Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
File: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft (raw, json)
Hash identifier: jpSpNabtSC7It8qIHNrbv2lDlg7BwUGJdtLvrMx/y2k=
Subject key identifier: C0:10:BD:38:5C:9E:FE:33:9E:7D:37:B6:0C:69:D2:97:60:01:86:4B
Authority key identifier: 63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
Certificate issuer: /CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Certificate serial: 01A150D15808F047A8D5BB13AF569528C748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
Manifest number: 1091
Signing time: Sun 18 Oct 2026 21:00:58 +0000
Manifest this update: Sun 18 Oct 2026 21:00:58 +0000
Manifest next update: Mon 19 Oct 2026 21:00:58 +0000
Files and hashes: 1: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl (hash: 3M4r4MmNL/WZQNqyconY9Iw9j70WqF1jzDLCoUE3Coc=)
2: aRuatR-K8nQ9ZXL9FpjwSLceO4A.roa (hash: Vt5YWGyW9wbAPKP7kNgM97gFfWqXrRoxA2e6gMj6LNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:d1:58:08:f0:47:a8:d5:bb:13:af:56:95:28:c7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Validity
Not Before: Oct 18 21:00:58 2026 GMT
Not After : Oct 19 21:00:58 2026 GMT
Subject: CN=c010bd385c9efe339e7d37b60c69d2976001864b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c5:95:df:2d:fd:a5:8b:67:4e:38:fe:35:d2:
2b:51:f4:38:88:3e:ec:48:c6:78:1d:5e:61:59:1a:
a7:2e:a9:77:8e:83:1a:4f:c3:cd:33:33:b7:4a:85:
8b:27:bf:73:88:27:e3:a7:91:07:aa:32:fe:2a:63:
21:24:d2:86:98:3e:d1:0c:d0:fd:1f:dc:ab:6a:df:
08:3e:77:38:a9:f4:87:22:01:4f:55:4a:ff:18:bb:
8e:a0:4e:e9:14:66:3f:ea:e0:6e:09:27:4b:1e:28:
7a:51:00:2e:61:29:e0:d0:49:11:4e:87:7e:8b:59:
75:48:18:22:16:50:c3:2e:3c:76:2f:79:9e:cf:f7:
58:43:89:46:85:06:0f:a6:f8:05:b3:24:94:69:ae:
7b:a3:18:26:76:5d:3d:6b:7e:57:4d:8e:df:3a:93:
81:07:7d:e6:7c:56:b3:78:7b:09:9f:1a:96:da:61:
f5:46:69:79:37:20:25:0f:67:39:8c:29:52:d3:9a:
43:0b:55:88:b9:fe:51:be:eb:dd:7f:f4:16:ec:82:
8a:70:2f:1e:cc:04:f5:67:9b:5a:78:2b:b8:26:6e:
ae:72:0e:49:f7:f1:c2:62:6c:78:d1:83:18:4e:a2:
9e:47:41:93:b1:1a:2c:00:71:a3:a3:54:30:be:7b:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:10:BD:38:5C:9E:FE:33:9E:7D:37:B6:0C:69:D2:97:60:01:86:4B
X509v3 Authority Key Identifier:
keyid:63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:46:c0:35:24:a5:c8:4a:cc:42:8a:2a:3c:bd:cb:2d:cf:53:
ed:ff:6f:5a:4e:f5:de:86:9b:be:34:5b:aa:26:b5:8c:17:d0:
24:bd:0c:ef:da:ed:a7:e2:ff:d7:6b:7e:65:61:75:7e:0f:45:
2e:8b:e3:6f:e3:9f:23:78:86:36:48:4a:b3:c5:41:75:a6:96:
e8:12:36:7a:82:90:a6:34:97:92:83:fa:fd:37:c9:c3:30:c1:
b5:bc:f1:6f:95:2b:e0:90:b6:68:8d:24:97:47:bc:86:4e:3f:
a1:43:e5:ca:a6:53:e1:96:52:8a:2e:b0:8f:ea:61:27:73:37:
ac:31:8e:9d:5a:b7:31:9e:56:85:ae:3b:9e:2c:8b:a4:07:2f:
9b:18:38:42:1e:c4:d6:c8:ec:ba:83:02:2b:f0:37:a5:3c:51:
17:bc:d4:2b:a7:c6:7e:32:7d:99:61:e3:aa:7b:17:79:43:4b:
c7:76:14:d1:66:9a:00:cd:8b:e9:70:85:cc:d0:cb:4f:6f:32:
4f:12:3e:31:06:82:8e:7d:fa:bd:4d:23:75:03:75:8d:70:81:
c1:ee:0c:c2:6f:5f:9c:46:39:e4:3e:47:47:b9:ed:9d:0c:0a:
d4:da:5c:8d:ef:1a:b9:86:4a:60:1d:37:b7:b5:ae:b0:f5:ae:
40:c2:04:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 01:45:37 2026 by rpki-client