Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
File: RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft (raw, json)
Hash identifier: ynxHtduWbfIfnVSFHBqQfwqR1f26FBDKT7JOf4tpiRk=
Subject key identifier: 16:25:A5:3C:A7:E1:61:C3:6D:A8:D5:5E:91:56:12:9B:5B:5B:65:72
Authority key identifier: 45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0
Certificate issuer: /CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0
Certificate serial: 01A12A6927AED2EABE820B8A97104D6FCB1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
Manifest number: 11CC
Signing time: Sun 11 Oct 2026 10:01:36 +0000
Manifest this update: Sun 11 Oct 2026 10:01:36 +0000
Manifest next update: Mon 12 Oct 2026 10:01:36 +0000
Files and hashes: 1: RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl (hash: T0TJkh5ZswuAfryfA2sD553ieI0T47qUzy9kdH7DGBo=)
2: iG_jpL5evYKdvaSXMweO07u-LZE.roa (hash: bAZcm3e4oR8RQlmgma0fN3YtSn8DFyr4KMu8blXi4D0=)
3: pMLFHgvr97zNskO8YN_sDv0Y-aU.roa (hash: OO8vYGJ08onKRzkSKXfvr1cztRsM4kZCRCHxKVslWRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:69:27:ae:d2:ea:be:82:0b:8a:97:10:4d:6f:cb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0
Validity
Not Before: Oct 11 10:01:36 2026 GMT
Not After : Oct 12 10:01:36 2026 GMT
Subject: CN=1625a53ca7e161c36da8d55e9156129b5b5b6572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4e:ce:e9:a9:28:8c:c7:9b:fb:28:14:4c:d1:
99:7c:e0:a8:fb:b7:f3:5d:c7:8c:11:e3:e7:96:01:
1a:41:3f:46:14:f8:5b:df:dd:52:be:76:b8:50:14:
0f:17:82:01:ba:26:81:81:ea:f2:ba:00:9e:5f:39:
cd:24:95:2c:6d:e8:e9:72:7f:d0:5f:1f:de:53:ef:
fe:10:33:0f:b3:e4:67:c7:39:33:18:7d:9c:f2:fe:
fe:fe:0f:ca:bd:73:bb:86:7c:97:ef:8d:06:79:79:
ec:65:e4:e8:97:2c:67:4a:44:4d:a6:ee:59:3c:00:
54:fb:46:9d:da:26:2f:97:30:3a:f8:41:8a:7d:cb:
71:34:a5:ae:2c:4d:d4:8f:36:de:ed:a0:f1:90:c0:
b2:bc:de:74:17:e2:79:c6:79:b2:66:ae:ee:eb:62:
32:de:ed:55:ea:9f:bf:50:f7:7c:d4:c3:d6:51:c0:
71:64:8d:dd:56:d7:35:8b:41:dd:f3:5b:ad:88:3c:
6a:23:fc:8a:43:1a:55:5c:73:de:89:de:fc:93:64:
bd:3d:cf:c8:2b:76:df:71:e4:19:ea:05:09:91:1f:
7a:61:1a:26:9f:0c:6a:cb:c0:59:00:74:da:11:07:
31:7d:36:1b:01:1c:cd:e6:6f:45:11:e9:9d:10:98:
2c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:25:A5:3C:A7:E1:61:C3:6D:A8:D5:5E:91:56:12:9B:5B:5B:65:72
X509v3 Authority Key Identifier:
keyid:45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:23:b2:4b:b7:d7:ec:0e:65:63:88:69:0a:82:38:76:3b:fe:
99:57:f1:18:6b:5c:2d:b2:8b:3a:c6:53:72:96:79:b8:4c:3f:
09:e8:b6:ce:75:4d:53:06:8f:50:fa:0e:8a:25:40:34:ef:72:
f5:a8:50:d7:78:57:2e:6b:d7:a1:56:aa:7e:2c:55:84:20:7f:
c1:01:0c:11:09:e5:97:e2:ed:f5:12:e2:4e:7d:0f:c2:3f:8e:
23:29:85:74:be:71:b2:4b:1a:aa:7a:9d:d7:dd:7c:0e:e1:fb:
15:f2:71:53:1b:ca:8a:0a:95:4e:7c:84:4b:92:93:e3:0f:c8:
8d:c2:59:bf:7f:59:eb:58:83:2c:1e:f3:a7:ee:8a:23:b2:59:
cd:b2:34:ef:03:3a:68:7c:7a:f1:56:cc:8a:3b:c8:ef:68:dd:
47:17:57:e8:b3:73:65:92:e3:e4:36:e8:84:8f:24:b0:83:60:
16:6d:76:0d:51:6a:2b:b9:50:a8:88:d5:9b:5c:a8:25:cd:94:
c2:f6:2c:ea:6b:e6:c0:1f:75:c8:2b:8d:d7:cf:89:f3:f2:cb:
90:e0:25:89:fe:87:10:dd:e7:36:3a:98:02:ff:cf:43:22:3e:
72:6c:02:15:a2:bf:6b:22:15:5c:4a:8a:1a:ff:be:c7:28:83:
4d:c0:bd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:34:59 2026 by rpki-client