Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
File: RY-YWypGQ0lCubLZHPEocHUuRvs.mft (raw, json)
Hash identifier: Cg1hjAIFs8TggT4bZa/Ofkdk46JqOzCRTMNXQgGnZGo=
Subject key identifier: 1F:C6:B7:C9:49:10:10:A1:5F:D3:A3:E5:57:65:75:A5:B6:EC:94:33
Authority key identifier: 45:8F:98:5B:2A:46:43:49:42:B9:B2:D9:1C:F1:28:70:75:2E:46:FB
Certificate issuer: /CN=458f985b2a46434942b9b2d91cf12870752e46fb
Certificate serial: 01A15930526590DA3B34FEA3EA2BD0557106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY-YWypGQ0lCubLZHPEocHUuRvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
Manifest number: 012C
Signing time: Tue 20 Oct 2026 12:01:41 +0000
Manifest this update: Tue 20 Oct 2026 12:01:41 +0000
Manifest next update: Wed 21 Oct 2026 12:01:41 +0000
Files and hashes: 1: RY-YWypGQ0lCubLZHPEocHUuRvs.crl (hash: BaSZe/IeOfrDTSIc4zStIKwB3XMAqNuQsusjGzGAx74=)
2: ZMVggC6fnvi5QFfWX49Stx3sedU.roa (hash: 2N+/qv1zdtOS6klaheqYn3TqcaLDARy95PnzfT7lVJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RY-YWypGQ0lCubLZHPEocHUuRvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:30:52:65:90:da:3b:34:fe:a3:ea:2b:d0:55:71:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458f985b2a46434942b9b2d91cf12870752e46fb
Validity
Not Before: Oct 20 12:01:41 2026 GMT
Not After : Oct 21 12:01:41 2026 GMT
Subject: CN=1fc6b7c9491010a15fd3a3e5576575a5b6ec9433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:64:ef:3a:49:44:12:fc:ea:4b:94:ac:b4:e8:
74:9d:fb:f4:3a:76:08:19:69:7a:47:99:c7:08:b1:
32:d4:e5:e3:4c:c4:38:a0:e0:3e:79:d8:a6:0e:6d:
af:4f:b2:fc:83:07:ed:31:1e:5f:47:ce:ce:a0:9d:
bb:8c:dd:b5:a4:73:27:f4:bd:17:bb:c5:85:d7:2c:
39:e8:84:c4:52:7f:dc:84:e3:59:92:74:5b:b5:8c:
b9:5e:f4:7a:62:12:20:ce:f0:de:97:66:49:2d:01:
7f:c5:31:3d:d6:63:27:58:28:4a:24:bc:66:2b:67:
1a:fd:ac:16:c9:26:41:28:3c:ff:68:47:fd:c4:f9:
9d:b4:50:df:78:95:f5:0c:8e:be:28:9f:9c:bb:db:
a1:4c:e5:b4:e1:b0:c0:4c:a1:3e:87:9a:f7:32:4b:
0c:7c:d7:c8:c5:53:a3:95:22:bf:58:95:b7:1f:1a:
49:4d:19:0a:61:65:a8:70:c0:a6:04:be:2c:7c:66:
4c:8e:71:20:c6:f3:49:e9:89:56:49:ab:b3:1d:16:
eb:49:ca:8a:57:ae:88:70:11:35:94:d2:ff:47:93:
f0:d4:d4:35:db:7d:33:90:d1:31:ab:a0:ad:13:dd:
62:21:02:62:7e:9c:39:1f:ce:4d:ce:9b:37:f2:2d:
9c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C6:B7:C9:49:10:10:A1:5F:D3:A3:E5:57:65:75:A5:B6:EC:94:33
X509v3 Authority Key Identifier:
keyid:45:8F:98:5B:2A:46:43:49:42:B9:B2:D9:1C:F1:28:70:75:2E:46:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY-YWypGQ0lCubLZHPEocHUuRvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/RY-YWypGQ0lCubLZHPEocHUuRvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4c:a6:5d:c1:63:98:51:e9:11:84:d7:d6:94:68:58:61:fc:
29:42:0b:11:25:72:52:0b:16:d5:07:d8:c9:e0:be:cb:52:f2:
4e:06:9a:55:a9:d6:1f:c4:d6:ee:8f:21:da:29:e1:80:34:10:
d3:13:57:f8:7d:35:f7:17:31:31:88:55:8a:4d:1e:20:bf:e5:
71:4d:c6:ea:9a:9e:68:97:80:74:2a:42:2e:77:c6:f9:d1:11:
ef:df:61:d5:a3:6f:fe:17:7e:9c:11:55:4d:06:5a:ad:aa:12:
f9:4d:40:46:66:99:08:8e:8b:97:05:18:46:b9:53:3c:c4:1f:
75:a2:79:37:8e:8a:be:c0:15:2c:e7:90:af:98:23:33:56:e5:
ba:d7:14:55:43:b2:fe:58:4a:a9:c5:d1:45:8c:77:ca:64:8c:
d1:54:c5:b9:2a:a7:8a:1a:8d:71:b1:b7:06:c6:30:9e:06:1f:
56:23:e0:d5:66:df:19:e6:5d:9f:e0:34:b1:9b:c9:3b:f0:13:
2e:00:23:ea:c2:83:f7:fc:b5:dd:ca:57:2d:c7:72:c6:46:91:
ee:e9:28:3a:21:79:f9:36:51:47:72:37:87:a3:28:0c:c7:a2:
98:58:42:ba:06:91:ff:b1:90:ad:dd:94:f9:61:9d:dc:91:e6:
3e:ab:d8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:50:26 2026 by rpki-client