Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier: x9FGE5rwRKHToV1r0/Jj7Go6wn/pjf09XORMPTzpEcg=
Subject key identifier: DE:98:45:9B:9F:F9:D1:07:07:CD:81:7D:40:D7:01:88:F8:5D:2C:A3
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial: 01A1051351B9A235E2FB4C1594ADE1574B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number: 1A89
Signing time: Sun 04 Oct 2026 04:01:54 +0000
Manifest this update: Sun 04 Oct 2026 04:01:54 +0000
Manifest next update: Mon 05 Oct 2026 04:01:54 +0000
Files and hashes: 1: 1-Npj9uH2lNWYpla7MTqgqwt83iQ.roa (hash: JQmankrBVBlqdCQ8Vwvu+tFNWtJX5/kU02hONf99fCo=)
2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: 8AyLtMMigqPaZrYz353a9yHCFDg5205OU2lHDwgd4IE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:13:51:b9:a2:35:e2:fb:4c:15:94:ad:e1:57:4b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Validity
Not Before: Oct 4 04:01:54 2026 GMT
Not After : Oct 5 04:01:54 2026 GMT
Subject: CN=de98459b9ff9d10707cd817d40d70188f85d2ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fe:dd:56:f0:06:dc:dd:a6:5c:fa:f7:d1:f7:
be:c4:4e:80:d4:a5:b3:da:10:be:bd:5c:ab:f3:f1:
f5:15:c7:20:ae:81:f8:94:f5:97:cd:41:bc:90:48:
d5:a5:4b:ca:d1:67:df:5b:13:b0:95:f9:65:f7:79:
d2:4d:4f:7d:b0:51:e0:85:17:cb:6b:e5:11:74:a8:
6c:14:cc:19:a0:2e:06:0b:21:25:70:1f:c5:1a:2d:
e5:e3:4b:3e:81:b2:d6:91:76:27:d1:39:1c:eb:06:
1c:4c:f8:61:5d:83:c7:08:17:24:19:54:86:3a:3e:
15:16:8a:c2:ac:dd:77:3f:ac:f7:bd:0a:47:4b:d1:
d1:ca:d4:d4:1d:36:18:b0:ab:71:b1:ab:61:4a:6c:
75:58:3e:1e:2e:23:44:3c:82:a1:1b:1f:00:14:c6:
39:7d:19:49:64:5d:e7:c1:09:6c:a6:c2:42:0e:f2:
9f:a2:d7:d4:b5:69:08:fb:dc:fe:b4:cf:90:e1:98:
04:ac:bd:6a:5b:2d:21:27:33:03:b5:7e:5c:08:cd:
2a:52:3d:2f:d4:cc:b1:ed:b1:20:ad:c9:a8:16:43:
16:9b:bf:aa:56:d0:c4:51:96:17:4a:e0:29:54:5e:
bc:5b:75:df:7e:ef:93:93:f5:6e:c0:5d:c8:88:f7:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:98:45:9B:9F:F9:D1:07:07:CD:81:7D:40:D7:01:88:F8:5D:2C:A3
X509v3 Authority Key Identifier:
keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:43:cd:2e:5b:30:cc:39:d7:a2:b2:ea:52:21:f1:74:6c:bc:
8c:ef:8b:2f:13:ba:84:2a:76:35:53:b5:71:24:4a:fe:1b:6c:
2b:f4:8b:70:6f:49:5b:44:3f:71:25:f3:c5:82:db:57:a4:35:
66:1f:33:ae:de:bd:a0:7e:d5:b9:42:16:f9:b3:ef:af:92:80:
a2:0f:67:7e:c9:96:97:eb:95:6f:4a:39:ec:73:5b:b9:c9:cf:
c0:77:b1:1f:08:87:1e:94:a9:1a:2d:90:f7:f7:7f:a4:5f:ec:
59:7e:0b:a1:df:12:d4:5a:87:5f:d7:1b:61:da:ea:6a:94:cf:
60:51:99:54:d4:fe:e9:1a:39:84:25:39:ca:08:ac:9d:f5:41:
46:ff:ee:6c:99:3a:45:47:74:56:6f:e0:b3:88:12:c5:2e:46:
4c:7d:fc:31:43:35:6a:0b:5f:76:86:b0:7b:ab:66:bd:8b:dd:
dd:b4:e7:81:e4:99:7f:48:f0:24:2b:13:7a:7b:46:21:2c:20:
67:52:3f:7c:63:b1:77:87:6f:dc:d3:26:45:a0:0e:c4:55:b8:
42:20:ed:47:ef:d5:56:50:46:c8:f2:43:1f:cf:d0:35:11:4a:
20:ba:11:d8:d4:4a:5d:cc:d4:a2:8b:3a:65:9c:8d:b0:fc:b3:
d5:49:b5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:45:23 2026 by rpki-client