Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
File: 8yyk3zLccfQREE-UtRrBS2Z1gks.mft (raw, json)
Hash identifier: irPRK3Nr8NoGIdD6s5p6zudtiU16zlOxdu+f856f7pQ=
Subject key identifier: 3F:F9:49:F2:3C:39:D3:21:6B:AB:10:A3:9C:F5:33:39:3A:F3:77:97
Authority key identifier: F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
Certificate issuer: /CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Certificate serial: 01A17E4EFA6E65A7FAE64171049784856144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
Manifest number: 0504
Signing time: Tue 27 Oct 2026 17:01:07 +0000
Manifest this update: Tue 27 Oct 2026 17:01:07 +0000
Manifest next update: Wed 28 Oct 2026 17:01:07 +0000
Files and hashes: 1: 8yyk3zLccfQREE-UtRrBS2Z1gks.crl (hash: FOQ4RykIsVSLOMlyaY4oSjUbDpKPAo86SdfE5jtqWKw=)
2: YO6OstzVnVo9QhzrIx9loswdAJg.roa (hash: +INj2IveiQZp/sokzKmgLlYwMzOhLR6s+/Ir+302j9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4e:fa:6e:65:a7:fa:e6:41:71:04:97:84:85:61:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Validity
Not Before: Oct 27 17:01:07 2026 GMT
Not After : Oct 28 17:01:07 2026 GMT
Subject: CN=3ff949f23c39d3216bab10a39cf533393af37797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:e2:31:ed:20:58:32:ac:a0:6a:41:35:5f:
80:dc:45:5d:50:89:b4:5d:04:cc:2a:f3:a6:9d:93:
0c:83:95:60:04:a3:71:c0:1a:52:be:59:a6:82:13:
8b:6d:1b:63:a7:af:6c:b6:44:f2:a0:96:b9:83:c4:
52:cd:c2:26:99:3e:8d:ab:d9:c9:8f:6a:76:0d:80:
22:c7:5b:61:07:cc:95:5f:ea:07:dd:45:aa:8c:30:
eb:1f:23:31:a3:46:8d:b3:43:42:cc:f8:cc:15:01:
47:ac:60:50:df:0b:a3:81:9d:8f:ad:31:4e:df:6b:
d2:25:53:89:c3:3a:fe:d7:38:fc:7b:18:bf:57:15:
d0:7d:52:03:b9:d4:a1:6b:09:2b:7f:cc:5a:5c:d9:
30:42:ea:c0:58:6d:55:41:52:81:ee:84:6b:21:44:
d8:fb:d9:73:2b:bc:f3:87:dc:bc:07:0e:8b:55:be:
79:04:8f:e8:60:d5:a5:28:b0:5e:d9:ab:16:b7:3f:
54:0d:b5:80:7e:3b:c2:ac:03:2a:54:3c:b0:f8:f9:
1d:90:bd:71:eb:84:93:fe:93:44:13:2d:93:2b:e1:
8a:4f:93:f1:75:ca:c1:c6:be:dc:99:fa:76:8d:0c:
79:41:40:d8:5f:e2:8b:bd:df:2c:cd:88:bf:94:b7:
00:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F9:49:F2:3C:39:D3:21:6B:AB:10:A3:9C:F5:33:39:3A:F3:77:97
X509v3 Authority Key Identifier:
keyid:F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c5:f3:fc:c3:32:0f:fc:17:eb:62:fd:53:af:43:35:7e:a6:
3d:43:ef:38:1d:4f:fa:ee:36:d6:3e:cf:16:de:57:d1:de:70:
f8:f7:bf:59:d0:64:5a:0d:bc:aa:b7:92:40:5b:94:bd:2b:f0:
90:5f:45:b8:d8:62:26:d2:60:3d:c3:39:98:2b:05:bc:6b:44:
0d:7d:19:98:1e:dd:44:64:f0:cd:65:fd:88:55:26:7e:22:07:
2b:80:fe:36:13:65:24:af:66:cd:55:2b:97:fe:f2:e9:2d:e6:
ad:33:cf:50:10:7b:24:32:d7:5d:99:a9:50:51:af:3a:4e:aa:
d6:04:2a:46:1c:9f:25:b3:e1:bd:ca:1a:26:b3:ee:a9:2a:22:
a9:bd:3b:89:4c:46:d9:d4:ca:62:c2:80:5c:f1:2a:1a:04:3c:
40:b4:34:9d:a0:53:94:34:89:1e:6f:fa:96:63:c4:84:b5:df:
16:89:24:5b:80:e9:59:53:ed:51:fa:4a:4f:e0:ae:89:15:29:
fe:47:7e:1f:65:87:2a:ad:7d:1d:5f:47:14:6c:06:47:5f:80:
39:a7:ae:01:c3:3b:01:48:bb:f1:7f:0b:82:e3:15:43:9b:be:
8e:95:ee:f9:36:96:45:9d:d3:65:82:1e:21:ba:a1:ac:ed:42:
68:07:0d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:50:41 2026 by rpki-client