Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
File: y5idLhUgGyDjQIjdHARVslRE-Pw.mft (raw, json)
Hash identifier: eBoqY7i1kYLZPvXxGTJT98dOrA162bf/hm+2gLSvAIo=
Subject key identifier: 80:0B:17:05:6D:4E:B7:23:D8:0D:24:68:80:F4:20:88:0D:DA:3C:AF
Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Certificate serial: 01A17C296E98FB6A57B82A33FF079E8299D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
Manifest number: 10FE
Signing time: Tue 27 Oct 2026 07:00:52 +0000
Manifest this update: Tue 27 Oct 2026 07:00:52 +0000
Manifest next update: Wed 28 Oct 2026 07:00:52 +0000
Files and hashes: 1: H7NifDoSU6PPqAYGiGzy4_-XfNw.roa (hash: sk5Lex95/S0IAQQhow818tnsCZwdWLab0EALvw3QhYw=)
2: y5idLhUgGyDjQIjdHARVslRE-Pw.crl (hash: AsNQoJ8sI+RXufYvq8XJvWPQ3c7QCV7OuR6CPs1lWPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:6e:98:fb:6a:57:b8:2a:33:ff:07:9e:82:99:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Validity
Not Before: Oct 27 07:00:52 2026 GMT
Not After : Oct 28 07:00:52 2026 GMT
Subject: CN=800b17056d4eb723d80d246880f420880dda3caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:e2:9c:f5:05:9e:0d:a6:0a:61:74:72:22:
35:70:fc:89:27:50:a3:c4:6f:1f:da:d9:3a:c6:be:
44:11:60:a4:bc:97:78:d3:50:2e:ac:f0:d9:2f:e5:
84:ee:a9:98:08:39:3f:22:e0:67:32:d9:43:67:4f:
59:fa:fe:93:ca:4e:45:1a:0c:79:b3:99:8e:d9:b6:
23:dd:3b:c1:4b:c1:ad:60:43:2a:ef:3b:28:c1:58:
9d:cc:d1:16:83:7e:57:5b:84:1b:98:e6:d3:1b:57:
5d:44:c0:cb:ef:e7:de:38:6d:1b:a9:e6:73:21:d8:
39:bc:e7:39:31:9d:00:b6:a0:ce:df:a7:dc:f6:f4:
2e:20:75:b0:0d:06:42:ae:ac:e5:a1:b4:59:f1:78:
fb:32:e0:0b:72:95:cb:df:ff:ce:a7:a9:8a:65:21:
52:7c:19:cb:3c:71:76:13:dc:c4:1b:b1:0c:c0:a5:
e1:13:d8:39:3d:0e:e8:07:1d:32:b7:9c:bb:fa:3e:
57:78:ba:11:75:a8:6a:96:67:7f:5a:a0:7f:22:1b:
6a:bb:fc:8f:8f:3e:93:7d:1f:6f:8e:22:05:fa:61:
1b:d3:c6:a0:e7:de:b4:75:73:25:fb:d0:d8:f4:96:
3a:82:2c:a4:87:38:f5:ae:c4:3d:bb:12:4e:dd:6a:
92:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0B:17:05:6D:4E:B7:23:D8:0D:24:68:80:F4:20:88:0D:DA:3C:AF
X509v3 Authority Key Identifier:
keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:32:62:94:a1:31:c0:b4:72:48:9f:2e:0f:c3:e2:54:37:2d:
27:68:b5:34:25:c3:0e:5b:84:87:2c:29:29:14:e8:b8:b0:fd:
42:04:3f:b8:76:78:6d:6b:62:65:92:05:26:d4:6c:7c:d2:a0:
09:37:95:c7:d9:3c:7d:0e:14:30:56:7f:ac:70:ea:42:0a:aa:
a0:71:ca:4e:a5:a9:b4:42:1d:d9:c7:0b:d3:30:3e:11:7d:fd:
db:0a:49:a3:13:32:96:d4:8d:17:cc:06:36:52:29:dd:c6:44:
46:35:1d:ee:b7:97:29:af:4a:65:27:94:b6:a6:64:c9:e2:c9:
a3:27:7c:7e:07:0a:3b:2d:38:f5:fd:a4:9e:74:bb:9b:92:17:
be:6a:31:f5:b3:7d:43:c6:58:47:1f:42:42:c2:aa:74:4b:a9:
d3:ff:5a:9a:81:13:65:a4:85:a5:ff:fd:40:cd:41:7a:25:e1:
22:8f:ea:9a:f0:6d:05:37:92:4b:27:39:ae:2a:8b:34:98:6f:
19:33:d6:2d:50:6c:1f:29:6c:71:3c:8f:98:b7:8d:38:6b:73:
b8:93:bd:42:71:fe:a9:9f:98:6f:58:36:3f:f4:c9:83:c7:e8:
e8:9e:e0:77:f8:b1:0d:fa:b7:99:12:8f:02:b4:85:5a:f4:9e:
99:b7:19:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:21:51 2026 by rpki-client