Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier: rsXnJuRD1W/THh9r5z2IlJFAJ1+vGVNGjDUxee5nw1w=
Subject key identifier: 81:9A:9F:A1:8D:CD:BF:9F:F0:FF:8B:B8:1B:B1:C7:28:1E:41:C0:A9
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial: 01A10135F832826CC123261264EDA9A00549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number: 1A87
Signing time: Sat 03 Oct 2026 10:01:16 +0000
Manifest this update: Sat 03 Oct 2026 10:01:16 +0000
Manifest next update: Sun 04 Oct 2026 10:01:16 +0000
Files and hashes: 1: 1-Npj9uH2lNWYpla7MTqgqwt83iQ.roa (hash: JQmankrBVBlqdCQ8Vwvu+tFNWtJX5/kU02hONf99fCo=)
2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: HdNGXdUd29PGMwerjDManXSD/Od2Ux2vLhEg4npIJQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:35:f8:32:82:6c:c1:23:26:12:64:ed:a9:a0:05:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Validity
Not Before: Oct 3 10:01:16 2026 GMT
Not After : Oct 4 10:01:16 2026 GMT
Subject: CN=819a9fa18dcdbf9ff0ff8bb81bb1c7281e41c0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:c1:18:4a:2c:f8:a0:22:66:dd:9e:7c:d5:
76:0a:98:92:89:d8:06:68:fb:63:ef:72:36:6d:f4:
95:a9:ec:a9:99:f5:18:2f:53:9f:ef:6f:0e:cb:fa:
f8:de:b9:8b:7f:5b:ab:af:f3:4e:63:2f:41:ef:eb:
fb:c2:43:03:a2:3b:16:9c:ab:c8:b3:f2:a7:5c:1d:
7f:53:f0:b3:c8:d4:09:94:4e:f6:1d:94:5a:93:9d:
85:b2:a9:f7:be:4d:b7:79:e2:cd:6a:37:3c:8b:ce:
10:91:f4:88:26:91:df:9b:0b:02:3a:f9:ee:5e:b0:
c4:d3:61:85:3a:4d:43:3c:82:66:6d:cd:5c:ce:b4:
41:87:78:51:a5:69:cb:51:8b:d2:30:83:d5:24:d3:
d7:4e:4f:42:c6:84:b9:5b:a8:9a:7f:fa:cd:f0:bf:
89:61:e9:62:e6:54:bf:2a:09:1c:40:8e:e4:d7:61:
e5:95:0b:e9:63:b6:97:eb:2b:5a:47:46:de:b3:1c:
c5:0d:96:00:3e:d5:a4:27:d6:c7:2c:75:29:06:16:
fa:ba:f4:c6:a9:92:4c:a5:9e:47:70:8d:18:e4:ff:
ce:24:55:6b:f9:4a:f9:2c:1e:cb:24:94:cd:38:13:
1a:a1:15:63:e3:8e:1a:3a:0b:22:6e:6f:14:c4:be:
1c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9A:9F:A1:8D:CD:BF:9F:F0:FF:8B:B8:1B:B1:C7:28:1E:41:C0:A9
X509v3 Authority Key Identifier:
keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:cc:71:41:a7:17:90:f4:02:13:70:b0:1b:99:3f:4f:8a:e0:
14:be:c0:2c:5d:07:80:5f:28:3c:2b:93:a5:ba:29:0d:45:83:
cc:fb:91:87:6d:18:bc:82:68:53:52:d2:9c:0e:42:87:e1:95:
48:c9:4e:56:cc:1f:fa:ad:43:4f:2a:a5:1b:5a:11:30:e9:29:
58:8a:2c:5e:75:55:09:ef:37:6f:9f:b7:81:a4:78:92:1f:70:
9f:6a:9b:88:a7:2a:4e:bc:e9:03:27:82:69:54:e7:27:1c:91:
73:7e:45:76:c5:17:22:ac:7a:51:e1:aa:3d:80:4f:f0:06:e9:
df:f2:8c:7f:f8:15:ec:84:e8:92:6c:b3:7d:45:55:eb:d1:81:
bd:ce:90:f7:83:b7:bf:5c:75:52:96:12:42:87:5e:fc:e5:32:
d2:f8:45:c9:f4:41:4d:7d:65:59:0c:cf:17:c8:33:2c:98:c5:
b5:a0:23:32:06:ea:23:38:38:7e:6d:f6:2e:49:e5:db:23:91:
d9:e4:48:9c:16:a2:f2:a7:d1:df:78:d3:86:6f:46:ae:8f:28:
ce:a4:01:7a:48:2a:bc:cf:b9:85:34:76:f7:d9:89:ea:cc:4f:
56:58:d6:c8:9e:a5:65:73:fb:e6:8d:e6:83:29:7c:d9:96:fd:
d7:19:f3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:50:33 2026 by rpki-client