Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: hV6yB1vMUq6od0tzUxuHWClVB0a/WfOuOkj8++/pgLk=
Subject key identifier: B8:2C:5E:8A:5E:03:24:33:73:4E:2A:F2:A2:C2:D6:69:B9:1B:F8:E6
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 01A0C6A10543F85F5FFFC7ACD086022468E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 14CC
Signing time: Tue 22 Sep 2026 01:00:36 +0000
Manifest this update: Tue 22 Sep 2026 01:00:36 +0000
Manifest next update: Wed 23 Sep 2026 01:00:36 +0000
Files and hashes: 1: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: 4/+SG4Nqw0oY7FBQyL/HwiNa5xcO8rS5VARm/Ljuw24=)
2: ZbPx8DmJFKdQIWP-bXHtV-eEAv8.roa (hash: vdIV9Jeh3rKfLujo37xtw3yrmFmf9rID9z/P7vCkaSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:05:43:f8:5f:5f:ff:c7:ac:d0:86:02:24:68:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Sep 22 01:00:36 2026 GMT
Not After : Sep 23 01:00:36 2026 GMT
Subject: CN=b82c5e8a5e032433734e2af2a2c2d669b91bf8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:35:45:93:5f:28:24:77:89:db:a0:c2:ca:0e:
7d:31:22:93:e8:9e:bb:96:c9:f1:c8:8f:0d:19:21:
db:40:20:ae:8a:18:82:e7:f5:7a:b8:d7:94:8d:c7:
1d:e9:21:57:23:e0:17:62:dc:63:4f:8c:47:8d:61:
b3:3a:e4:d6:d5:83:5d:f7:5d:73:c7:e4:55:df:a5:
c2:de:bd:0a:05:1f:1a:bd:5e:3f:c5:81:4c:69:7e:
4f:35:bd:bb:16:0b:56:9b:9f:0c:0b:9b:48:29:47:
df:65:f2:15:1e:9b:da:c7:f5:a0:4d:f5:dc:e3:6f:
88:63:ad:b4:07:72:c7:2e:fa:c2:64:ee:77:80:5f:
f6:e3:d0:c5:70:15:5b:12:00:cb:92:26:6f:ac:79:
8e:bb:66:d5:81:4a:d7:89:5e:52:9d:a3:43:16:b0:
b5:07:34:60:89:81:01:3f:58:c2:b0:a8:eb:a4:dc:
ac:3c:47:a4:4d:62:29:35:96:86:96:9c:ad:cb:a2:
eb:33:8a:69:85:14:7b:8a:19:4f:13:e6:89:c0:87:
8c:a7:b0:1f:84:8b:a7:2f:30:cf:c7:32:71:85:39:
94:63:ed:be:0d:d1:ab:37:8c:75:97:ed:19:96:c1:
c1:17:07:a9:a0:2c:3f:55:46:90:2f:59:ce:c3:a6:
78:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2C:5E:8A:5E:03:24:33:73:4E:2A:F2:A2:C2:D6:69:B9:1B:F8:E6
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ea:93:8f:bc:e6:bf:7d:d2:b9:60:f6:2d:14:1e:c0:4f:1b:
30:fd:12:25:07:a1:f2:aa:e8:e9:9b:66:ea:fa:dc:c7:ef:82:
67:9a:cf:80:a9:28:94:99:ef:bf:16:6f:78:8a:6f:7b:9f:68:
d6:90:3d:3f:4f:b8:2f:f3:1a:70:c8:a6:8e:fe:9c:de:db:03:
a6:6a:02:49:99:1e:d7:d5:fd:89:cd:77:98:06:7e:2e:8f:70:
85:5e:e3:45:4a:5a:27:4a:75:e0:77:28:77:6c:6d:65:8a:bd:
5f:cc:d8:a3:7a:0a:5f:80:a4:07:84:61:80:a3:16:14:b3:c0:
fa:0e:8a:b7:3a:85:dd:8c:5d:46:14:64:a9:aa:7d:d9:fa:f9:
8c:6b:09:66:97:74:3e:2d:ca:25:79:d7:14:68:3c:e9:20:c0:
d1:d1:4e:1a:d7:35:e4:56:80:5b:f7:7c:d6:51:1e:23:8b:79:
f6:cf:3f:27:ac:fd:dd:ff:7f:5f:1a:2b:c7:a5:e4:87:20:e7:
9a:51:62:9c:7d:ec:a1:41:cd:cc:9e:db:c9:5c:c3:49:2f:f4:
1d:bc:38:9f:ee:8d:14:47:f1:55:e6:f9:97:e3:5b:11:8e:45:
98:e5:dc:f4:f6:76:62:f4:7c:f2:65:20:de:d9:1f:74:74:52:
e8:47:58:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:57:13 2026 by rpki-client