Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
File: RY-YWypGQ0lCubLZHPEocHUuRvs.mft (raw, json)
Hash identifier: rTjqR2l5yWuoYQGEXm+CTlOSMBbiRkRU4CpW5niXRXU=
Subject key identifier: FC:85:78:5B:55:6D:06:2E:84:72:E5:20:C6:0D:31:95:FF:67:EE:26
Authority key identifier: 45:8F:98:5B:2A:46:43:49:42:B9:B2:D9:1C:F1:28:70:75:2E:46:FB
Certificate issuer: /CN=458f985b2a46434942b9b2d91cf12870752e46fb
Certificate serial: 01A15176D2AD539D3AB5B0AD8E70F983A7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY-YWypGQ0lCubLZHPEocHUuRvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
Manifest number: 0128
Signing time: Mon 19 Oct 2026 00:01:43 +0000
Manifest this update: Mon 19 Oct 2026 00:01:43 +0000
Manifest next update: Tue 20 Oct 2026 00:01:43 +0000
Files and hashes: 1: RY-YWypGQ0lCubLZHPEocHUuRvs.crl (hash: NoymfRhUWNPXvSwkzrvNF5bZAfICBu3dch9BS9adW/o=)
2: ZMVggC6fnvi5QFfWX49Stx3sedU.roa (hash: 2N+/qv1zdtOS6klaheqYn3TqcaLDARy95PnzfT7lVJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RY-YWypGQ0lCubLZHPEocHUuRvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:76:d2:ad:53:9d:3a:b5:b0:ad:8e:70:f9:83:a7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458f985b2a46434942b9b2d91cf12870752e46fb
Validity
Not Before: Oct 19 00:01:43 2026 GMT
Not After : Oct 20 00:01:43 2026 GMT
Subject: CN=fc85785b556d062e8472e520c60d3195ff67ee26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:87:f1:30:3e:6e:0c:dc:e0:c2:c7:77:02:
13:b1:5d:34:de:28:9c:5e:96:e0:56:87:dc:94:7e:
80:49:34:f4:5a:1d:f0:ca:e8:2b:c9:de:85:2a:57:
c2:7b:41:99:ae:c6:af:7e:f8:5c:60:a7:44:55:e9:
72:9b:fa:27:4b:f8:3e:b1:75:df:96:4c:27:95:d0:
29:24:8f:80:84:f9:ae:b6:a9:55:9e:b9:bb:c6:4a:
e3:6d:a7:f4:85:a5:a5:39:ac:53:e7:bc:e8:bf:4f:
04:8f:d5:52:b8:da:1f:5c:61:e7:b2:97:88:2a:fe:
81:29:43:c8:2c:df:5d:3f:01:2c:b4:b3:1e:2b:4a:
be:ef:45:2d:17:8f:eb:b7:24:d5:7a:fd:ba:34:48:
10:8e:73:54:3d:21:af:de:ab:d3:ee:75:cf:8d:af:
fa:be:34:1b:95:e5:e3:90:8d:7d:3c:38:c0:31:36:
9d:a5:e0:37:f1:bc:22:0a:f8:af:c0:21:b1:31:2b:
49:8a:32:4e:95:6c:8b:b6:bc:30:ff:7e:0e:81:6a:
3a:fd:a1:ea:79:3b:d1:2a:d1:aa:71:4f:5e:77:2d:
54:d1:ae:eb:cc:2d:ba:e1:f5:12:47:ae:fd:ea:18:
e6:e6:fd:86:ba:88:41:4d:93:0d:fa:67:6a:e3:4f:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:85:78:5B:55:6D:06:2E:84:72:E5:20:C6:0D:31:95:FF:67:EE:26
X509v3 Authority Key Identifier:
keyid:45:8F:98:5B:2A:46:43:49:42:B9:B2:D9:1C:F1:28:70:75:2E:46:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY-YWypGQ0lCubLZHPEocHUuRvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c4:c5:19:1f:08:91:66:de:28:c2:c0:9c:06:37:65:93:8c:
e8:4c:b7:05:15:1c:a5:f6:09:74:03:33:bb:f0:f4:f9:e2:d6:
08:92:2b:31:cf:e3:eb:7e:71:70:f1:24:e7:93:40:32:1e:48:
ed:fc:3b:a6:f2:88:11:5a:e0:1e:96:f9:a7:f9:42:ac:6f:65:
6f:56:55:54:4b:36:e0:2c:b5:60:b4:39:99:eb:e5:25:34:13:
ae:c9:9c:6a:ff:1d:de:be:fe:e0:97:c8:bb:22:9f:03:63:53:
0e:5b:28:42:61:2b:05:c6:0a:b3:e2:21:ce:30:6b:29:26:e3:
3e:bb:83:ce:e3:f1:97:26:0a:87:ed:00:69:f5:ca:ee:e7:7b:
27:05:cb:51:74:63:8e:10:83:71:5f:a3:1e:c9:c7:b2:84:c7:
ac:b0:23:50:19:41:c3:ee:71:23:9b:5c:61:2d:54:cf:2e:a2:
92:42:b6:38:ed:9f:af:3b:b3:9f:64:e6:fb:d2:ab:f4:84:e9:
59:7e:6e:4c:78:7a:75:6c:b3:19:b8:bd:7a:68:a9:29:89:91:
bc:98:8d:fd:be:6b:fc:55:30:72:58:95:31:92:c0:20:93:b0:
00:ca:83:bf:55:b6:3b:e0:1f:a8:d3:b8:30:89:c6:2a:0f:3e:
ac:5c:6d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:41:21 2026 by rpki-client