Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier: j6esZa9PwWz4R5kMQRVYPl+81VZaWX5CYdBmbDctLSQ=
Subject key identifier: 74:AF:2C:47:55:91:CF:59:65:81:6F:09:10:A9:98:76:E6:75:FA:B7
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial: 01A13DEF111682D9468999D214F12DB3E9AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number: 15C4
Signing time: Thu 15 Oct 2026 05:00:39 +0000
Manifest this update: Thu 15 Oct 2026 05:00:39 +0000
Manifest next update: Fri 16 Oct 2026 05:00:39 +0000
Files and hashes: 1: _V1LSsZtamsE4WXP60Yw8QNvv70.roa (hash: 86294W5FbZlicyPxaf1Bh5Vh3kJ1iu3Y1KxTGDfYWAk=)
2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: l5Y9rKQP6vpQOZDGTo312xhJm28lUWoS0izthrTOM0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:11:16:82:d9:46:89:99:d2:14:f1:2d:b3:e9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Validity
Not Before: Oct 15 05:00:39 2026 GMT
Not After : Oct 16 05:00:39 2026 GMT
Subject: CN=74af2c475591cf5965816f0910a99876e675fab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3c:3b:ca:16:6f:30:09:88:24:29:4c:0c:21:
3d:f5:76:71:ed:f8:28:ab:ee:eb:1f:e8:7c:58:6a:
1c:7b:7c:1b:fd:1b:68:db:c0:3f:4c:9e:86:94:fb:
c4:5a:16:d7:f9:ad:00:2a:85:d4:c5:5e:a8:14:74:
69:ba:2b:50:a2:cf:c5:76:35:e8:4c:32:9a:c2:50:
d6:42:f6:f9:68:0c:5c:3f:7f:64:bd:20:f5:cb:b3:
9c:c2:25:50:5c:ad:a6:1a:93:3a:63:d8:40:88:fb:
62:60:57:ff:32:8c:f9:3f:a9:40:bc:47:97:43:1b:
1b:fb:f4:d9:b9:b1:bf:fe:4c:3a:8a:41:21:46:35:
1a:1e:46:1f:f8:51:90:c5:b8:9b:39:d8:9a:2f:08:
31:6b:eb:0a:3c:e2:32:f9:4d:2f:a5:52:b3:70:a2:
9e:8f:c3:6e:fc:ec:f8:fb:69:61:f9:3c:bd:8b:31:
50:f3:9d:75:02:8d:33:4c:6d:47:a2:fa:44:2d:a2:
97:f4:8e:6f:e7:0f:fb:f3:34:fc:76:d0:8b:89:ed:
f7:53:19:11:6d:8c:9b:0c:72:66:2b:c8:bc:11:6b:
a7:d7:82:4a:9d:c0:21:d0:4d:80:a7:eb:ff:5e:d2:
1b:ed:0c:00:fc:9e:50:a1:3b:f0:a9:46:93:52:e5:
f1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AF:2C:47:55:91:CF:59:65:81:6F:09:10:A9:98:76:E6:75:FA:B7
X509v3 Authority Key Identifier:
keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:12:91:a1:bf:f9:1c:9a:db:88:d1:df:c7:d2:6f:67:26:02:
0e:96:56:4a:4d:a0:b1:56:78:fd:b8:2f:6a:55:0b:41:15:b9:
23:75:53:01:92:5a:7f:a4:bb:0f:8b:5e:6a:eb:44:fd:fb:ee:
fb:32:d2:92:a7:cc:25:94:c1:04:a7:9b:50:12:04:64:78:43:
9a:9f:99:ee:20:7c:95:18:93:50:be:81:40:3a:40:ce:c3:9d:
dc:b2:b0:c2:7b:a3:f1:e0:47:42:32:29:6e:50:b9:ac:c9:fd:
8a:75:2b:aa:f3:5f:de:fb:47:1c:44:e4:c3:dd:21:e4:59:4d:
7a:02:4e:57:62:cb:95:f5:59:14:6d:23:fb:dd:71:e5:da:71:
7c:33:95:1f:79:7c:43:ea:af:fc:ac:2e:86:25:1b:12:03:97:
90:c4:a4:23:72:63:7e:be:7a:be:c9:27:a0:24:22:af:be:2a:
0c:f2:ce:ae:00:d5:77:ba:4d:b8:aa:7c:5a:fb:fd:13:07:f0:
8d:e1:7e:ba:38:4c:0d:11:55:87:33:71:89:e6:4d:7d:96:28:
bf:63:dd:b4:50:7a:c1:ca:af:06:16:2b:75:6f:41:66:92:91:
9b:26:09:41:e0:34:34:d6:be:0a:53:cd:3b:d9:99:51:49:4f:
5f:99:f0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:22 2026 by rpki-client