Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
File: Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft (raw, json)
Hash identifier: mY5+5FzMp0lQWncwX1RWZSH9fYCxm110GhmeXW3BNH0=
Subject key identifier: A3:15:7D:3B:43:9D:31:E0:99:BF:5E:6E:E1:97:F9:FA:B9:A5:09:26
Authority key identifier: 63:49:7E:32:45:54:DC:D7:DA:08:48:32:E1:58:68:61:35:46:8A:98
Certificate issuer: /CN=63497e324554dcd7da084832e158686135468a98
Certificate serial: 01A17BBB3346C33F24BC92775B88B6149AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0l-MkVU3NfaCEgy4VhoYTVGipg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
Manifest number: 0129
Signing time: Tue 27 Oct 2026 05:00:28 +0000
Manifest this update: Tue 27 Oct 2026 05:00:28 +0000
Manifest next update: Wed 28 Oct 2026 05:00:28 +0000
Files and hashes: 1: JbP1DaYmfAXbAIIDLF2iKNau78U.roa (hash: TeCpeD604HqwpWXylmrKKY5o1QnXKpTZG7uy3rpUOas=)
2: Y0l-MkVU3NfaCEgy4VhoYTVGipg.crl (hash: MvIzL0k3Zm/eAMoLx2nY38ljfQFUnvzaEnMz0NhGXFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0l-MkVU3NfaCEgy4VhoYTVGipg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:33:46:c3:3f:24:bc:92:77:5b:88:b6:14:9a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63497e324554dcd7da084832e158686135468a98
Validity
Not Before: Oct 27 05:00:28 2026 GMT
Not After : Oct 28 05:00:28 2026 GMT
Subject: CN=a3157d3b439d31e099bf5e6ee197f9fab9a50926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6b:25:09:1d:17:dc:e7:79:5c:c6:37:28:e2:
43:11:b4:7f:5f:26:85:f9:94:b9:30:93:18:da:55:
3a:0e:f4:1f:dd:29:cf:99:a4:f4:ef:d9:2b:61:83:
b5:c0:82:a6:3a:08:ce:4b:04:e1:0f:02:c2:4a:9f:
46:23:18:0b:ee:3f:8c:3d:f1:33:9d:af:cc:28:26:
7c:8c:19:a7:2f:3b:df:a6:77:57:cb:46:ff:29:ec:
b3:15:60:12:44:60:44:11:2d:e4:12:58:76:8e:08:
56:ea:33:d7:cf:f7:d8:51:58:f1:b8:bd:b9:9c:bf:
4c:93:26:dc:1f:57:ff:f3:02:72:4f:01:44:e6:91:
c0:20:5b:0a:ef:9e:12:4b:4b:e3:c4:7c:70:d2:57:
c8:c6:94:3d:98:71:67:41:78:93:bb:4b:2c:60:a4:
a5:d0:ac:35:25:e7:06:3a:ad:82:d4:d8:37:71:af:
11:78:05:b8:29:14:1e:b5:6d:a7:fc:1b:22:5e:fd:
c7:81:60:f6:2d:2d:e7:e8:99:ca:9d:af:e3:66:cc:
4e:a4:3e:c4:3c:24:16:22:65:67:90:a6:50:56:f1:
82:a1:37:ec:51:1d:72:a5:ca:06:a8:ec:db:7f:56:
7e:88:3c:0c:a3:04:b3:e4:4b:86:8d:ec:af:b0:95:
eb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:15:7D:3B:43:9D:31:E0:99:BF:5E:6E:E1:97:F9:FA:B9:A5:09:26
X509v3 Authority Key Identifier:
keyid:63:49:7E:32:45:54:DC:D7:DA:08:48:32:E1:58:68:61:35:46:8A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0l-MkVU3NfaCEgy4VhoYTVGipg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:dc:7f:cb:45:9d:35:16:b4:87:7c:a2:6b:5d:12:8f:2a:d0:
16:5f:e3:52:12:7d:77:9a:aa:19:00:31:f3:9b:49:86:ec:47:
e9:97:a4:c6:9d:d4:78:2e:4d:6e:3e:6a:73:11:b8:e4:5a:18:
35:40:da:24:4d:37:c8:c5:f0:98:9b:24:f9:69:2d:a2:ee:8d:
f9:0c:31:9d:0b:21:41:d8:56:74:3b:e6:59:29:52:eb:f9:eb:
93:a0:9e:e4:1b:2d:71:29:9b:31:74:d7:68:e1:28:fd:65:84:
ca:04:de:7b:1f:8d:87:e1:d3:9b:6c:4e:8f:19:70:1c:c1:4f:
d9:b6:35:87:43:aa:fd:3d:00:75:0c:64:17:77:07:0a:7f:82:
89:08:1c:dc:b3:f3:d6:e8:b1:40:bb:20:a5:47:c0:dd:a3:13:
e9:d4:23:d8:39:74:d3:b4:d4:05:fd:e1:01:7b:e9:1a:ff:f6:
57:b1:9a:3d:91:10:1e:9a:d5:19:86:66:2b:33:11:77:c4:00:
c0:3d:0b:79:00:db:db:aa:27:01:dc:87:1f:56:72:fe:c2:c9:
aa:54:d3:f6:84:f5:b2:58:47:bb:e6:38:28:79:42:b4:ea:68:
d2:06:25:32:2a:0f:b5:3b:25:6d:5d:82:f6:ea:d5:7e:aa:81:
1f:f1:f3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:41:19 2026 by rpki-client