Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
File: y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft (raw, json)
Hash identifier: kFlymNuUiIq6eb0B5QW7nSht70jHUfUMkdWnRTa7o3Q=
Subject key identifier: D5:9A:6A:58:6A:BA:4F:45:35:2E:FB:A5:A9:FA:27:9E:01:FE:17:DE
Authority key identifier: CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C
Certificate issuer: /CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
Certificate serial: 01A18299A2A8E3F14E9413EA4D2BF569A185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
Manifest number: 0463
Signing time: Wed 28 Oct 2026 13:01:09 +0000
Manifest this update: Wed 28 Oct 2026 13:01:09 +0000
Manifest next update: Thu 29 Oct 2026 13:01:09 +0000
Files and hashes: 1: NFcJoTbeoau-evP2UkrkFDUi_S0.asa (hash: c61fPUsVZ7p9Uk03SLvoaO2SkW7N9xFG1W2ccABcLig=)
2: y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl (hash: s9deiVcBGS81ixmxaI1p8VOhM+lroO3FbGXkPyuZpqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:a2:a8:e3:f1:4e:94:13:ea:4d:2b:f5:69:a1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
Validity
Not Before: Oct 28 13:01:09 2026 GMT
Not After : Oct 29 13:01:09 2026 GMT
Subject: CN=d59a6a586aba4f45352efba5a9fa279e01fe17de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:74:14:6d:6b:21:5b:29:c4:98:5e:4f:a3:d4:
89:21:f0:d4:aa:d5:48:6a:42:07:54:b9:cd:9b:5d:
fa:0c:5a:07:20:f4:a9:f2:12:a3:4c:f3:20:15:8b:
8f:a6:48:12:1c:16:bf:c0:25:0e:f4:20:9a:ef:68:
87:88:c1:5d:34:47:f6:0b:c7:dc:4d:cd:fe:a8:17:
08:66:86:0e:7b:dd:c8:85:11:b7:70:6f:14:64:1b:
05:ce:be:42:62:ab:23:3a:bc:79:a4:d6:fd:4b:9a:
bb:7f:de:0a:6e:f6:ee:2e:bb:f4:ff:8c:3d:bc:e3:
5d:e6:7d:21:e9:fb:eb:92:a9:bc:66:3b:a2:1c:6e:
90:b9:44:b3:97:0f:eb:10:a3:fe:60:c0:0f:a2:70:
76:44:47:f9:6a:fe:4f:7f:5d:66:e5:c7:65:57:6c:
fc:3d:df:74:42:19:6e:47:8d:f3:29:5b:22:6e:ac:
55:20:41:8e:b3:51:0b:e9:e4:3c:45:9a:5a:cc:55:
79:4c:3c:0e:96:9e:01:ec:e9:7a:87:ca:c3:da:26:
bb:71:a4:33:52:0f:90:67:ec:5d:35:25:8b:54:27:
d2:5a:22:78:c2:0a:dc:99:4a:48:61:47:76:19:fe:
c1:26:32:54:f8:49:c9:8d:07:41:9c:39:71:52:09:
43:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9A:6A:58:6A:BA:4F:45:35:2E:FB:A5:A9:FA:27:9E:01:FE:17:DE
X509v3 Authority Key Identifier:
keyid:CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:15:1b:c7:4e:29:13:e3:01:af:ea:0a:f0:88:8a:85:4a:50:
af:ce:38:0d:82:70:5a:80:4b:9b:95:5e:2c:d0:4e:70:8c:d6:
a7:a9:df:7f:f8:72:e5:ee:75:09:71:42:d1:76:9e:1c:e5:50:
d1:b0:0c:db:0b:ff:09:bf:a6:e6:fa:34:dd:2f:18:d5:3b:cd:
40:32:1d:b6:ae:75:ef:65:67:a6:5d:ab:53:20:18:f0:5b:09:
24:6f:52:6b:5c:0c:cc:e8:96:f3:98:59:b5:58:68:9a:03:01:
9d:8f:c4:e9:11:77:30:18:63:bf:03:73:a8:bf:2a:80:f3:fe:
60:cd:5c:42:5f:0d:91:e8:05:94:7a:ea:1c:65:e0:c1:59:8e:
0e:68:b2:bc:b8:10:97:ad:cc:e3:bc:6d:0b:d6:ac:36:cb:dd:
c9:d3:e7:48:90:da:5d:49:f4:05:e8:13:a9:ed:20:cc:f6:4f:
6b:9e:57:43:67:17:66:0a:91:3b:ea:81:27:e0:75:d2:e4:d2:
52:d3:22:84:14:1e:ce:0f:df:41:63:a7:39:37:ff:3c:75:92:
85:48:79:e7:eb:02:e5:04:25:6f:46:21:e5:18:a6:6a:94:a3:
4b:d8:f7:be:60:57:46:36:c9:b4:4c:fb:47:e6:7b:fe:25:62:
ad:12:86:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:55:22 2026 by rpki-client