Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
File: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft (raw, json)
Hash identifier: lS+0Ck9DnOTkIk8urySIenXxywEskY133ks8/fXXwec=
Subject key identifier: 3A:19:A2:63:3A:85:62:AB:10:A6:F8:36:00:D4:19:38:F2:65:03:B3
Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
Certificate issuer: /CN=63b147f67e8795d959ed3530396d1256055b126e
Certificate serial: 01A152BF897CB4CC52E48618FB8816FDE3AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
Manifest number: 084A
Signing time: Mon 19 Oct 2026 06:00:46 +0000
Manifest this update: Mon 19 Oct 2026 06:00:46 +0000
Manifest next update: Tue 20 Oct 2026 06:00:46 +0000
Files and hashes: 1: Jg9UXomR67ddbwvE12iwfmdXVUY.roa (hash: erQTlvEuRH+/RugmpxhUl/Z+VWvMHHjTv7sIc+sSjyw=)
2: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl (hash: r4wrmyxrFbtLRkOvsgTPLqea2CbLeO0WayRMx7DF5lo=)
3: uzGW5yZkWFK7XwuN3EgcKBBBYVY.roa (hash: iqNkpecefxjLtGeufMCzfpSJbAjOStGnY7fR2gXa7Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:bf:89:7c:b4:cc:52:e4:86:18:fb:88:16:fd:e3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e
Validity
Not Before: Oct 19 06:00:46 2026 GMT
Not After : Oct 20 06:00:46 2026 GMT
Subject: CN=3a19a2633a8562ab10a6f83600d41938f26503b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:32:89:6a:90:7b:69:dd:43:30:4c:5c:e3:
8f:ec:7d:88:19:d5:2d:4b:19:8b:ac:dd:ca:ae:73:
9d:41:fe:80:5c:5c:61:aa:ac:9d:74:68:0c:15:9f:
4b:5d:89:3d:3c:3c:ec:7e:67:07:6f:7a:b4:41:b5:
4a:75:db:48:9a:6b:d4:5a:27:0c:64:c2:14:aa:86:
2b:fa:08:93:29:9a:62:18:69:31:cd:89:7d:10:43:
1f:29:1b:47:39:6b:7e:33:bb:ce:9a:e3:8a:50:1c:
db:98:48:d6:34:d3:5a:df:eb:3d:af:38:f3:41:35:
0f:2b:71:30:0e:ed:5b:f4:7d:ec:03:5d:00:fb:d4:
ba:0d:60:e5:db:c1:ed:07:37:d1:86:a2:76:00:ed:
0c:b8:6e:5f:5c:f9:04:17:82:8e:a5:9b:55:c4:e7:
c3:fe:ad:f9:44:5d:04:8a:4b:44:6a:ed:de:78:b8:
a8:8d:00:01:31:5f:1d:70:ac:97:83:3c:2f:a6:1e:
a5:6c:65:42:3f:86:8a:fa:6e:56:46:7e:78:09:7c:
be:95:d7:89:06:09:ec:2d:18:6b:3e:ec:2b:fa:5c:
00:72:0d:1f:33:d8:03:30:84:1d:f6:af:b8:26:17:
f9:3f:7e:e4:e6:3b:3a:c1:60:1d:c1:f1:d6:5e:1f:
cf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:19:A2:63:3A:85:62:AB:10:A6:F8:36:00:D4:19:38:F2:65:03:B3
X509v3 Authority Key Identifier:
keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ed:d7:1a:d8:c8:ec:10:42:15:42:1e:96:0f:32:fa:92:87:
64:e9:51:31:ea:7b:15:be:bb:14:b6:5c:21:60:bb:51:3f:14:
86:b7:25:61:c5:1f:d8:b4:2e:31:55:2f:37:16:76:a1:7e:cf:
68:74:4b:95:24:a4:d5:ed:e2:95:c5:ba:0f:b8:08:5a:98:9f:
3d:41:7e:73:df:f6:ed:6d:14:aa:1f:b8:20:6d:a7:d1:8b:a0:
1d:84:99:2c:34:f8:fd:fc:5c:89:41:4a:1f:b0:60:27:5a:49:
5a:a2:59:24:e3:ff:9b:5a:2f:78:10:3b:69:37:52:39:61:27:
a3:f9:27:92:2a:83:29:b9:7f:90:e0:d3:a0:ee:6f:02:0e:54:
0c:0b:c3:8a:ba:91:8c:e8:42:b7:da:61:a3:5e:a4:62:0a:b1:
25:cd:35:4f:6d:3e:a3:1a:42:c3:62:63:3d:8b:8d:98:e4:2e:
f1:9d:b2:5d:76:76:f0:bc:3c:dc:07:8a:82:f0:94:a8:0c:db:
9f:eb:16:f7:e6:a9:48:a6:2a:6c:5d:62:38:29:8f:e6:32:4a:
f5:6e:98:49:09:4d:a9:7e:3d:ad:75:6a:d3:eb:41:89:e7:d0:
9e:f5:df:c6:1d:89:ac:cc:16:52:a4:19:d6:f4:9d:80:ba:b0:
8d:68:6c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:56:56 2026 by rpki-client