Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
File: Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft (raw, json)
Hash identifier: 9YRgWY4uulEvpwFyS1lFAfUbGOGNqa2afFdugiVXlBs=
Subject key identifier: 0C:DE:41:7A:C3:48:A8:7D:C4:51:50:CE:C7:23:38:42:EA:75:04:42
Authority key identifier: 63:CB:FC:DA:1D:C0:9D:88:B3:AF:5C:EF:90:DA:01:62:FD:A3:74:B4
Certificate issuer: /CN=63cbfcda1dc09d88b3af5cef90da0162fda374b4
Certificate serial: 01A139A449D9E0F760E313E2BDB28F369CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
Manifest number: 02CA
Signing time: Wed 14 Oct 2026 09:00:30 +0000
Manifest this update: Wed 14 Oct 2026 09:00:30 +0000
Manifest next update: Thu 15 Oct 2026 09:00:30 +0000
Files and hashes: 1: 2B_TjSMzG_Qyjy_a889-yEM4ZUQ.roa (hash: 0aiNkMB/Opb3pvqD1jWSeypzZe7gwQQUTXUmi/6/oKI=)
2: Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl (hash: dfbsB3r15tZvhjH42oic2Tqn2PqihHgq5+W665tis2Q=)
3: v-DfpxyzzKxt20fKpcz-d2vnkjE.roa (hash: bVMoY+WNqxOIWzjaGvX9XGjb85s1gnx8ahnPJ/Q8OBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:a4:49:d9:e0:f7:60:e3:13:e2:bd:b2:8f:36:9c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63cbfcda1dc09d88b3af5cef90da0162fda374b4
Validity
Not Before: Oct 14 09:00:30 2026 GMT
Not After : Oct 15 09:00:30 2026 GMT
Subject: CN=0cde417ac348a87dc45150cec7233842ea750442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9a:a2:77:f4:63:0f:08:56:49:b6:21:db:46:
91:76:f2:03:6e:58:ea:bd:d6:91:7c:bf:3c:20:40:
79:7e:d1:3d:6b:b0:d3:6c:59:12:f4:5e:84:f3:ef:
5e:75:16:33:e1:a4:f9:0a:55:5f:4e:60:23:d2:a9:
5a:34:3b:0a:7a:52:71:8f:15:32:8e:45:e0:8e:92:
4f:26:8b:0e:f1:1d:90:f4:12:c0:9e:e4:22:9e:d1:
bb:1b:41:fc:e8:ef:41:88:ae:72:e5:2d:fa:f1:66:
09:d9:6a:8e:57:99:00:7e:17:6a:2d:7e:b1:10:7b:
04:ae:23:79:e9:4d:8e:4a:d1:bd:d4:5f:a1:36:69:
fd:d2:1b:95:46:22:31:10:80:ab:04:28:a3:aa:af:
b4:3b:21:32:4c:c8:c4:c6:b1:a4:d0:21:31:b8:4a:
47:64:79:cf:4d:f5:66:64:42:e4:da:09:88:0c:08:
e0:5a:b8:cd:d6:58:8e:8f:30:6b:62:16:9a:09:de:
f2:44:78:08:1f:40:e9:eb:f3:ac:8c:6c:c4:fe:06:
6d:3e:b3:69:aa:dc:61:11:ae:db:46:bc:9b:9a:10:
21:cb:f5:3b:4f:3e:14:53:c5:60:85:fb:d0:87:5c:
5c:32:ef:f9:f4:f2:54:71:04:51:3f:cb:b5:5a:ee:
69:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DE:41:7A:C3:48:A8:7D:C4:51:50:CE:C7:23:38:42:EA:75:04:42
X509v3 Authority Key Identifier:
keyid:63:CB:FC:DA:1D:C0:9D:88:B3:AF:5C:EF:90:DA:01:62:FD:A3:74:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:42:3b:6c:2c:72:e6:29:23:4b:e3:ab:bb:fd:f9:c2:dc:ec:
31:9f:38:66:98:68:97:b6:26:a4:34:76:55:1c:00:45:71:5d:
08:f9:3c:34:ec:c1:db:5b:a5:65:fe:3d:02:2b:72:b2:a4:f4:
4f:0c:83:86:7e:03:fd:0b:c2:74:56:d6:bd:ac:db:36:8a:55:
a8:41:a6:60:c4:62:1a:c8:46:41:42:b7:e3:11:dc:b6:3a:73:
c2:24:cc:85:33:27:d6:ed:f0:ee:74:8b:e8:0b:9c:c6:a8:8f:
3d:6d:c5:a5:d7:d0:3f:e5:16:21:8a:4c:a8:25:14:2e:c8:e0:
94:40:d5:66:f6:7b:18:00:07:1c:6f:1e:4a:bf:1f:00:f8:40:
4e:85:4e:54:b1:1f:cd:c7:7e:71:cc:28:e6:a5:9f:98:3d:ab:
cb:ee:49:4b:e3:06:08:80:75:23:d9:3b:ec:9c:40:05:1e:d1:
53:d3:69:6d:3e:44:f8:ea:b2:d0:ef:8c:99:e0:a4:26:60:5a:
2c:ec:dc:34:04:70:36:6a:26:c9:20:61:88:87:0a:24:3b:ef:
b9:1a:68:79:bf:07:6e:36:a5:81:ce:e0:ec:9c:e7:76:d0:de:
8c:82:3d:68:5f:2b:dd:24:11:1e:f9:6c:62:6c:a1:e2:3f:be:
bc:45:7e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:24:03 2026 by rpki-client