Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
File: Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft (raw, json)
Hash identifier: tZHkUpQnqPV2uLmkuhkj4NHinDalVmdldSd7HTSFCy8=
Subject key identifier: 71:32:94:9E:A4:A9:BD:6F:EB:F3:DA:44:67:32:68:AA:0C:3D:B3:63
Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Certificate serial: 01A13D13216EA419627E4039628A7BED8581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
Manifest number: 10A5
Signing time: Thu 15 Oct 2026 01:00:26 +0000
Manifest this update: Thu 15 Oct 2026 01:00:26 +0000
Manifest next update: Fri 16 Oct 2026 01:00:26 +0000
Files and hashes: 1: LDt7gaxmt08mgFC-M4WkB6Rh2M4.roa (hash: GmZKtwbYE0ZQZpsBSkP4BAk8kkV/eLe4GNjMQ2lsJKY=)
2: Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl (hash: 2gC1W534r9dKu/8cVysmbPtIHInE2+r9bDQ4LUFjKo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:21:6e:a4:19:62:7e:40:39:62:8a:7b:ed:85:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Validity
Not Before: Oct 15 01:00:26 2026 GMT
Not After : Oct 16 01:00:26 2026 GMT
Subject: CN=7132949ea4a9bd6febf3da44673268aa0c3db363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:0b:50:3a:81:8e:92:45:6d:65:d6:8c:ba:
3f:29:46:60:99:c4:97:8a:3b:75:e9:72:12:1f:6c:
4d:04:aa:45:57:0a:5c:ee:36:39:3d:c0:82:1f:92:
a4:97:10:e1:63:ce:32:ef:f3:3f:ae:10:af:5a:d9:
1e:70:e7:a7:ef:19:8c:f3:ba:d2:4a:23:e5:ac:ca:
b0:39:80:2e:66:7f:4a:18:49:2d:7d:3e:a2:ba:65:
ae:2d:ca:fd:f9:88:43:37:81:af:fb:c4:ad:49:cc:
fa:1c:08:a7:8b:c4:14:f3:af:ed:d7:a6:ea:3d:b3:
b0:47:7d:09:75:10:a2:3c:ab:a1:92:b4:26:93:43:
4c:75:5c:97:e7:cf:a9:77:17:0b:d2:23:fc:0f:ea:
18:53:22:9d:03:b4:ee:d5:26:12:f9:13:79:f0:37:
f2:2f:e6:76:9b:92:c4:f2:04:59:01:31:79:01:52:
38:67:cb:7b:c3:ff:ca:cd:b8:55:19:f3:66:de:2a:
ba:1e:ee:9c:d9:f7:1e:7c:85:8c:69:aa:05:3c:0c:
c4:15:f0:ce:b8:bd:87:05:37:d7:3d:50:7a:6b:53:
41:6f:d6:f1:f5:45:2c:c4:7e:e3:8e:78:0e:57:c6:
d4:32:95:fd:53:58:63:1c:f5:71:41:db:74:47:59:
60:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:32:94:9E:A4:A9:BD:6F:EB:F3:DA:44:67:32:68:AA:0C:3D:B3:63
X509v3 Authority Key Identifier:
keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a5:e8:b8:3f:66:4f:a3:ff:bd:96:7e:71:a3:ec:40:f0:fb:
28:96:45:0a:74:0a:7e:65:39:49:86:7f:2c:b0:e1:69:17:11:
c6:cc:e4:61:1e:97:22:78:be:16:ad:d7:53:a4:29:d6:b0:ce:
45:d1:25:08:6e:5c:a5:0d:30:1c:54:ce:e8:20:4f:b3:4e:f2:
6b:21:b9:6a:6b:86:fb:cd:c6:ab:22:59:91:f9:99:fb:25:23:
99:43:3f:0e:58:76:98:fe:2d:85:56:34:86:e6:ab:ec:50:ee:
e5:b4:25:f6:88:05:fd:00:2c:73:53:cb:f7:7b:01:1f:f8:76:
21:fe:ff:22:95:e8:7f:3e:29:2a:0c:72:03:44:ac:00:a1:79:
6e:96:66:b6:8c:3b:9b:00:fa:a0:9d:c9:8f:99:8f:0f:2e:c3:
bb:0c:44:d3:0c:f0:01:7e:db:38:89:f3:da:f2:91:87:4b:16:
05:c2:1e:9d:de:df:5f:bd:5c:c2:57:2d:6b:7f:e8:ff:73:c9:
f5:de:e2:73:04:ec:65:d3:31:f0:bc:86:25:05:40:50:d5:17:
4f:46:77:72:5d:a6:9c:7a:17:58:5a:de:f7:1c:3e:2f:ca:4b:
7e:2c:61:a1:f7:89:dc:1f:7f:93:b6:f7:1c:b4:90:9a:35:2a:
3a:14:d9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:43:32 2026 by rpki-client