
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
File: _sY8Uk5V3zS_dYKCd1PnenaZx6I.mft (raw, json)
Hash identifier: 1IzUY/4onpBPYhU2IY/MgjST67AgUdO0x7ahUrUPVOk=
Subject key identifier: 75:64:54:EA:C5:9E:F7:D4:F3:7D:2F:BB:2B:4C:FD:E6:D4:05:DC:F1
Authority key identifier: FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
Certificate issuer: /CN=fec63c524e55df34bf7582827753e77a7699c7a2
Certificate serial: 01A06E02F0E6C5A71D1269481A75979A0845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
Manifest number: 163F
Signing time: Fri 04 Sep 2026 20:01:21 +0000
Manifest this update: Fri 04 Sep 2026 20:01:21 +0000
Manifest next update: Sat 05 Sep 2026 20:01:21 +0000
Files and hashes: 1: PDlzLdRSfiCWn5Cn9n1N3CZ3lEA.roa (hash: EEEk6xoAWgV2qpYCMx9BhEvvCT14wds/MjLsIpjnFvU=)
2: _sY8Uk5V3zS_dYKCd1PnenaZx6I.crl (hash: nKDNfHmUNC7e4Ha/Hfv+cppWnaciflYlSj8PyQRpHEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:02:f0:e6:c5:a7:1d:12:69:48:1a:75:97:9a:08:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec63c524e55df34bf7582827753e77a7699c7a2
Validity
Not Before: Sep 4 20:01:21 2026 GMT
Not After : Sep 5 20:01:21 2026 GMT
Subject: CN=756454eac59ef7d4f37d2fbb2b4cfde6d405dcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c6:31:b0:72:25:87:e8:0d:f3:02:25:3f:dc:
8f:66:d2:60:f7:1a:33:58:8d:8b:c0:a9:cf:45:12:
ee:d8:60:22:7a:c9:6e:ce:9a:d6:1a:e7:a2:76:28:
01:b6:11:bc:84:8c:08:0c:ad:a2:8a:40:56:24:e5:
60:ab:e2:1f:de:f7:c2:09:c1:48:02:43:fd:45:04:
be:8b:83:d3:ae:ef:99:f1:4d:18:f9:f0:5f:1a:72:
6d:c6:1e:54:6f:38:5f:96:f5:e5:1e:fb:4d:6e:2b:
36:26:01:67:c9:8a:86:7a:d2:4f:81:d3:e2:13:a9:
21:4c:3a:d0:6d:49:62:f0:62:b5:4c:64:71:c1:75:
c7:22:bd:23:29:fd:c8:5d:1e:f3:5d:8e:00:2b:2a:
a3:2b:12:7b:e5:64:e9:58:cb:7b:f0:2b:8f:60:28:
2c:8b:d2:66:c9:7a:fb:99:94:5b:b1:4e:14:6d:cb:
d2:99:56:a0:e9:89:37:a3:c9:2e:3a:4f:c1:7b:64:
e2:c3:40:7b:06:6e:eb:1f:ab:94:07:59:aa:a0:d8:
59:4a:79:15:3f:00:d5:af:22:e4:23:f2:49:e9:94:
13:80:a3:3d:95:84:67:c7:66:ac:19:69:ab:ce:82:
b6:a6:6f:4b:be:0d:79:4a:3c:b5:b7:e1:9e:c3:e3:
b7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:64:54:EA:C5:9E:F7:D4:F3:7D:2F:BB:2B:4C:FD:E6:D4:05:DC:F1
X509v3 Authority Key Identifier:
keyid:FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:67:a7:f8:a3:ed:7b:2d:41:fe:35:83:ad:e6:11:26:a6:70:
ad:23:2e:b3:6e:2b:5c:bc:82:32:32:4b:f8:77:b9:fb:d4:24:
53:74:a0:50:10:48:2a:e2:fb:5b:d8:31:83:c3:0f:3a:8d:7d:
cd:bb:0f:7a:45:47:c8:53:63:e1:67:4a:66:bf:fb:d2:37:46:
43:be:69:d9:88:44:9f:ba:28:16:46:7b:ba:b2:e6:ed:0e:96:
5b:89:f8:7f:68:a1:89:17:54:74:6b:e7:7a:8f:e1:34:bf:b4:
a3:6c:69:b4:71:f0:4e:36:51:cc:6d:5a:52:83:f5:ab:96:1e:
9d:09:69:53:00:ce:f7:a6:70:90:b9:42:4f:87:93:75:fc:24:
95:ea:f2:09:fc:f2:f8:a0:86:59:ce:06:23:f4:6a:a4:aa:cf:
85:aa:fd:49:f7:26:01:ba:b0:8c:7b:08:dd:73:65:8b:31:9b:
41:36:23:e1:32:f0:e7:bd:a4:d2:8c:12:7d:75:56:1f:35:0b:
e7:d1:75:e4:9a:db:f6:60:af:db:24:5e:65:11:91:d5:e8:99:
9c:c4:9a:cf:81:75:26:b7:58:98:29:48:a3:f7:f3:80:8e:f9:
9c:fd:27:47:fc:7e:08:33:7f:04:fb:d1:ae:a7:8f:1c:9f:90:
76:12:13:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:16 2026 by rpki-client