Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
File: Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft (raw, json)
Hash identifier: AbTZfnKh610eNs0ibakv63h54D5+Q8TnH9al6Pb5rB4=
Subject key identifier: 7E:D9:81:01:55:10:66:2B:B1:D2:BB:C3:52:9A:EA:DB:6D:0F:6C:60
Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
Certificate issuer: /CN=6353829c061a8af26de946fc9e81885c74c174c7
Certificate serial: 01A16FEE1BB33C4FD330E595D4986A1450A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
Manifest number: 0CC1
Signing time: Sat 24 Oct 2026 22:00:37 +0000
Manifest this update: Sat 24 Oct 2026 22:00:37 +0000
Manifest next update: Sun 25 Oct 2026 22:00:37 +0000
Files and hashes: 1: Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl (hash: jkPiGv5YEC73f4qmE7p66rh+ARLPdsOtmLZkrKjLIhY=)
2: oVwFkvdTGoRcoIaCVoJWao9067c.roa (hash: mNDuB88yYB2a1hk5GC2+5PKmqMUPggl9sv+jUF9m7GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:ee:1b:b3:3c:4f:d3:30:e5:95:d4:98:6a:14:50:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7
Validity
Not Before: Oct 24 22:00:37 2026 GMT
Not After : Oct 25 22:00:37 2026 GMT
Subject: CN=7ed981015510662bb1d2bbc3529aeadb6d0f6c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b7:01:4a:9f:64:da:93:69:ec:0c:b4:05:98:
27:e9:0b:a8:86:6b:2b:ad:fc:e1:b4:a8:75:a2:e9:
98:d8:54:3f:f4:9e:6d:6e:d5:11:a4:09:4f:22:d7:
a6:fb:34:0d:b6:43:4b:74:b4:dc:1e:9c:0e:51:70:
2d:05:12:61:99:46:e8:1d:5e:0e:d1:7f:50:11:14:
83:99:a6:14:fc:57:03:fc:2e:1f:88:3a:28:f8:38:
29:0a:ec:88:b6:c8:e2:76:42:0f:9e:35:e7:ae:fa:
20:ae:aa:93:28:c9:c7:70:46:da:ce:fd:a5:41:f3:
fb:d2:c8:98:6a:1c:aa:1f:b7:5b:f7:a4:03:e1:9b:
4c:91:c1:53:0b:44:ba:64:c7:2b:9e:b9:f8:52:12:
0c:18:d9:30:64:4f:97:f9:37:8c:5f:54:fd:dc:76:
c3:49:1f:1a:98:fb:0f:2d:15:94:98:98:2b:64:d4:
8d:c9:26:ca:3b:82:8b:81:65:71:6c:43:e6:b1:f4:
51:b3:4e:44:7c:8f:bd:ae:36:e1:37:2e:d5:af:b0:
9b:62:d2:d3:9c:58:5c:81:96:4f:14:cf:7b:84:e8:
20:96:5a:64:76:32:75:c9:09:93:f3:a9:25:9f:22:
5f:07:c5:52:7b:7d:68:84:4d:c6:59:c5:b0:44:2c:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D9:81:01:55:10:66:2B:B1:D2:BB:C3:52:9A:EA:DB:6D:0F:6C:60
X509v3 Authority Key Identifier:
keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9f:67:40:ae:f0:8f:eb:aa:fe:90:7e:33:97:ba:fd:d1:22:
4c:6c:1f:ab:f4:50:6d:07:06:62:35:7c:3b:e3:57:be:33:9e:
75:a7:e7:16:48:e4:a2:64:94:fc:ef:2c:5a:dd:fe:7a:45:58:
ea:c6:d1:6f:07:bf:c1:9c:0c:84:45:f7:b5:0a:7e:ec:15:58:
84:d3:76:7a:c9:41:43:b8:86:ed:e1:74:d6:7f:ae:48:2a:25:
80:c1:c0:77:a4:91:64:8a:15:c2:14:c2:f6:f0:0a:4e:a2:89:
42:e0:0f:35:a9:32:e9:0d:a4:79:22:b4:f1:ec:77:d9:49:48:
16:6d:96:96:e4:42:74:b5:36:48:cf:ef:71:73:8e:9a:cf:ea:
cb:2a:e7:7e:4f:65:f5:9a:45:18:13:ce:09:13:86:0f:5f:ea:
66:dc:1d:b2:57:54:33:5f:7d:24:bc:de:32:2a:8e:b2:4f:86:
e9:d3:85:c2:a5:78:85:4c:54:64:3c:0b:44:84:5f:c2:89:c9:
7f:d0:0a:7d:4b:7d:bb:a9:0b:9a:c0:ad:f5:2e:3d:b2:16:54:
34:d4:3c:8e:27:72:61:08:77:ee:c2:9d:dd:cf:c0:cd:50:4d:
60:85:a1:ab:b1:ab:0e:21:a9:64:87:3b:9a:ff:ff:27:5c:5b:
31:91:48:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFv7huzPE/TMOWV1JhqFFCgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNTM4MjljMDYxYThhZjI2ZGU5NDZmYzllODE4ODVjNzRj
MTc0YzcwHhcNMjYxMDI0MjIwMDM3WhcNMjYxMDI1MjIwMDM3WjAzMTEwLwYDVQQD
Eyg3ZWQ5ODEwMTU1MTA2NjJiYjFkMmJiYzM1MjlhZWFkYjZkMGY2YzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrcBSp9k2pNp7Ay0BZgn6Quohmsr
rfzhtKh1oumY2FQ/9J5tbtURpAlPItem+zQNtkNLdLTcHpwOUXAtBRJhmUboHV4O
0X9QERSDmaYU/FcD/C4fiDoo+DgpCuyItsjidkIPnjXnrvogrqqTKMnHcEbazv2l
QfP70siYahyqH7db96QD4ZtMkcFTC0S6ZMcrnrn4UhIMGNkwZE+X+TeMX1T93HbD
SR8amPsPLRWUmJgrZNSNySbKO4KLgWVxbEPmsfRRs05EfI+9rjbhNy7Vr7CbYtLT
nFhcgZZPFM97hOggllpkdjJ1yQmT86klnyJfB8VSe31ohE3GWcWwRCzgcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7ZgQFVEGYrsdK7w1Ka6tttD2xgMB8GA1UdIwQY
MBaAFGNTgpwGGorybelG/J6BiFx0wXTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTFPQ25BWWFpdkp0NlViOG5vR0lYSFRCZE1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84Y2Y5NjItMDc0Zi00MWFjLWFlMmEt
ODE2MjAzZDIxZDEyLzEvWTFPQ25BWWFpdkp0NlViOG5vR0lYSFRCZE1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS84Y2Y5NjItMDc0Zi00MWFjLWFlMmEtODE2MjAzZDIxZDEy
LzEvWTFPQ25BWWFpdkp0NlViOG5vR0lYSFRCZE1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZ9nQK7w
j+uq/pB+M5e6/dEiTGwfq/RQbQcGYjV8O+NXvjOedafnFkjkomSU/O8sWt3+ekVY
6sbRbwe/wZwMhEX3tQp+7BVYhNN2eslBQ7iG7eF01n+uSColgMHAd6SRZIoVwhTC
9vAKTqKJQuAPNaky6Q2keSK08ex32UlIFm2WluRCdLU2SM/vcXOOms/qyyrnfk9l
9ZpFGBPOCROGD1/qZtwdsldUM199JLzeMiqOsk+G6dOFwqV4hUxUZDwLRIRfwonJ
f9AKfUt9u6kLmsCt9S49shZUNNQ8jidyYQh37sKd3c/AzVBNYIWhq7GrDiGpZIc7
mv//J1xbMZFIQA==
-----END CERTIFICATE-----
Generated at Sun Oct 25 00:31:54 2026 by rpki-client