Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.mft
File: cY8X5M-zOCFiHxzRsQB6tS0Tcuk.mft (raw, json)
Hash identifier: pF+r8CZPZq9GUoZUSTmIBdmmVu4xZiOAJ148K3R0k6E=
Subject key identifier: 43:89:59:53:F0:46:C2:E8:93:CD:D6:F7:5C:C2:F2:70:89:ED:4F:C6
Authority key identifier: 71:8F:17:E4:CF:B3:38:21:62:1F:1C:D1:B1:00:7A:B5:2D:13:72:E9
Certificate issuer: /CN=718f17e4cfb33821621f1cd1b1007ab52d1372e9
Certificate serial: 01A116055BB5B8D721C4C9CE3528BD05B095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.mft
Manifest number: 66
Signing time: Wed 07 Oct 2026 11:00:12 +0000
Manifest this update: Wed 07 Oct 2026 11:00:12 +0000
Manifest next update: Thu 08 Oct 2026 11:00:12 +0000
Files and hashes: 1: 4Ymkv_Ino49ll3TxCeRrFSB03b8.roa (hash: EC6epXR7lNi/qPuSWHGUkvfRI6ulV/puQ8edzleZuv8=)
2: b8i9m0axPxDDGMlomU5lSF5dPuA.asa (hash: KBEJeBNE2I2oG4USPi911JF+fPhQ4JykHrbwTuwUzCM=)
3: cY8X5M-zOCFiHxzRsQB6tS0Tcuk.crl (hash: P20Uven+AOh6mq6pw6puk6OS9jGtuzIVSWRIolHtXis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 11:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:05:5b:b5:b8:d7:21:c4:c9:ce:35:28:bd:05:b0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718f17e4cfb33821621f1cd1b1007ab52d1372e9
Validity
Not Before: Oct 7 11:00:12 2026 GMT
Not After : Oct 8 11:00:12 2026 GMT
Subject: CN=43895953f046c2e893cdd6f75cc2f27089ed4fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:26:e4:c4:e7:cf:63:32:95:c9:98:1d:94:
44:a8:39:f7:39:5d:ab:36:d3:3f:49:25:c0:93:14:
a4:ed:52:47:6a:0e:53:3e:43:e1:8f:c7:76:a4:e9:
f6:b6:9c:b2:5b:50:27:07:e1:d4:67:26:d0:55:f4:
33:1e:c4:bd:7b:f6:2c:65:45:cd:2d:da:20:34:e0:
4c:1b:8a:62:fe:3a:57:83:09:30:41:e8:83:61:19:
c3:21:16:74:5f:93:06:71:9d:50:8a:dd:1e:4e:e8:
95:f2:dc:18:b2:b2:18:87:38:87:31:dd:dd:55:5a:
2a:98:7a:c5:fc:a0:93:6a:26:ad:71:d6:7b:0c:ad:
0d:a7:1d:19:10:7a:2d:ef:c1:d2:79:f1:fa:42:e4:
e3:e0:60:6a:e7:fe:57:32:96:fc:34:fa:cc:8c:f1:
75:d0:9f:8b:ef:30:be:f1:39:05:d3:f4:e0:65:c3:
51:5b:34:0f:43:c7:8d:83:f9:c0:65:fc:0a:87:ae:
8e:9d:3d:49:3f:56:d4:5d:b1:25:37:e9:61:5a:8f:
f2:8b:6f:a3:58:93:20:5e:fe:c2:43:5e:e7:71:89:
02:55:4b:cc:56:3a:03:54:a7:8d:37:90:4e:97:a5:
5d:bb:eb:68:ec:e5:42:78:92:78:64:1d:ea:26:66:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:89:59:53:F0:46:C2:E8:93:CD:D6:F7:5C:C2:F2:70:89:ED:4F:C6
X509v3 Authority Key Identifier:
keyid:71:8F:17:E4:CF:B3:38:21:62:1F:1C:D1:B1:00:7A:B5:2D:13:72:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d6:fe:03:4f:d6:ed:e3:c5:08:8d:ed:da:11:5a:40:27:49:
8c:2e:84:0b:a4:ed:db:d9:f8:47:43:7f:f6:78:e9:95:2d:e2:
5a:91:ba:cd:61:59:41:cb:48:fe:26:96:60:0e:c0:a2:40:b4:
ed:09:f7:8f:06:03:81:8f:d9:23:38:25:8b:cc:d0:24:88:95:
12:ac:6c:4c:e8:b7:72:4d:7f:c1:03:41:92:1d:1f:cc:77:85:
9f:48:52:2e:5b:30:ef:ce:40:dc:ad:56:e4:5e:25:01:24:fb:
6f:1d:cd:7a:9a:b3:04:1f:2b:9c:86:58:30:84:54:8a:25:30:
9e:df:23:ef:58:52:d8:3c:2b:2f:18:95:5c:e7:44:6a:d2:dc:
2d:44:26:3d:1a:85:0c:f6:88:84:81:75:e8:47:13:92:b9:1b:
e3:5b:46:c1:3a:5b:8e:63:b8:16:9d:aa:61:8a:d0:a9:84:c7:
77:4e:0f:25:b8:13:d7:5d:a1:ac:7c:77:61:fc:d4:ea:1e:43:
83:b1:12:72:d8:12:35:04:1f:93:73:a9:65:8a:9a:7d:d2:03:
9f:12:a4:55:81:25:bf:0d:ce:1d:ab:5e:2d:07:eb:e2:b6:0e:
a7:b4:e4:bd:18:a1:bf:ff:38:10:fd:13:9a:61:93:29:d6:5b:
83:16:4b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:12:35 2026 by rpki-client