Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
File: YDgxphvIqPTLhYhwIvtvhjlzRdw.mft (raw, json)
Hash identifier: TgwL4pVADbO88/sjQXGXcduVcpSWDosdx+d306EIkX8=
Subject key identifier: E4:A8:82:39:8D:FC:5B:5A:16:65:59:61:A2:55:03:03:59:BB:CE:9B
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Certificate issuer: /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial: 01A181191CEFDFBEBD40F4F920F997AD049D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
Manifest number: 11DA
Signing time: Wed 28 Oct 2026 06:01:09 +0000
Manifest this update: Wed 28 Oct 2026 06:01:09 +0000
Manifest next update: Thu 29 Oct 2026 06:01:09 +0000
Files and hashes: 1: PItnMttIkdeuTPXavmvPG7wEEmg.roa (hash: g8vhWp9yKKoH5MZ8w1k35uUTgUFMBWzylaX6sR0nuqk=)
2: Y5fNbXlu-919bEGmzzCTqLKe4UE.roa (hash: Xsn3mIF6IxJP4Pj8lk0nwBSrm5qnIHW3nv1qCBDI+Z4=)
3: YDgxphvIqPTLhYhwIvtvhjlzRdw.crl (hash: PnCbLwN7o0L8c1nPBAD4IUFugN6VhqfGnPZi/REMAVY=)
4: iReKhZ_-E04pzg8ir_i-KAVJTug.roa (hash: JcLEmoPP4jSyDJ+Og5UHxUBX28l4cJMP5KxpG/1AnsE=)
5: nUQG3vVMD7WFpDWiG0W1IymBVlU.roa (hash: EHlmhx+RyBOq9teHa0Af8FNOADjMaSQN2EK+hlsZ4oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:19:1c:ef:df:be:bd:40:f4:f9:20:f9:97:ad:04:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Validity
Not Before: Oct 28 06:01:09 2026 GMT
Not After : Oct 29 06:01:09 2026 GMT
Subject: CN=e4a882398dfc5b5a16655961a255030359bbce9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:7c:20:35:9a:c3:03:e6:d6:8a:b6:78:1a:
2d:d6:f2:0d:25:e1:07:87:c1:8a:54:3d:7c:a7:1d:
a6:a8:c0:4a:80:0f:c4:26:8b:26:26:46:af:34:17:
8c:25:fc:18:92:f7:40:9b:bd:6c:1f:fb:17:4d:69:
a6:fa:ef:c6:21:54:c3:5a:25:a8:fd:fb:86:ea:df:
6c:0b:70:61:80:7b:0f:d6:e5:01:03:d6:a9:4a:2c:
f6:24:97:a5:1b:e3:b4:71:fd:17:c1:8a:a1:ef:90:
10:a9:f0:e2:d0:b7:3c:b0:0f:7d:76:ae:dd:91:64:
4b:47:83:a6:38:a8:be:38:25:88:42:c6:bc:fb:8d:
59:c4:4e:d9:c9:53:d8:d8:62:c7:64:b0:59:2b:02:
44:9c:d0:c1:74:2b:57:e1:73:8d:bd:87:3f:63:40:
87:ad:47:b7:a2:12:36:86:1e:1f:c6:da:d2:18:e7:
13:c6:81:1e:d4:5d:8d:10:b8:1d:8e:6b:6c:e6:e9:
28:da:9c:ef:6b:1a:06:ba:d8:ad:b3:ea:8c:6b:f1:
75:26:18:94:2b:c4:6d:28:fa:ad:d0:34:83:d5:20:
a7:27:19:65:1c:4f:63:0e:ff:9c:ba:85:9d:52:4a:
28:0a:f8:9d:e5:fa:4a:40:09:5d:ee:d8:11:ac:fd:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A8:82:39:8D:FC:5B:5A:16:65:59:61:A2:55:03:03:59:BB:CE:9B
X509v3 Authority Key Identifier:
keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cf:e3:13:e8:5a:71:e7:a7:bc:6f:2b:25:7e:a3:f7:4f:8a:
33:36:04:62:fd:13:43:32:1d:3e:bc:17:98:e0:ec:b6:84:fa:
4a:cc:ba:59:8e:c3:57:68:90:7f:44:3b:54:8f:06:d2:c6:ac:
4c:f6:2d:86:f2:51:41:97:ea:a2:3d:fc:56:9e:b6:ff:d3:b3:
ac:dd:1d:4e:36:f5:6e:a0:38:f5:f5:4b:05:dd:e7:93:f8:99:
5b:31:ca:29:02:cc:83:ff:60:4f:72:f6:bb:c6:22:6f:ca:37:
78:f5:2f:30:a9:3a:50:97:95:26:97:71:93:21:8f:c4:dc:14:
90:94:ea:9d:25:9a:3d:8b:41:c6:9d:9a:20:9e:3f:50:85:0f:
be:f0:43:22:3f:ec:10:77:08:fc:43:20:27:d9:9a:bb:95:9e:
57:fe:d6:0c:86:db:9a:5e:25:bd:7d:14:f5:21:89:ad:8d:75:
47:91:ee:4a:91:17:fc:32:0b:1a:62:cf:8b:86:28:6d:1d:d7:
91:00:ac:a8:fc:3d:3c:b9:f5:54:b9:6c:a9:f3:65:17:9a:3c:
44:d4:49:7a:fb:2e:17:63:f9:aa:68:35:fe:97:b7:e4:1a:b0:
ff:e0:5e:e0:5e:c3:6b:7b:15:73:7f:11:5e:ba:50:2f:c4:6b:
6a:77:fc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:33:18 2026 by rpki-client