Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: 1d53XK68DaSlgXa0jhipZHa1y439jQIsfvZsOEErDYE=
Subject key identifier: C5:68:4A:0C:4A:1E:81:A7:3E:21:E6:6B:7E:E3:B5:92:F7:07:D9:89
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 01A0DE3C29DA8150373102C599795A21DA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 10F7
Signing time: Sat 26 Sep 2026 15:01:19 +0000
Manifest this update: Sat 26 Sep 2026 15:01:19 +0000
Manifest next update: Sun 27 Sep 2026 15:01:19 +0000
Files and hashes: 1: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: m8RwbAHtAQAHlasqbvvjZ9o30YCrDtm0xNDDZBjXgsA=)
2: cIwuNOBQZVEAKmirlwvqGCKlAVA.roa (hash: MTQrQYMht/gMO7+xqgltPlCnk6FhdwKMEakt6nRw8pI=)
3: xTW_lD5hyFR2vQYBVeIQ8tHTVWU.roa (hash: +MCBleBXBQDx6fs7+ejDOMAZrsryKfTQT1EHgUrcOhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:3c:29:da:81:50:37:31:02:c5:99:79:5a:21:da:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Sep 26 15:01:19 2026 GMT
Not After : Sep 27 15:01:19 2026 GMT
Subject: CN=c5684a0c4a1e81a73e21e66b7ee3b592f707d989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:ea:c2:b4:04:e4:65:d7:9c:5c:59:4a:e2:
ff:e0:a3:39:91:81:7b:26:d3:f3:e9:11:12:eb:65:
51:7f:fa:64:fd:f8:ca:61:a4:a8:3d:64:5a:b9:64:
8a:2e:0d:0d:04:fe:44:5f:ae:06:d7:fa:16:d5:bb:
47:23:c3:aa:07:7b:78:86:51:7d:50:d4:46:e8:6e:
9b:8d:f8:d0:db:0e:fd:85:81:21:39:12:ae:0e:5a:
7e:9b:ee:6b:4a:c0:8e:e1:d1:fa:ce:74:6f:93:32:
a4:30:0c:2a:86:86:32:81:f0:37:56:8e:d5:cc:c3:
ba:aa:95:5a:55:92:35:4f:34:6c:16:b3:01:7a:c8:
67:89:e9:e5:a2:ac:ec:e3:3b:a9:48:d3:cf:1f:a9:
53:0d:af:5d:01:b0:49:1d:40:46:6f:23:c4:a7:14:
07:2d:3f:15:d5:ed:8b:c9:d0:82:13:c5:57:a6:c5:
3c:49:f8:1a:50:a0:c1:b7:a4:c4:e7:17:79:54:a5:
74:9d:cc:b3:92:85:ab:67:dc:0f:81:d4:f1:98:44:
ec:90:0f:ee:df:fc:69:b3:71:06:88:f0:53:32:71:
55:12:86:18:9b:f7:8f:8b:ae:a8:b3:db:79:6a:62:
c6:2a:51:27:ce:0c:e7:b5:cc:7a:b3:2a:95:c9:2b:
c5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:68:4A:0C:4A:1E:81:A7:3E:21:E6:6B:7E:E3:B5:92:F7:07:D9:89
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e5:f9:88:01:55:23:6b:b3:f6:19:2e:04:b0:72:99:f2:3b:
51:a0:4b:8c:8b:69:0d:ba:9c:dd:4f:bb:75:1a:60:a4:01:11:
0c:de:c5:af:60:51:35:1c:32:fd:da:56:92:d4:65:54:a0:7a:
c2:4a:81:e9:89:bb:e6:36:ff:ae:01:3d:92:09:75:f9:53:2c:
b6:9e:39:3f:6a:5d:56:aa:32:be:07:f7:1d:ef:28:8d:e0:49:
33:d7:68:46:f3:c1:7a:7a:5d:27:59:19:9e:1f:4e:f7:6d:de:
0f:3c:1f:9c:cb:1c:90:42:f6:33:83:37:44:8e:03:c6:16:e7:
a2:0f:d0:12:e1:ee:2e:d0:4a:40:45:96:db:a9:69:ec:a9:3a:
d1:c3:f2:31:01:b2:f6:3c:a0:f3:14:df:cc:fa:3f:4b:f8:c6:
f6:c4:e3:4c:8f:1d:a6:28:53:15:23:4e:50:a9:3c:e5:db:69:
61:59:14:d3:29:1a:cc:a7:14:19:10:4d:7d:d8:19:8d:32:de:
5d:d3:78:a7:83:fb:8f:96:64:a8:73:d8:94:5f:fa:61:8c:ac:
f0:12:66:82:99:f1:f3:27:40:90:57:5a:97:85:60:91:84:11:
fa:96:99:0a:38:57:f5:c2:21:c0:0c:a8:0a:44:e6:98:5d:6d:
2a:49:85:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:38:32 2026 by rpki-client