Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
File: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json)
Hash identifier: 8x1Dw+FM/NBRN5pfPizSs4LTUvEjL3J0z/cdLL7Lwn8=
Subject key identifier: 06:83:6D:1E:AC:63:A5:3F:25:AE:17:88:25:AA:15:9B:F3:57:41:89
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 01A17B4D2DE823711B3137CA443E1969AF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
Manifest number: 1813
Signing time: Tue 27 Oct 2026 03:00:17 +0000
Manifest this update: Tue 27 Oct 2026 03:00:17 +0000
Manifest next update: Wed 28 Oct 2026 03:00:17 +0000
Files and hashes: 1: J0qpnA35YrWdkNYZVcd9jRpBOBE.roa (hash: XoaXScXKpwP2trg33PIg2cyrDiDDcWR43c4XEEKEOb0=)
2: PN9Auf6nfCjQOBl6zYFAwEaQaC0.roa (hash: gjfumwwkQOIiQ7wTm/N/cWS4x7vvKCrISYqhYWQWJAY=)
3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: za8JqNAEzrHkMg8Y52Jvujv0TVBLpKUi/21lbOfQJ5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:2d:e8:23:71:1b:31:37:ca:44:3e:19:69:af:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: Oct 27 03:00:17 2026 GMT
Not After : Oct 28 03:00:17 2026 GMT
Subject: CN=06836d1eac63a53f25ae178825aa159bf3574189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:89:da:6d:0a:cf:02:74:86:83:2f:ad:56:
54:98:fe:f1:64:98:82:48:63:2e:a0:cd:76:6c:b1:
ad:87:85:cb:96:9d:9c:1c:eb:b8:b8:2b:37:a7:e6:
bd:4f:33:c5:91:85:ae:6e:f5:7a:2f:ad:24:73:87:
ba:94:96:b8:fa:f0:30:d3:22:18:50:df:28:7d:59:
3a:0b:e1:12:32:91:24:f2:2d:2c:f1:23:7f:89:d9:
7d:84:c1:d4:4d:58:72:3d:d2:91:3e:c9:ab:a1:6a:
a6:e1:d4:d0:d1:d8:ab:66:75:3f:88:da:18:16:f1:
4d:a2:9d:70:24:a7:55:48:c4:8a:fe:7b:a4:e7:b8:
ae:af:2c:a4:41:b1:2f:98:8b:d1:11:85:70:4f:e4:
28:22:d6:71:dc:24:8d:01:79:e2:e1:be:34:a7:93:
ed:a2:42:e7:23:11:3a:e8:42:52:f7:6f:f9:d4:b6:
1e:6b:b8:fb:36:61:97:41:3e:07:fc:5a:a4:1b:25:
04:bd:88:a8:61:77:a8:a2:1e:b9:8d:b0:e8:1a:eb:
24:89:59:19:69:0b:0e:fa:8b:04:6c:c8:79:51:8b:
90:0e:20:3b:5f:77:e6:90:37:52:a7:fd:3f:35:49:
ef:3e:01:3c:9b:38:9c:ed:a6:1a:ba:ef:ae:97:35:
7b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:83:6D:1E:AC:63:A5:3F:25:AE:17:88:25:AA:15:9B:F3:57:41:89
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:47:d2:3b:66:3d:4b:2d:49:df:eb:fd:34:04:e8:dc:49:46:
c6:68:8a:1d:8f:c6:0d:90:f7:83:28:36:b2:7a:b5:07:74:9d:
d9:e8:b2:59:c6:e2:19:ef:d0:9f:e9:d2:6f:45:84:29:22:f1:
35:27:d9:2a:11:16:ae:f3:ba:66:9b:a7:32:42:5e:ff:0e:ba:
0a:d9:21:5c:d0:34:96:d0:3a:ca:a9:a1:9b:8c:68:eb:85:92:
c8:1e:36:21:b1:16:7a:16:01:69:5c:2f:2f:93:4e:65:6a:70:
3a:c5:d7:6c:4b:6c:fd:ff:c5:1a:bd:fe:63:56:7e:64:71:00:
3b:ec:7c:ff:e8:a8:4e:d7:4e:3f:a5:34:e5:35:d3:b0:b3:aa:
ae:1d:17:92:df:cb:bc:17:a3:81:e2:b0:e1:45:89:e5:8c:22:
a9:77:0d:f2:09:e6:e0:95:6c:22:f2:85:93:4b:7a:20:ba:de:
3e:15:2b:d0:90:31:0f:4e:0c:78:ae:ca:ef:39:78:0d:48:3c:
80:82:51:ae:ec:e9:05:78:33:ef:3e:9b:a4:da:75:d0:0a:08:
1d:5c:9b:96:ae:1e:33:56:12:86:15:f6:62:3a:12:e3:22:09:
0d:26:fc:a3:09:a1:09:85:32:ea:4c:c3:5d:01:19:d9:fe:b8:
ec:9a:db:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:09:21 2026 by rpki-client