Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
File: PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft (raw, json)
Hash identifier: CASIItBM3WzuXB50g26nNHAczcfesN+booutsOrYtCE=
Subject key identifier: CC:3A:C1:66:E1:C5:1F:86:09:BC:55:2E:DE:3E:CF:E4:4B:A9:9F:1B
Authority key identifier: 3D:8E:9B:06:F5:2C:25:2F:E4:B9:92:DF:6A:60:AF:BA:1E:2A:65:04
Certificate issuer: /CN=3d8e9b06f52c252fe4b992df6a60afba1e2a6504
Certificate serial: 01A13C378A02A33360E77ED650330CA4F92C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
Manifest number: 011D
Signing time: Wed 14 Oct 2026 21:00:35 +0000
Manifest this update: Wed 14 Oct 2026 21:00:35 +0000
Manifest next update: Thu 15 Oct 2026 21:00:35 +0000
Files and hashes: 1: KjEP_FeRjaCDWUpm2501anJue10.roa (hash: CaZmS0hWmvo4gvgK/puCqUe+E5whldBNRP9ESBAkrCs=)
2: PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl (hash: Sv4BqLr6mvjzwnfyTSfGj82fV8kBiFnqbPWCq5JPekE=)
3: RfLbU_NtwZVGZGWu9yPN4FC6N74.roa (hash: yuAby2LbbCSpG7kfmQ+En+69+UvEC4Uf5CSlJYEhBKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:37:8a:02:a3:33:60:e7:7e:d6:50:33:0c:a4:f9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8e9b06f52c252fe4b992df6a60afba1e2a6504
Validity
Not Before: Oct 14 21:00:35 2026 GMT
Not After : Oct 15 21:00:35 2026 GMT
Subject: CN=cc3ac166e1c51f8609bc552ede3ecfe44ba99f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:eb:d0:ef:92:81:92:94:27:35:ae:85:50:
ef:df:c9:c3:5d:d4:e5:46:1a:c6:86:e0:1f:73:25:
93:a7:85:7f:0d:09:d3:a7:d0:4b:dc:fe:15:eb:1c:
e9:37:6a:9f:3f:91:f4:12:49:20:09:75:a9:e2:7d:
db:0c:fd:0b:8e:42:43:15:4c:c2:8e:93:b2:2d:61:
9f:3f:d2:58:5c:ee:8c:32:6b:4c:3c:7f:84:c9:cd:
f8:9f:e0:d3:e0:28:22:e5:9a:d4:31:eb:d9:4a:a1:
88:ce:22:f2:7a:3c:89:83:05:7a:8b:d2:17:41:9b:
bb:3b:b4:12:2c:2e:e2:0f:7d:dc:f1:65:95:d8:11:
89:ef:cf:f2:68:a6:69:f2:7f:23:71:e3:6e:a8:14:
d4:ce:6a:49:3f:26:9a:ff:8b:98:c1:e5:7a:ca:ff:
60:9c:4c:45:4b:88:83:8b:24:d1:e2:fd:b0:26:26:
56:fa:d1:47:a9:b5:2c:27:98:1e:1f:30:55:06:8b:
99:56:e7:8f:f8:af:79:18:d7:b6:10:23:19:ca:81:
58:d9:1b:1e:d1:8b:94:b1:83:bb:59:58:4e:03:c0:
81:6d:0f:0e:29:4b:02:da:11:5c:09:af:0b:d9:65:
b7:ec:5b:c7:ba:c7:d0:75:78:90:78:c3:62:15:37:
27:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3A:C1:66:E1:C5:1F:86:09:BC:55:2E:DE:3E:CF:E4:4B:A9:9F:1B
X509v3 Authority Key Identifier:
keyid:3D:8E:9B:06:F5:2C:25:2F:E4:B9:92:DF:6A:60:AF:BA:1E:2A:65:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:64:03:f7:3f:53:a7:a9:c4:98:2b:03:e0:dc:f0:3b:5a:45:
b7:26:46:29:34:2a:79:ad:4c:18:0c:8b:5d:81:d5:a7:8e:b1:
b8:e1:7f:ae:0e:41:f5:59:30:2a:44:a0:f2:1a:d3:23:01:83:
0e:a2:92:4e:5c:e5:8b:52:fa:e0:12:98:a6:d8:22:70:00:d3:
6f:cc:3c:ea:85:9e:cf:0c:1c:dd:9e:e2:0b:13:bf:f0:29:59:
c2:bc:04:b6:82:3a:5d:f6:d6:58:be:cf:ea:a1:89:34:02:1b:
7c:3f:56:e1:a5:89:68:dc:23:88:6d:15:ed:1f:30:99:07:75:
be:fe:39:9a:27:34:8e:5c:e8:0e:af:d5:b1:9a:70:bf:a0:71:
e7:e5:c7:98:e2:f1:47:58:03:51:20:07:46:e4:76:f3:fa:86:
12:e7:fb:44:b9:78:c4:34:de:fa:78:3a:f7:63:6d:04:7b:b3:
60:e3:56:ad:b3:6a:a6:c2:38:da:0e:05:b3:03:ea:8d:0c:d5:
89:3f:dc:08:9f:c3:b8:e7:8c:97:ef:27:49:d1:98:c9:ff:2d:
a3:9d:f6:f8:6d:c1:d6:f9:06:8a:22:9c:9f:a3:52:ad:a4:5a:
91:18:4b:a0:1a:28:c5:44:45:a1:5c:73:8e:3c:60:51:bc:18:
d1:1e:34:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:25:14 2026 by rpki-client