Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
File: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft (raw, json)
Hash identifier: +KyPnLp/fSYjU/KOqXPOp8ZhdlACzSaYxqCv3VO5NnA=
Subject key identifier: 27:E7:B3:11:54:33:63:0A:6D:B0:53:3C:8D:A9:BC:2E:54:15:DE:85
Authority key identifier: 63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
Certificate issuer: /CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Certificate serial: 01A1569CF3C1A1ED1D42867C052B0055C562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
Manifest number: 1094
Signing time: Tue 20 Oct 2026 00:01:28 +0000
Manifest this update: Tue 20 Oct 2026 00:01:28 +0000
Manifest next update: Wed 21 Oct 2026 00:01:28 +0000
Files and hashes: 1: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl (hash: hk89Wx3Be2fEDQHjXhMiwjlhApzRdNZ+mTdq/ZHUdO4=)
2: aRuatR-K8nQ9ZXL9FpjwSLceO4A.roa (hash: Vt5YWGyW9wbAPKP7kNgM97gFfWqXrRoxA2e6gMj6LNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:9c:f3:c1:a1:ed:1d:42:86:7c:05:2b:00:55:c5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Validity
Not Before: Oct 20 00:01:28 2026 GMT
Not After : Oct 21 00:01:28 2026 GMT
Subject: CN=27e7b3115433630a6db0533c8da9bc2e5415de85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:d5:23:19:f5:ac:73:88:f0:1d:9c:40:d3:
98:29:51:71:b6:11:cd:cd:e4:6c:37:3e:30:2d:66:
f5:d7:b0:77:91:5b:8e:b2:95:dc:1b:4d:16:af:fa:
c3:a2:d4:d4:a0:5a:28:3a:f1:cd:9f:f9:b6:13:af:
48:4e:73:b2:1a:50:ac:4c:c4:cd:7c:db:ab:68:22:
0b:da:c2:b0:2f:4e:49:39:eb:5a:ce:18:fb:04:a1:
76:f6:3d:35:f8:4f:3d:87:77:d5:b4:10:42:48:f7:
a8:c6:6c:fe:09:5d:a3:32:76:9a:e6:b1:eb:63:b4:
47:70:bb:fa:9d:75:92:d2:ff:19:b0:0b:1e:ec:ff:
0a:21:a9:44:a3:b4:2f:89:b5:f1:73:e0:fc:47:b6:
66:4d:a7:fc:45:59:90:37:26:88:54:fc:9f:59:71:
ee:80:f3:49:cc:00:53:6d:e0:71:5b:28:d1:cf:b6:
d5:26:7d:b7:9f:8c:4d:52:80:03:92:c4:b9:56:25:
16:7f:05:ee:28:32:d5:26:d2:74:e3:9c:ec:e6:3c:
06:25:c0:0e:76:54:36:1f:88:d2:80:60:c4:7c:41:
fb:d4:6b:b7:4b:c0:39:97:41:08:43:33:16:bc:57:
97:8b:96:d1:e2:fc:bf:10:c5:9b:11:61:e2:b2:cf:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E7:B3:11:54:33:63:0A:6D:B0:53:3C:8D:A9:BC:2E:54:15:DE:85
X509v3 Authority Key Identifier:
keyid:63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e7:14:7e:92:21:70:10:bc:3b:15:6b:26:fa:2b:d7:7c:1b:
f4:b1:14:ee:84:ac:6d:1b:21:67:3c:da:92:d0:b1:22:1a:50:
4f:4d:d5:8f:71:00:50:56:26:55:7e:58:83:7f:9d:58:09:2f:
3e:09:08:45:8a:8c:b3:dc:40:67:21:b7:a2:05:40:b7:59:8e:
b4:88:dc:86:d1:e9:eb:11:ff:35:29:e1:c9:49:ba:09:9e:d3:
ce:f2:68:7b:40:78:de:ab:a6:e1:42:24:f6:31:f5:5e:d5:6c:
4a:26:e0:07:89:33:30:c3:02:30:fb:87:ac:cc:e8:74:55:18:
11:a0:31:8d:f8:9a:40:f3:1e:13:ad:4e:b0:3c:2a:87:4c:0f:
df:71:f3:f5:0e:16:63:4f:05:f7:86:39:bd:9f:b7:a2:e0:7e:
f3:fb:ae:b5:c6:ae:6f:ae:01:22:f6:90:81:88:7b:db:c3:90:
46:70:98:16:2d:3a:b1:a4:2a:fd:b6:41:c4:83:fd:38:c9:73:
ff:35:64:4b:18:bf:f3:24:34:0a:59:c4:07:f0:22:76:d2:78:
64:87:c8:b6:ab:d4:a2:c9:ca:6c:86:87:53:80:f1:83:76:26:
36:28:32:35:a7:6a:82:f7:06:79:c5:c5:15:da:a3:94:1c:cd:
b5:47:4f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 09:11:27 2026 by rpki-client