Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
File: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft (raw, json)
Hash identifier: 0IMiNrpRO01rG/WntOjFFZhpiU6QPQ/7Q2ywHx3X80M=
Subject key identifier: 6D:EE:90:76:26:BE:73:46:07:80:CC:32:7A:DC:34:BE:FE:91:51:CC
Authority key identifier: 63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
Certificate issuer: /CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Certificate serial: 01A12A3196C81FD27069A3EAA75AB5376249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
Manifest number: 107D
Signing time: Sun 11 Oct 2026 09:00:55 +0000
Manifest this update: Sun 11 Oct 2026 09:00:55 +0000
Manifest next update: Mon 12 Oct 2026 09:00:55 +0000
Files and hashes: 1: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl (hash: iMEkdJI+8yd+oMYOCkyIaJ5skTOw1jL28J1UDbEp3Xo=)
2: aRuatR-K8nQ9ZXL9FpjwSLceO4A.roa (hash: Vt5YWGyW9wbAPKP7kNgM97gFfWqXrRoxA2e6gMj6LNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:31:96:c8:1f:d2:70:69:a3:ea:a7:5a:b5:37:62:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Validity
Not Before: Oct 11 09:00:55 2026 GMT
Not After : Oct 12 09:00:55 2026 GMT
Subject: CN=6dee907626be73460780cc327adc34befe9151cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:49:07:20:26:eb:55:1f:2b:59:9b:d5:5a:
ba:3b:54:ad:2b:b2:af:7b:cf:43:46:71:91:f5:95:
ef:29:99:6e:48:3b:1a:7a:68:34:b8:2a:d2:4a:76:
e5:74:be:13:43:89:d0:1b:78:7d:82:84:1b:33:13:
a5:38:52:5b:e8:73:9e:16:a5:e0:be:99:68:04:01:
73:ac:8c:07:53:bf:11:b0:79:97:d5:f9:73:a0:21:
92:00:bc:9b:ca:47:4f:d6:77:3b:78:43:75:17:fd:
d3:c2:c6:b2:43:a4:9f:5c:cd:29:33:6f:1c:fc:b0:
88:2e:8b:a1:43:b0:e3:db:ae:ce:50:2b:2c:1c:da:
8c:01:90:1e:2d:ac:b1:85:03:5c:e7:10:c5:7a:f4:
3c:0f:46:a3:fe:12:a7:2c:c6:af:67:7d:79:5e:cc:
24:4a:f6:bb:94:c0:d4:47:3d:1d:82:3d:3f:8b:55:
77:ec:17:06:36:70:e7:1a:08:7b:2c:14:b3:80:53:
19:c9:ae:81:5e:18:56:e1:65:da:08:03:1f:ab:88:
13:c5:3f:71:d6:26:a3:72:82:25:db:df:01:33:b8:
f3:57:23:61:5f:27:91:91:c4:1f:e9:9d:f0:54:87:
7d:d2:54:8f:b4:2d:fa:b5:a3:d3:c0:1f:91:6f:97:
68:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EE:90:76:26:BE:73:46:07:80:CC:32:7A:DC:34:BE:FE:91:51:CC
X509v3 Authority Key Identifier:
keyid:63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d0:00:dd:34:49:e1:52:cc:34:6e:22:9c:5d:81:72:4e:85:
8b:0b:fe:c1:f4:d5:68:c6:bd:e8:5c:c5:b5:eb:98:8d:b0:d9:
f7:78:ee:17:72:7d:49:0e:3e:f1:62:fe:ae:0e:cc:72:d1:0e:
32:f8:5c:84:34:6f:f0:92:de:3a:96:27:0a:a7:ac:be:4c:82:
9a:63:1f:6d:93:cd:52:ae:3a:e5:63:91:a1:1d:dd:88:d1:4c:
e9:3b:5a:f6:3d:5e:bf:79:0d:79:70:61:e4:40:2e:14:24:03:
2a:d2:c2:b1:31:54:09:05:6a:a7:7c:33:9d:28:b5:3d:eb:3b:
a1:f4:d4:1e:a2:12:0d:2b:29:29:8e:db:7e:7f:c8:33:9b:11:
a1:3e:91:36:df:7b:bb:f0:e2:01:2a:8d:1b:fe:14:d0:81:7c:
d3:de:ce:bf:f2:a5:b8:b2:ea:61:29:5c:2d:5e:a8:89:c8:b7:
2a:e8:27:42:dc:b3:87:c4:02:a4:b9:f2:f9:37:91:dd:93:74:
67:22:ff:33:69:16:02:82:cb:2f:ae:ee:35:78:85:c4:1e:c4:
e0:a7:85:70:f2:04:19:44:ef:b4:86:5c:9b:4d:4f:46:19:07:
85:4a:c9:55:8f:ef:30:b5:6e:48:11:6c:fb:34:04:f9:56:7e:
6f:8c:22:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:07:21 2026 by rpki-client