Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
File: Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft (raw, json)
Hash identifier: d8mes61lRWdIf8bZKie5ND7C5xFxeF3QmVg/16eev60=
Subject key identifier: 60:DE:41:3F:2C:61:03:F6:A0:5B:7B:0F:20:CB:AC:3A:92:A7:B2:18
Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
Certificate issuer: /CN=6353829c061a8af26de946fc9e81885c74c174c7
Certificate serial: 01A16A2388E6AFE4AFA561EC37E207146415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
Manifest number: 0CBE
Signing time: Fri 23 Oct 2026 19:01:16 +0000
Manifest this update: Fri 23 Oct 2026 19:01:16 +0000
Manifest next update: Sat 24 Oct 2026 19:01:16 +0000
Files and hashes: 1: Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl (hash: F1N9jhf0Tv/TTMqV+TAQWbyfWEUOFV7q2xcWPuIEmrM=)
2: oVwFkvdTGoRcoIaCVoJWao9067c.roa (hash: mNDuB88yYB2a1hk5GC2+5PKmqMUPggl9sv+jUF9m7GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:23:88:e6:af:e4:af:a5:61:ec:37:e2:07:14:64:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7
Validity
Not Before: Oct 23 19:01:16 2026 GMT
Not After : Oct 24 19:01:16 2026 GMT
Subject: CN=60de413f2c6103f6a05b7b0f20cbac3a92a7b218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:65:3a:28:25:0c:ad:96:bc:5a:51:be:80:
ce:af:b5:85:28:b1:ed:f5:4a:05:ec:20:89:17:fe:
98:82:89:70:6b:ab:93:07:84:48:5d:0e:11:ff:b2:
68:8b:81:1d:93:5e:b8:bf:2a:9f:43:d1:f7:17:a5:
aa:14:5d:51:3d:bd:5c:b1:3d:92:9a:2a:d4:2d:4e:
1b:83:e4:09:cf:3a:56:ab:2d:42:3a:a0:83:ff:d5:
eb:54:0d:57:8d:b3:5a:33:94:cb:7f:52:a7:80:fd:
53:b1:4e:96:42:cc:9a:d3:a2:3c:cc:54:f9:3f:67:
de:f8:0c:d8:39:6d:6b:9f:7a:41:bf:81:9c:7d:05:
5a:b1:f1:63:bb:f3:86:4d:ac:4c:76:96:90:05:6a:
a4:3f:d7:02:b4:1f:98:e8:cf:c1:f1:28:8c:72:c6:
a1:eb:dc:04:43:1b:5a:19:8d:90:4b:a5:7a:c3:21:
81:20:a5:07:da:aa:cc:91:3b:fb:7d:2f:0a:8f:36:
24:f7:ba:52:7a:1c:9d:d9:21:90:24:35:44:45:0c:
a9:53:ee:36:4d:90:67:d1:bc:b0:c2:1a:c9:e2:06:
55:84:3f:92:d7:ec:32:ee:7e:99:1e:dd:e6:4f:ed:
95:b2:31:f8:87:51:d2:f1:45:90:e9:2e:a6:2e:97:
c6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DE:41:3F:2C:61:03:F6:A0:5B:7B:0F:20:CB:AC:3A:92:A7:B2:18
X509v3 Authority Key Identifier:
keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:91:aa:a0:f2:35:9f:9c:0d:7b:5f:ef:63:e1:d5:48:3e:ed:
05:db:17:d9:fa:7c:97:99:e9:ed:69:98:8a:08:af:04:c2:8c:
39:b0:2a:51:7e:7b:36:56:17:4a:04:52:91:dd:54:f3:57:d1:
38:a5:ef:8d:6f:18:6e:63:3a:50:c3:ac:c2:82:51:46:bd:e4:
47:0f:d2:64:df:cf:07:74:59:09:62:32:97:e7:d2:6c:e4:1f:
c7:f9:d3:62:92:df:62:02:8c:dd:dc:0e:d5:36:42:4c:ca:16:
6a:47:05:73:b1:f4:86:e8:a0:fe:09:d3:66:95:6e:54:54:d4:
cb:8e:df:62:f4:2c:46:41:86:39:50:ba:aa:5c:51:f3:11:28:
14:b7:57:5d:b9:70:5a:4f:b9:0b:28:cd:77:77:35:f5:73:a3:
e4:fb:0c:c4:28:ae:7f:19:57:d8:1a:59:a2:28:14:01:a2:c6:
6f:fd:52:ba:0e:b1:88:0c:71:1f:38:52:57:1b:b3:af:66:69:
a4:a9:50:39:95:f4:2d:4d:e2:5a:02:96:a9:84:a5:e5:4b:30:
dc:fe:3e:c4:c5:6a:c6:56:b5:c7:2c:a7:e3:82:13:93:d6:c1:
2a:0a:12:e4:77:30:db:c1:d0:b0:83:6e:92:1d:64:fb:e7:3c:
0e:87:14:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:51:36 2026 by rpki-client