Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier: xT1Vl8WFCUtrJsNWM6rXCUBqQH6GDIKaE8jaPZm9v/8=
Subject key identifier: 8E:F0:B0:0B:C3:6D:7A:AA:F7:FF:66:82:EF:AD:A8:F4:3B:12:B7:65
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial: 01A0C58EE647712B0FDA0C86955FBCE16786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number: 1A6F
Signing time: Mon 21 Sep 2026 20:01:11 +0000
Manifest this update: Mon 21 Sep 2026 20:01:11 +0000
Manifest next update: Tue 22 Sep 2026 20:01:11 +0000
Files and hashes: 1: XZ3sAdabDoOYfBZeEJolsMalQgs.asa (hash: XHuxusmmi3am2aFGs60mmc2MCFL+zmd66reyxUPLwTI=)
2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: pSb50ZjtUEGmWji/koi8TWAtnoPyCarTY1F6gVX8A0c=)
3: nibctkm7wr91rBA37l_8PQxYVLc.roa (hash: VamjklOdSeVjkVgODzUFUtdlbnnylLnD0/pDvfa31T8=)
4: t8mVoTfmckCvsyVdwBCx2WY3_SU.roa (hash: punRHqDIXE83AX4muw8qvjP6n1JcfvmchVlgv85rsL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:e6:47:71:2b:0f:da:0c:86:95:5f:bc:e1:67:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Validity
Not Before: Sep 21 20:01:11 2026 GMT
Not After : Sep 22 20:01:11 2026 GMT
Subject: CN=8ef0b00bc36d7aaaf7ff6682efada8f43b12b765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ae:b8:ca:9e:7c:ca:a7:56:94:f9:fd:62:7d:
bd:a0:33:9a:82:23:e7:71:47:22:44:f2:7a:78:1c:
79:a9:aa:64:7f:0d:77:6c:7d:10:c5:93:f2:36:a7:
63:1c:d8:47:34:67:cb:f1:b7:1a:92:43:22:d8:af:
4b:dd:39:3d:4c:17:94:c1:6f:16:1b:a4:2f:c6:0f:
e1:01:30:81:b7:87:24:4f:b3:0b:0d:da:92:0f:2a:
59:42:14:ef:ff:70:8b:3f:9d:93:ef:43:86:c7:de:
aa:86:64:46:7b:4f:35:08:17:56:d1:93:b5:7b:d0:
fc:6a:56:61:f9:55:6c:3b:77:aa:89:93:e4:df:88:
aa:fb:b8:6b:9f:3e:e3:44:55:27:28:29:e6:38:bc:
86:6b:a5:82:7c:6c:a4:50:1d:76:ca:dc:d4:76:87:
bb:4d:2a:2f:69:17:44:e6:3e:63:0f:c4:24:0b:60:
1b:d7:e8:f5:ee:b3:3a:5e:39:c6:2a:86:2a:bd:0b:
06:3a:42:78:67:35:20:fc:45:05:98:22:52:37:73:
7a:46:18:c9:24:95:31:2d:bc:d1:66:0c:0d:50:79:
ee:51:17:16:b7:66:24:7b:e9:a6:c6:fc:38:1c:4d:
9f:f5:b9:87:96:fa:3d:20:40:0b:d8:98:0c:c9:d7:
ef:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F0:B0:0B:C3:6D:7A:AA:F7:FF:66:82:EF:AD:A8:F4:3B:12:B7:65
X509v3 Authority Key Identifier:
keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ce:bd:de:dd:09:10:67:a6:67:b3:4f:15:54:4c:47:eb:c9:
09:91:0f:c2:d9:cd:33:19:24:ba:69:e7:b9:80:46:a0:17:a1:
d5:0c:40:5e:a5:d4:5d:60:a3:18:c9:5d:52:da:03:29:d3:b7:
ae:05:da:68:85:af:fb:53:c1:79:50:00:5f:70:60:92:8c:1b:
eb:18:72:3f:a0:07:cf:2b:b3:77:2e:61:e3:e4:12:74:78:4c:
63:11:3d:76:8f:3e:5e:94:64:13:f1:33:31:de:54:2e:7c:17:
63:98:35:7c:e1:4b:c6:4a:4b:d6:2f:d4:73:49:24:04:36:dd:
55:67:05:41:85:ca:64:09:4e:74:cb:27:0b:f8:b2:59:ad:db:
20:8e:df:bc:9c:d2:ef:8a:04:c3:91:b9:cd:2c:8a:18:06:39:
1b:0e:47:16:65:1a:a7:69:b3:a1:fe:06:cb:98:a7:3b:60:d9:
30:a3:db:b5:b1:c9:49:bb:bd:7e:cb:d7:a6:0a:4b:c0:92:34:
bd:b7:f1:82:a6:11:cc:f5:1d:f9:19:d0:68:90:e3:02:1b:87:
e9:e8:c2:a5:c5:7c:e1:45:fb:f1:38:3b:45:31:9d:0f:68:49:
57:83:d0:04:88:90:b2:ea:b7:0b:e2:67:03:b1:43:fd:99:9d:
bc:1d:60:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:08:52 2026 by rpki-client