Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: cWLqb5flkEFrzPTsWKiCgx8kmkISoDiyfKrNGttpsVU=
Subject key identifier: 45:AC:8B:F3:58:39:74:CE:1A:23:55:A8:B8:16:B0:7D:14:95:4E:BC
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 01A1C5FA6F4476972340CFE820421CD71CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 116F
Signing time: Tue 10 Nov 2026 15:01:26 +0000
Manifest this update: Tue 10 Nov 2026 15:01:26 +0000
Manifest next update: Wed 11 Nov 2026 15:01:26 +0000
Files and hashes: 1: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: kEZO7tmrcCEqcgMr26IKjmUyoNj4ade+D+DxCel/4uw=)
2: cIwuNOBQZVEAKmirlwvqGCKlAVA.roa (hash: MTQrQYMht/gMO7+xqgltPlCnk6FhdwKMEakt6nRw8pI=)
3: xTW_lD5hyFR2vQYBVeIQ8tHTVWU.roa (hash: +MCBleBXBQDx6fs7+ejDOMAZrsryKfTQT1EHgUrcOhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 15:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:fa:6f:44:76:97:23:40:cf:e8:20:42:1c:d7:1c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Nov 10 15:01:26 2026 GMT
Not After : Nov 11 15:01:26 2026 GMT
Subject: CN=45ac8bf3583974ce1a2355a8b816b07d14954ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:e8:67:cb:52:79:1b:97:df:32:51:9a:68:
30:ef:a5:f5:51:e6:27:4a:d8:d4:73:e0:6d:63:45:
f6:5c:3a:a6:da:40:9f:9b:e8:54:ba:07:5b:62:5e:
0f:cf:65:8e:56:30:34:41:0b:d0:b4:e2:cc:f6:db:
3f:ca:cc:06:fc:75:98:d4:82:76:b3:d7:33:80:42:
c3:ce:94:b4:16:64:b7:49:e3:fa:90:4c:89:88:1c:
53:fb:f4:20:29:4e:b0:90:d7:47:22:5f:a4:eb:ca:
e4:58:06:fd:db:14:43:fd:0f:60:df:ba:98:64:dc:
23:26:7e:ce:db:09:11:40:bf:e0:5c:74:13:fc:44:
5d:46:5d:f4:d8:38:9e:bd:a8:78:43:da:3d:51:e8:
33:ca:31:7f:b4:14:1f:f3:41:03:1c:ab:fd:8b:c9:
c9:76:13:44:8a:5b:85:b1:ff:02:bb:dd:ba:e4:26:
02:9d:e3:03:90:e4:7a:23:ea:fb:a0:21:df:51:f3:
08:38:18:fa:47:a7:4b:f0:89:0a:29:ed:9b:9b:c7:
bb:71:43:3c:ca:16:2f:35:d0:85:e3:0c:48:09:3a:
2b:67:e9:f5:6a:06:50:e8:18:63:53:05:5a:e8:38:
62:6c:35:21:20:51:cc:78:a8:4a:26:eb:e0:e8:70:
2a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AC:8B:F3:58:39:74:CE:1A:23:55:A8:B8:16:B0:7D:14:95:4E:BC
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e8:bd:92:ce:b1:b5:ba:55:99:8e:89:7f:b2:a3:9a:5d:c4:
02:0d:d9:8e:77:af:e7:c7:7d:63:66:d3:de:69:54:63:c3:a9:
da:ec:ac:ba:8a:b8:56:cc:2a:6b:2c:05:7d:a0:48:db:2e:39:
11:11:b4:00:2e:dc:87:2e:bb:5a:4e:49:84:d1:78:b5:d2:6c:
c6:5b:9c:69:df:58:1a:2e:e5:f0:02:f3:0c:bc:8c:c0:eb:87:
39:2a:3f:8d:0c:c3:bb:7d:24:16:a7:7d:bf:39:ce:70:c5:5c:
0e:c6:d7:c8:6a:d5:91:2d:ff:58:d2:e9:98:53:fc:6c:3a:9e:
0a:af:61:05:a9:1d:9d:c6:43:43:4f:f0:4d:36:9a:0b:5f:77:
7f:d8:e4:74:e9:ff:da:f4:2c:16:a7:ce:2d:84:cd:50:07:d2:
df:da:e6:03:c3:e0:1c:bf:98:cf:10:d4:da:c7:e5:a2:77:d1:
c1:b6:c7:a8:d7:f0:44:83:c6:81:02:b3:fd:a9:f8:82:51:d9:
db:25:b7:b7:0c:2a:a1:12:c2:8d:09:83:b6:94:05:f0:7e:cd:
e9:e5:8a:44:ac:50:8a:92:49:90:e2:9a:1c:af:56:7a:30:b6:
06:a7:1b:ed:df:f3:4e:4f:5b:92:fb:54:2a:b1:3f:b0:04:aa:
6c:49:b1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 22:52:57 2026 by rpki-client