Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier: m9X1taj/cJb8Nj1FXEQy1jVSAKTYMfn7ks4O/OCEb8Y=
Subject key identifier: DD:7D:7B:E3:AA:FA:82:2E:3C:E4:65:F5:BF:8B:D3:98:00:0B:23:17
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial: 01A1773A48C088BE755DDC16AA28B9548694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number: 1ACB
Signing time: Mon 26 Oct 2026 08:01:10 +0000
Manifest this update: Mon 26 Oct 2026 08:01:10 +0000
Manifest next update: Tue 27 Oct 2026 08:01:10 +0000
Files and hashes: 1: XZ3sAdabDoOYfBZeEJolsMalQgs.asa (hash: XHuxusmmi3am2aFGs60mmc2MCFL+zmd66reyxUPLwTI=)
2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: GScgGnb3sUpYck9jl8aKbvklBKGML50dUMBXR86571M=)
3: nibctkm7wr91rBA37l_8PQxYVLc.roa (hash: VamjklOdSeVjkVgODzUFUtdlbnnylLnD0/pDvfa31T8=)
4: t8mVoTfmckCvsyVdwBCx2WY3_SU.roa (hash: punRHqDIXE83AX4muw8qvjP6n1JcfvmchVlgv85rsL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:3a:48:c0:88:be:75:5d:dc:16:aa:28:b9:54:86:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Validity
Not Before: Oct 26 08:01:10 2026 GMT
Not After : Oct 27 08:01:10 2026 GMT
Subject: CN=dd7d7be3aafa822e3ce465f5bf8bd398000b2317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:a1:25:8c:ad:9f:7b:44:44:87:71:c7:2a:
2b:66:00:f8:58:0d:90:51:09:7f:0e:ca:f6:3f:15:
95:39:90:64:40:da:86:20:ae:ba:c9:1e:61:bb:7d:
f5:c0:86:99:a2:c4:00:a7:27:bc:05:2e:b4:0f:a9:
0b:93:cc:73:9c:81:97:52:18:02:59:21:34:40:3e:
59:d3:2d:cf:2c:89:2b:5a:0a:f1:19:e6:9a:42:45:
2f:c3:9f:52:8d:92:c7:2b:b5:ca:72:42:b4:71:dd:
5b:85:88:e9:7d:2e:23:07:d9:0d:18:b8:3d:bd:94:
55:b7:d5:de:c8:6c:22:54:39:aa:cd:7b:ba:23:83:
ce:cf:03:f4:47:12:ac:5b:6d:d7:54:56:8e:2b:0b:
f0:80:f3:15:1b:99:84:59:ee:7d:f8:38:60:73:1a:
8f:41:fa:5f:ff:26:55:46:ab:4e:f1:c9:28:ee:55:
69:43:69:f3:69:2b:0a:71:6b:02:84:d8:ae:b5:17:
5a:f0:0b:de:29:cb:fd:5b:a5:ba:4e:f3:59:fe:29:
41:3a:04:ab:46:13:7e:b2:b6:70:01:37:db:ce:ae:
0e:79:dc:57:18:ce:b8:3b:68:2a:18:f5:14:4d:c4:
7f:78:8c:4c:a2:7e:9f:74:2c:bb:4c:30:b6:d0:e3:
dc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7D:7B:E3:AA:FA:82:2E:3C:E4:65:F5:BF:8B:D3:98:00:0B:23:17
X509v3 Authority Key Identifier:
keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:92:82:c7:5f:41:95:69:61:70:e5:9d:3e:8b:d5:c5:d5:f9:
a0:c9:c0:f9:12:ea:70:f7:ae:9b:50:56:5c:fe:4b:7a:84:ea:
ac:e6:95:f3:ee:8a:56:86:81:e8:7a:53:02:4b:04:5a:af:b8:
30:95:91:9f:54:6b:a7:17:1c:37:1c:12:43:9f:97:d1:fd:9f:
70:1b:50:93:63:4d:ac:1d:18:87:3c:fa:50:22:b4:cf:f9:2b:
d6:ec:e6:42:0d:5b:b4:be:7d:3d:05:25:1f:07:5b:53:14:04:
f7:1a:17:c5:10:47:c6:29:e0:9a:11:f2:16:63:f8:76:36:ab:
20:7c:63:0d:94:87:18:30:5f:8e:ea:b6:57:97:9b:2e:75:86:
8d:17:3f:3e:1b:ac:6c:b6:58:6a:aa:7c:78:38:12:0b:b9:20:
07:13:ab:19:00:7c:a2:e4:3a:d2:97:8b:16:58:5f:eb:87:78:
78:65:25:9b:80:c4:78:8b:cb:14:9e:88:b8:64:ee:bd:89:43:
ee:77:6d:ee:79:3b:18:4b:ad:27:49:a2:92:8e:b7:4f:c7:70:
82:b1:d9:3f:55:d5:71:29:8a:46:71:c4:01:d0:46:a2:96:02:
fd:d4:95:d7:58:43:69:3a:52:bf:f6:99:37:92:ab:de:e8:b7:
f0:48:b8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:50 2026 by rpki-client