Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
File: y6AXGgLV5KdftAY1VFrgBkyMzK0.mft (raw, json)
Hash identifier: K8WDN6wEPpqG0TsQ9+/+Ccp2MuXh6m3st9F0iYy29Bw=
Subject key identifier: E8:5D:DC:2B:2B:84:34:BD:82:01:D1:59:48:9C:2E:33:1B:2E:49:2C
Authority key identifier: CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
Certificate issuer: /CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Certificate serial: 01A16E3701CD1C8312906B787E3D4E80D6B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
Manifest number: 17CA
Signing time: Sat 24 Oct 2026 14:01:00 +0000
Manifest this update: Sat 24 Oct 2026 14:01:00 +0000
Manifest next update: Sun 25 Oct 2026 14:01:00 +0000
Files and hashes: 1: UxOjp8XUs-Ky59G3Ao0aGxBbUxk.roa (hash: IG/Uj+pARjcg7xsZwOswZLWfcj4Zeh91EtnXY1KelO4=)
2: y6AXGgLV5KdftAY1VFrgBkyMzK0.crl (hash: c3P9lgRYQ23G++EXgtiYAEFI4eYmFqGbb2vzm1ot6nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:37:01:cd:1c:83:12:90:6b:78:7e:3d:4e:80:d6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Validity
Not Before: Oct 24 14:01:00 2026 GMT
Not After : Oct 25 14:01:00 2026 GMT
Subject: CN=e85ddc2b2b8434bd8201d159489c2e331b2e492c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:a9:a3:d5:cc:29:c3:52:aa:2a:19:c0:aa:
37:bb:14:2c:56:d9:8b:eb:13:a3:c1:78:68:2d:9d:
f0:b8:8e:be:21:f7:19:04:fd:3c:9e:b9:91:25:97:
32:41:1d:53:da:94:6f:a4:50:16:e6:8a:1c:bc:2c:
dd:eb:a7:4d:b4:ec:0a:04:1b:6d:ea:1c:55:a3:ce:
8c:44:d6:a2:b7:96:30:8e:cb:28:75:dd:df:5e:5e:
fa:0a:75:14:0a:22:66:c1:d4:03:fe:d5:ac:d8:0a:
cd:3d:2f:b8:b6:c0:3b:93:f2:a1:8c:5f:01:46:71:
66:7b:a5:57:37:0d:f8:0d:4a:8e:5e:7d:38:99:c7:
b9:d4:08:23:72:09:51:c3:73:92:58:81:c6:21:df:
81:50:e4:c9:74:8d:90:ac:ed:d5:43:e1:62:97:db:
b4:dc:8d:0b:df:16:9c:c3:63:9c:1c:31:ad:ba:39:
a4:32:e1:e6:86:93:19:14:27:74:9e:a0:0d:2e:d4:
80:45:fd:f0:6f:39:7c:0d:c0:97:72:13:bd:9f:0b:
04:95:14:d5:dc:23:3d:48:8e:be:c8:1a:56:f7:20:
57:fd:3b:bd:f0:40:05:c0:f0:3d:a5:26:e4:82:d5:
68:26:c2:9d:d3:5b:97:e7:97:e8:17:10:a1:55:a2:
62:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5D:DC:2B:2B:84:34:BD:82:01:D1:59:48:9C:2E:33:1B:2E:49:2C
X509v3 Authority Key Identifier:
keyid:CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ff:63:88:71:ae:b1:d4:8e:23:e0:50:76:b9:d6:dd:81:97:
d4:4d:47:c0:15:c2:19:f5:69:d8:36:4e:4e:ca:4b:ea:eb:8a:
84:e3:dc:4a:b6:05:c9:53:27:c1:d8:43:2e:b2:ca:8d:08:9c:
f5:6c:32:96:6d:6e:ec:0b:c3:6b:76:8c:64:28:ac:6a:c3:7c:
ab:69:82:8e:bc:f5:62:4b:8e:db:e8:2f:ee:7c:2d:93:43:ac:
6f:38:14:35:de:d2:8a:1e:94:8e:02:c6:fc:15:8e:3c:2f:33:
33:8a:55:ca:62:23:1d:ec:fe:db:59:bf:91:10:95:49:19:fc:
15:c4:5b:9f:12:11:cc:65:0d:01:ff:4d:64:06:1d:7e:bc:03:
37:b1:cf:16:45:fb:ad:c4:b2:20:a7:e1:29:80:d3:cd:92:81:
c2:1f:84:1c:71:fc:1c:a6:92:46:ee:e6:66:14:fd:2f:b4:9f:
4c:a7:88:5e:6b:b5:77:da:ee:a5:23:db:92:52:f4:51:9d:66:
53:3d:12:ec:e0:53:ce:fb:ba:68:84:d4:1c:57:97:76:55:a0:
ed:24:81:8f:67:f2:73:a9:29:32:00:b0:cb:4a:43:c4:05:bc:
4e:ec:ef:da:06:a6:e0:ff:04:0a:38:ae:6a:f7:cb:41:62:20:
40:0b:c3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:44:20 2026 by rpki-client