47:66:37:b3:15:95:8f:67:
e6:38:c5:f8:b6:e7:bf:d5:6d:38:a8:4f:84:d8:86:e2:e3:29:
fe:b8:d3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 01:05:38 2026 by rpki-client