Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: 1chUUyxjGvk/ETSUSrhepn3vbbkv+ArxuS9htZ27qv0=
Subject key identifier: 58:77:7B:9E:2D:4D:58:47:71:C1:15:50:D0:E2:FC:FE:CC:F3:73:27
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 01A1DF837C55067FEBEB807A3EEFC5883DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 09D1
Signing time: Sun 15 Nov 2026 14:01:38 +0000
Manifest this update: Sun 15 Nov 2026 14:01:38 +0000
Manifest next update: Mon 16 Nov 2026 14:01:38 +0000
Files and hashes: 1: 6ZBPRGxMRhzUL39PVDVSduo6FUc.roa (hash: mXhPY8g7CrKLHAIlSEURMCEabcnrrTvn2LVrA4zymb8=)
2: B0WU8sYjxbF2I99DOG4CZtJFemU.roa (hash: kZf8Vi7lYB4Gl+U+zxW5wY6bn3f+hQC1mSLMVib18Xg=)
3: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: LlzUHm8A/Xd+5xjOPHEBjI3rSnCA+tAX8dpTy+tLCXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:7c:55:06:7f:eb:eb:80:7a:3e:ef:c5:88:3d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Nov 15 14:01:38 2026 GMT
Not After : Nov 16 14:01:38 2026 GMT
Subject: CN=58777b9e2d4d584771c11550d0e2fcfeccf37327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:88:29:d8:e5:f8:d9:b5:e5:52:6e:57:fa:
c3:7c:26:88:0a:c7:c2:e7:43:94:c7:86:94:38:cc:
c0:a7:2a:70:47:70:90:e0:06:e0:30:e7:c5:5e:bc:
fc:ce:ed:41:d2:be:29:16:a3:70:90:23:68:1a:83:
04:7c:5b:85:cb:b6:18:df:f9:7e:45:e7:9f:ac:0c:
74:63:a9:c2:fe:f4:8b:4f:9b:0b:2f:12:6b:1d:02:
d0:e8:db:27:47:a2:30:62:c3:40:e1:7a:fd:fc:74:
fb:c0:0f:82:08:79:a7:b3:6d:59:ef:13:9f:9f:c3:
4f:9a:2c:9a:b0:11:df:2d:ae:02:f3:ae:67:bd:b9:
73:01:be:ad:d2:ad:25:01:4f:0b:fb:81:e2:d6:c4:
e0:30:f4:58:9d:a0:6c:90:27:ee:75:80:ba:5c:bc:
f7:49:68:c6:df:9d:40:e3:79:ec:5a:b0:ad:49:0a:
b3:a0:06:11:62:f0:02:2d:98:22:e3:35:ab:01:da:
e3:55:d5:a8:95:f7:06:2c:ac:3f:b2:ad:b1:e6:9d:
ac:9a:df:d6:32:0e:32:95:66:da:56:57:ca:9e:77:
11:e3:cc:0f:7e:b2:f9:24:51:56:8a:39:75:88:fc:
b2:c8:91:39:aa:2c:f3:37:40:8c:71:b0:58:8a:e8:
db:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:77:7B:9E:2D:4D:58:47:71:C1:15:50:D0:E2:FC:FE:CC:F3:73:27
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:76:8b:4f:2a:0c:d6:14:e9:43:77:5f:6f:f6:1d:5b:07:4d:
14:90:ab:bb:38:87:2f:ce:c2:7e:4f:75:5c:dd:47:24:a7:38:
9b:30:95:08:0c:90:f3:e5:f0:2e:9e:2c:d0:cd:0a:d5:9b:cc:
9e:15:46:9e:03:11:a9:c4:9c:fb:de:af:5c:cb:2b:5b:95:f6:
7a:83:90:a0:0e:bc:49:16:4a:83:42:5c:89:a2:27:fd:81:74:
fc:d8:43:41:6c:29:b5:38:31:5e:69:71:40:9f:3a:bb:2e:19:
6c:9c:ac:17:63:74:f3:d5:48:e2:25:1f:d9:c8:4a:f8:73:44:
44:88:a7:98:2f:dc:54:58:73:da:ae:41:9d:36:6d:fd:83:07:
18:f8:79:6f:20:bf:d6:bc:c0:2c:f4:78:27:93:29:2f:eb:f3:
86:17:82:23:b5:5e:7e:e9:9a:06:e4:b9:bf:b1:99:a3:44:ef:
a9:74:d1:9d:a9:69:93:c4:ae:8c:31:ce:d3:99:ab:85:88:c0:
ce:f0:c9:2f:74:ee:94:c4:87:1e:2c:a1:3a:ac:87:fa:8d:ea:
5b:a7:d1:6f:af:79:29:31:ff:0f:e4:bc:a5:a8:f3:8b:00:f5:
39:ba:ab:be:83:fc:57:ea:b3:b8:2e:91:ce:97:f2:86:70:f5:
27:90:88:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:04:21 2026 by rpki-client