Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
File: Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft (raw, json)
Hash identifier: SBx2k5q80kMPW6NvghyGjiqJa43KJCow8bktP5fEP3A=
Subject key identifier: D0:C3:D2:EF:24:33:AC:4C:78:29:73:9E:55:67:62:F6:EE:7F:41:84
Authority key identifier: 63:49:7E:32:45:54:DC:D7:DA:08:48:32:E1:58:68:61:35:46:8A:98
Certificate issuer: /CN=63497e324554dcd7da084832e158686135468a98
Certificate serial: 01A08A557CD68262D9B50F8C05F64E1B7B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0l-MkVU3NfaCEgy4VhoYTVGipg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
Manifest number: AC
Signing time: Thu 10 Sep 2026 08:00:53 +0000
Manifest this update: Thu 10 Sep 2026 08:00:53 +0000
Manifest next update: Fri 11 Sep 2026 08:00:53 +0000
Files and hashes: 1: JbP1DaYmfAXbAIIDLF2iKNau78U.roa (hash: TeCpeD604HqwpWXylmrKKY5o1QnXKpTZG7uy3rpUOas=)
2: Y0l-MkVU3NfaCEgy4VhoYTVGipg.crl (hash: f768k2bIz3fyhs618Sd+OVczWabqMY4rKLm+AeJzypQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0l-MkVU3NfaCEgy4VhoYTVGipg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:7c:d6:82:62:d9:b5:0f:8c:05:f6:4e:1b:7b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63497e324554dcd7da084832e158686135468a98
Validity
Not Before: Sep 10 08:00:53 2026 GMT
Not After : Sep 11 08:00:53 2026 GMT
Subject: CN=d0c3d2ef2433ac4c7829739e556762f6ee7f4184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e5:de:cf:1b:43:9b:c6:77:f9:28:1c:a4:97:
c2:6b:98:10:71:90:6a:0a:5c:c5:f9:04:fe:07:2a:
89:01:76:f5:76:5a:c6:2b:13:69:87:b7:3a:f2:85:
83:4c:2b:60:d4:7e:ca:d1:d5:f7:e1:a5:2e:61:f7:
fa:80:03:43:88:50:71:c5:3d:3b:4c:49:1c:06:a5:
cb:03:d1:3c:be:d8:43:33:ca:ed:49:40:33:13:3d:
b7:5e:05:7d:e2:21:c4:12:e4:af:ce:e5:bf:a3:1a:
2a:ed:cc:9e:45:9c:85:2c:47:31:c6:49:1e:65:46:
18:ef:05:64:70:ca:60:5c:fc:6d:8a:65:79:fa:cc:
03:ae:d0:af:2e:ce:8e:ae:8d:d8:39:9a:7c:10:47:
19:8f:ec:5b:db:7e:33:cf:57:4e:ce:8f:c8:5a:48:
05:25:97:79:c9:2d:20:86:7d:c1:02:23:dd:ac:67:
dc:d9:11:f9:9c:0f:64:3c:4c:92:e7:5e:8a:70:1c:
b2:5d:5b:cb:13:b4:57:09:94:3d:1d:26:80:0b:eb:
c0:d7:59:c0:03:c9:09:4f:17:44:84:2f:e9:24:10:
f8:d7:e1:5b:98:6f:fa:23:b7:e0:15:5a:a2:47:81:
65:47:e2:03:87:7a:aa:99:af:3d:71:db:57:61:55:
cf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C3:D2:EF:24:33:AC:4C:78:29:73:9E:55:67:62:F6:EE:7F:41:84
X509v3 Authority Key Identifier:
keyid:63:49:7E:32:45:54:DC:D7:DA:08:48:32:E1:58:68:61:35:46:8A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0l-MkVU3NfaCEgy4VhoYTVGipg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cf:e0:18:11:0c:d7:a9:df:c1:71:8b:4a:86:e4:f8:78:2e:
78:9a:c1:e8:37:55:d3:ff:1c:6b:6b:d6:ce:c7:81:bb:f5:cd:
c6:f1:e5:bd:17:b8:7a:5f:11:07:db:86:b4:f5:19:8a:9f:dc:
e4:ea:ce:0b:7b:56:52:03:ec:10:71:06:82:81:77:01:52:87:
38:4b:05:03:5c:ab:5b:c7:af:66:47:8d:e8:b9:bc:52:78:ad:
31:c3:34:85:6d:e6:7b:ad:27:48:7a:08:7a:21:d2:94:74:52:
95:22:35:f4:b5:91:ae:07:c7:77:61:e7:95:d8:e1:ba:62:9f:
9e:b5:6a:8f:f4:a2:a7:26:8b:04:fb:48:f9:8a:fa:50:45:c4:
71:d8:16:ff:55:f5:70:6f:b3:d6:64:8f:0c:53:a2:cf:c6:fb:
da:4b:9b:03:d4:5e:84:94:41:80:41:e9:5f:cc:f3:75:68:75:
05:f5:83:6f:93:79:b5:75:67:29:78:47:4c:a9:eb:bf:25:10:
92:fa:51:3d:1c:4b:47:84:59:be:54:fb:c7:96:1a:25:83:f3:
63:f4:cd:f9:13:9d:12:0e:e4:f8:ca:3f:b0:1e:47:b8:64:02:
0b:5e:82:56:f0:ec:a3:4b:7e:0d:47:e0:50:e8:f5:17:3d:0c:
7a:06:dd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:42:20 2026 by rpki-client