Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
File: y5idLhUgGyDjQIjdHARVslRE-Pw.mft (raw, json)
Hash identifier: famq4YtmIZf8x5CivTIVbxn/wKxPePlG7+YC9I0DhfA=
Subject key identifier: 08:91:60:CC:56:3B:B5:71:0B:8B:01:0B:20:A0:14:27:76:F2:10:E6
Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Certificate serial: 01A136A37CAD6381009E9989B48986DD5C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
Manifest number: 10DA
Signing time: Tue 13 Oct 2026 19:00:46 +0000
Manifest this update: Tue 13 Oct 2026 19:00:46 +0000
Manifest next update: Wed 14 Oct 2026 19:00:46 +0000
Files and hashes: 1: H7NifDoSU6PPqAYGiGzy4_-XfNw.roa (hash: sk5Lex95/S0IAQQhow818tnsCZwdWLab0EALvw3QhYw=)
2: y5idLhUgGyDjQIjdHARVslRE-Pw.crl (hash: 8z9fO7M9yPfxPBULQ9hD4j46w1jjQgUsDOoM7k1eVOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:a3:7c:ad:63:81:00:9e:99:89:b4:89:86:dd:5c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Validity
Not Before: Oct 13 19:00:46 2026 GMT
Not After : Oct 14 19:00:46 2026 GMT
Subject: CN=089160cc563bb5710b8b010b20a0142776f210e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:4f:9d:01:3d:a7:49:58:09:6a:1c:80:eb:
21:db:99:f7:61:6d:e0:10:fc:31:f3:db:41:44:96:
21:14:bd:46:42:31:d2:6b:c9:f7:5d:f9:cf:1b:49:
cb:88:d2:3e:33:30:0f:ca:87:81:a0:ee:6f:61:22:
f4:c0:1d:2f:72:0b:a6:4b:3e:6b:0d:70:05:7f:60:
41:b7:47:9f:9d:b2:91:82:ce:ec:82:9b:6a:9c:16:
1d:35:06:39:42:9d:94:db:39:4b:4a:ee:d6:45:af:
8a:fc:1b:29:a5:ae:f8:5b:0a:18:50:a9:10:d6:f2:
31:86:2d:ef:ff:cc:04:c8:0f:bf:3c:1b:58:c2:e8:
24:9f:08:7e:12:f6:a0:e7:a9:91:aa:90:99:30:62:
94:2c:bc:81:0d:0b:c5:bc:ce:ed:c3:72:92:da:d6:
45:d2:1f:0e:a5:a0:57:b1:c3:c8:bd:e5:84:6d:08:
40:18:80:f3:17:0e:5a:a1:8c:62:32:12:8f:3f:4d:
7a:12:71:aa:f1:31:47:a6:93:9e:a4:91:73:2b:70:
88:04:06:76:9c:b1:05:51:59:74:ab:40:a4:9a:d5:
07:4d:55:16:14:a3:ff:85:0a:97:da:29:e9:1e:db:
e3:db:02:fc:2c:31:d5:3d:b7:c2:c2:c7:01:ad:43:
12:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:91:60:CC:56:3B:B5:71:0B:8B:01:0B:20:A0:14:27:76:F2:10:E6
X509v3 Authority Key Identifier:
keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:58:26:43:67:4f:7b:6d:34:8e:b9:b6:c3:2a:8b:48:28:e1:
f7:4e:61:15:65:8f:c0:1f:33:45:f9:21:69:21:be:7b:f0:84:
12:9f:ef:f8:48:df:29:16:f6:6f:2e:88:53:ea:bc:0a:8d:24:
de:af:13:64:38:30:33:34:da:c1:6a:51:a1:ac:47:a7:18:b7:
97:a6:1a:a3:1a:ad:a7:cd:8b:db:e9:f7:9c:03:01:25:46:53:
ff:fc:8f:ff:fa:be:92:2c:78:f0:f7:12:82:b5:0b:c4:13:0b:
25:28:b8:dc:0e:cb:fe:e6:17:34:8e:4c:c0:00:3d:44:dc:73:
ad:6b:0c:35:39:95:e2:4d:b5:39:38:ea:21:6c:e7:27:57:fb:
d9:35:96:c9:74:fa:79:25:99:c4:8e:60:5f:7e:f9:50:71:e4:
a1:04:ff:9a:02:72:6f:56:65:f6:df:5f:79:96:c5:fa:67:10:
0c:e7:2d:5e:83:e3:c9:2f:11:fd:1f:c0:87:73:9e:9d:5b:49:
48:4e:78:9b:19:cd:d4:01:05:2d:f2:1a:d6:26:24:54:f8:37:
d3:e0:e8:02:b9:75:1c:b5:03:7f:96:6c:6d:9d:6b:2d:51:48:
11:59:9e:8f:fc:8e:16:6a:c9:13:cb:15:67:84:94:68:7d:5c:
6e:d2:01:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:33:47 2026 by rpki-client