Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
File: Y14XDZsHxQ0bKa6GliBssUWk8fc.mft (raw, json)
Hash identifier: DgPf5c96Tk+TVLB1HKh1TA1tgN7wT2SEO5CNNvTOi3E=
Subject key identifier: F4:3D:49:E1:61:3A:2D:9D:4C:3F:30:1C:25:4A:47:53:EE:92:06:4C
Authority key identifier: 63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7
Certificate issuer: /CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
Certificate serial: 01A131468491248367F383CA0A63218FB7C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
Manifest number: 03F3
Signing time: Mon 12 Oct 2026 18:01:07 +0000
Manifest this update: Mon 12 Oct 2026 18:01:07 +0000
Manifest next update: Tue 13 Oct 2026 18:01:07 +0000
Files and hashes: 1: Y14XDZsHxQ0bKa6GliBssUWk8fc.crl (hash: 0+mMAj4nlqQ0sOFiEHS+90GRBcw+jXf/Gk2GtxeGaAg=)
2: w5p1hXEjQ2Xz1V3bTFCKNXnxTbs.roa (hash: BkrEG8IgRqXV47SrXBW3QPf+J5iuuBWyqjvE+aHIr/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:46:84:91:24:83:67:f3:83:ca:0a:63:21:8f:b7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
Validity
Not Before: Oct 12 18:01:07 2026 GMT
Not After : Oct 13 18:01:07 2026 GMT
Subject: CN=f43d49e1613a2d9d4c3f301c254a4753ee92064c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c6:3c:40:0e:c6:3d:1d:07:bd:9b:2b:f7:05:
c0:10:a1:39:5e:b7:39:e2:b2:74:69:5b:77:f4:a9:
43:da:1c:b1:19:35:ad:d2:cc:f6:37:8c:a4:08:88:
ad:fa:fb:b5:98:ac:d0:f8:98:a0:82:e8:f2:22:d3:
19:14:ce:81:26:91:2d:97:19:28:a4:05:d0:ac:65:
ef:c2:cc:3d:d2:a8:c4:e7:0b:99:ad:04:dc:d2:f1:
f5:71:ae:bf:e5:7d:d3:91:f8:cc:17:5f:24:c8:39:
2b:0a:51:77:3d:d7:49:35:87:3f:ca:28:36:e9:08:
1a:18:5c:1e:7c:f1:09:2f:a0:e4:3d:7d:6a:dd:fd:
76:b2:b5:e8:d1:a6:b1:6b:29:bc:a6:10:4c:d4:ae:
5a:11:b5:3c:0f:fe:62:17:67:91:17:a1:1c:ae:72:
b7:a1:b6:c3:63:08:07:44:cc:7d:6b:e4:44:78:bc:
86:c3:ef:56:84:69:25:ca:90:75:0d:9f:3a:c8:55:
fc:67:ac:5b:5b:c2:a6:db:48:6d:53:1b:40:78:ef:
da:67:cb:23:ab:cb:20:2e:98:a9:1b:95:aa:e5:f7:
b6:f5:50:a1:2b:9f:f5:12:47:cc:74:39:59:ea:30:
3e:c3:27:a1:2b:30:9a:f5:96:5f:75:5b:10:6e:ee:
31:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3D:49:E1:61:3A:2D:9D:4C:3F:30:1C:25:4A:47:53:EE:92:06:4C
X509v3 Authority Key Identifier:
keyid:63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:dd:fa:43:0f:30:07:1f:be:28:ff:9e:cd:ae:d5:f8:1f:ea:
eb:6c:99:3a:7a:1f:c1:45:1b:27:58:1b:82:42:6b:6d:69:6d:
d4:bf:a9:2e:96:ad:a2:f0:e8:41:38:71:cc:fd:90:6d:47:5e:
dd:48:bc:68:38:7d:ea:7e:bc:69:21:43:c0:1c:83:b3:f2:0c:
43:37:8f:3c:55:b4:76:dd:e0:fb:e0:91:67:cd:e9:6b:03:57:
19:e1:a9:2f:a3:03:79:64:77:03:72:a6:0d:78:87:7f:80:b4:
65:f7:d3:ec:3e:63:5a:fa:50:90:24:d2:1f:21:e7:09:ba:31:
e5:f3:30:e4:73:01:6a:c8:7b:9d:4d:f6:99:14:57:e5:83:b9:
7e:06:ec:99:c4:de:4b:1a:f7:5f:b1:c9:f9:b4:05:1b:90:e1:
11:cb:59:28:a7:40:dc:c3:d7:10:35:71:3c:ad:1d:26:ce:9e:
32:e5:32:be:ee:ac:6f:16:a8:d3:af:bd:30:65:3b:88:8a:8c:
1a:6c:04:dc:e0:ca:96:6a:67:49:18:d0:3f:eb:7c:af:60:b5:
37:2a:d3:5b:75:03:f0:78:98:41:88:35:4e:14:cf:f0:22:95:
a9:c9:2c:d4:80:b2:13:98:c4:bb:19:8a:94:52:d4:14:8a:3f:
e8:e8:fa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:22:06 2026 by rpki-client