Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
File: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft (raw, json)
Hash identifier: sPUpmZISp2oZcdlcIPu0Y3uhb/WCUTZef4/U4O0FXXE=
Subject key identifier: 37:07:7E:17:EC:06:72:0F:0A:EB:22:97:D6:9D:BE:7A:C4:14:32:2B
Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
Certificate issuer: /CN=63b147f67e8795d959ed3530396d1256055b126e
Certificate serial: 01A101A41F860DD219A8CA64477742B8F28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
Manifest number: 0820
Signing time: Sat 03 Oct 2026 12:01:35 +0000
Manifest this update: Sat 03 Oct 2026 12:01:35 +0000
Manifest next update: Sun 04 Oct 2026 12:01:35 +0000
Files and hashes: 1: Jg9UXomR67ddbwvE12iwfmdXVUY.roa (hash: erQTlvEuRH+/RugmpxhUl/Z+VWvMHHjTv7sIc+sSjyw=)
2: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl (hash: EDWOOPVjGqBdHLeEUxVPGsteqv1l1WoZoQK+L98AzfQ=)
3: uzGW5yZkWFK7XwuN3EgcKBBBYVY.roa (hash: iqNkpecefxjLtGeufMCzfpSJbAjOStGnY7fR2gXa7Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:a4:1f:86:0d:d2:19:a8:ca:64:47:77:42:b8:f2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e
Validity
Not Before: Oct 3 12:01:35 2026 GMT
Not After : Oct 4 12:01:35 2026 GMT
Subject: CN=37077e17ec06720f0aeb2297d69dbe7ac414322b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d1:aa:42:e0:3d:4d:2f:9a:ee:8f:57:ad:2d:
49:a3:12:d9:eb:91:13:e6:c7:0d:8e:80:fa:2f:27:
5c:5c:57:5e:5c:41:09:22:c3:42:95:c8:3e:e3:a2:
0f:48:fa:49:e0:48:19:65:5c:fd:db:11:e5:d5:a6:
b0:f1:56:dc:55:ac:72:11:ad:36:ff:28:f2:2b:b3:
2f:70:a6:57:37:bb:69:00:79:c9:a0:a3:c0:8c:ad:
4d:93:9e:d7:93:99:5e:37:4c:88:9a:98:4d:ed:cb:
8b:b0:68:26:30:3b:ea:6c:99:ba:22:c8:0a:25:3d:
d0:5c:b1:03:3e:1f:c0:98:1b:25:d2:ba:99:84:bd:
0e:28:59:d5:4c:a5:53:29:e7:da:c0:6e:1b:b4:71:
e8:be:b7:67:d2:24:77:ea:4e:76:04:94:e7:cb:17:
04:d5:b6:52:dc:2f:3f:03:cc:9f:2d:c1:48:e1:d8:
91:f7:a1:7e:50:40:17:04:02:ac:d4:d5:a4:87:65:
01:32:ad:ff:b3:5f:1f:f7:9a:2e:58:a7:38:2e:64:
6f:b9:79:9f:63:86:96:1f:f6:18:dc:e1:a8:8b:3f:
59:a0:5f:be:75:56:38:e0:2a:3b:b1:65:2b:bc:12:
43:23:e5:59:70:b3:5a:28:8f:7c:40:60:2d:85:b6:
48:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:07:7E:17:EC:06:72:0F:0A:EB:22:97:D6:9D:BE:7A:C4:14:32:2B
X509v3 Authority Key Identifier:
keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:56:60:96:f9:75:8e:c3:24:09:dc:bd:57:9b:84:76:f1:12:
19:23:5a:13:9c:f2:ac:a8:ea:5c:54:1f:df:9f:4b:b3:d7:da:
4f:33:5e:8b:f3:88:06:24:d4:ff:80:ff:4e:bf:d2:4c:6e:0f:
67:60:24:d0:70:f4:f9:9d:85:ff:c2:d5:85:88:41:dc:bb:53:
08:6f:71:f0:22:c1:41:b2:fc:72:a9:a6:07:6e:84:1e:7c:fd:
c9:30:68:06:b2:ac:f5:73:c2:e0:b9:d2:05:e3:4b:3c:ee:66:
ae:ac:1a:03:ba:4b:1f:bd:fc:86:f5:c0:9c:34:6d:30:d4:63:
b8:3a:c8:3c:fd:0a:04:18:bd:a8:10:a7:08:fe:2a:09:f7:00:
da:b6:df:9c:d7:cd:a7:19:e0:2d:85:87:05:34:f5:75:bd:92:
44:c1:ea:3d:81:e6:49:b1:85:29:74:f5:55:2c:45:4f:f0:db:
c4:e1:9c:ad:90:a7:1c:28:15:50:1a:5f:df:e7:11:52:61:f6:
20:23:1d:66:98:40:f0:3c:8d:a1:f4:af:64:45:bd:bd:17:45:
d4:9a:f2:e4:0b:f7:83:ce:e7:16:9c:60:a8:60:78:1d:16:31:
29:ca:2d:0c:9e:ad:7d:15:8f:6a:8c:aa:a7:30:91:78:ba:12:
24:e3:67:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:51:42 2026 by rpki-client