Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
File: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft (raw, json)
Hash identifier: xZo8n/FfoK0jvJiQAw4jpme0cUoN5/9zbJ7ssPB9QnQ=
Subject key identifier: 08:0C:FB:EB:87:F0:81:73:2C:EF:FF:89:C4:3B:69:C3:87:53:D7:9C
Authority key identifier: AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
Certificate issuer: /CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Certificate serial: 01A1352303EC5004E167BF5F67059984A797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
Manifest number: 1AA7
Signing time: Tue 13 Oct 2026 12:00:49 +0000
Manifest this update: Tue 13 Oct 2026 12:00:49 +0000
Manifest next update: Wed 14 Oct 2026 12:00:49 +0000
Files and hashes: 1: 35RBbJH7O74ElGBsXDtzWelJCE8.asa (hash: VGTXJkpFVsNFQM4P5dimy32ItUqxw4xThmopk2UmxJs=)
2: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl (hash: Wbhmh9M90XQ4Q5u1/0qME/5ADMnaO+i82PK9x9qXxv0=)
3: weWWuV6jfsu20O1Kp8PZ_7w5-6I.roa (hash: hxVuyj93Sh3p92R2/8BnJWSOvPERrOV88q73B7vWqrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:23:03:ec:50:04:e1:67:bf:5f:67:05:99:84:a7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Validity
Not Before: Oct 13 12:00:49 2026 GMT
Not After : Oct 14 12:00:49 2026 GMT
Subject: CN=080cfbeb87f081732cefff89c43b69c38753d79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:67:18:48:22:c1:83:38:97:d2:7a:e6:c2:
38:22:9e:0b:e9:64:13:4b:be:54:3f:43:23:6d:6d:
ef:1d:40:e1:0c:81:9b:d5:13:1e:af:f5:92:42:15:
1c:09:77:5d:10:1a:ad:c8:b0:e7:09:c1:93:2c:36:
21:7f:f3:93:61:d3:f9:48:5e:d6:a4:ff:1f:60:23:
6a:b6:12:f6:dd:7f:b5:13:18:32:c0:48:2c:c7:d6:
9b:1c:34:6f:ac:a1:1f:f4:e6:cd:9a:d9:42:74:54:
59:7f:51:72:8f:10:7c:8d:f6:5d:61:29:e1:0a:c5:
67:c1:ac:6f:12:e5:90:25:db:fe:e1:07:f3:3b:65:
28:76:04:6e:1a:2a:66:e5:4c:0d:02:1a:f7:39:5d:
81:00:c8:60:e9:7f:e4:36:c2:be:5f:0c:b8:30:41:
0c:b3:9f:3f:ab:ec:b2:55:1d:de:c8:10:e3:b6:41:
1d:78:27:9c:6b:f6:c1:c6:48:a8:b1:ae:d3:fa:e9:
05:59:2d:15:eb:ca:61:fd:08:3c:84:32:7c:e1:0a:
26:da:e5:cc:7e:10:ce:b1:70:9c:74:e1:99:9e:55:
66:5c:ba:72:62:a4:1f:75:6f:64:ad:06:dd:84:4d:
a6:bb:5e:36:f1:90:19:5e:2b:14:e5:cf:75:a9:7d:
a9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0C:FB:EB:87:F0:81:73:2C:EF:FF:89:C4:3B:69:C3:87:53:D7:9C
X509v3 Authority Key Identifier:
keyid:AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7b:02:3c:35:db:8d:a0:90:c7:3f:f2:e4:03:f2:c7:75:e3:
07:47:c1:72:87:02:5f:02:2f:0e:37:b5:e6:26:ac:ed:01:e5:
41:36:12:ca:5c:48:0c:a6:10:7f:28:88:b9:f4:05:a4:38:5a:
7a:20:65:29:2e:d9:41:55:b7:2c:51:b1:e0:bd:80:d1:a1:8f:
26:76:46:15:58:03:b0:27:3f:1a:33:7c:3a:a9:e0:87:43:c3:
a7:c6:76:4f:b0:2d:f6:8a:e5:0d:d5:b1:a8:06:36:15:56:6d:
3b:b2:d4:a4:b9:58:53:0c:d2:42:a1:09:af:b1:f3:88:cd:d8:
56:43:ab:13:9a:63:57:92:e9:81:7d:ca:ac:64:a5:d0:66:1d:
47:df:56:ca:86:ef:ff:9e:c5:5b:90:11:33:c9:04:e4:3e:bc:
4e:d7:6e:08:a9:ec:38:4f:7b:29:c7:19:a6:97:d6:e7:62:3d:
1e:06:64:92:75:2d:a3:47:06:30:6b:05:f6:31:af:9f:07:b1:
9e:1c:ff:f2:34:c6:d8:e7:cc:45:95:f1:1e:08:4c:ed:06:51:
f3:32:06:be:39:aa:e9:33:64:27:a8:b2:69:0a:42:9a:20:d8:
61:62:f9:9e:66:f5:35:f9:1f:ed:ee:13:46:90:d1:82:0f:3b:
ac:c7:c1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:49:47 2026 by rpki-client