Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
File: Y0JgC_HMkhaub-FpoenVQYrZOiI.mft (raw, json)
Hash identifier: 5I/r4NBLdUXhRdAciKH2wk/7hdB3kKnDft8mNtR0pFo=
Subject key identifier: A8:26:5B:7A:D7:FA:9E:88:24:C2:3B:1B:16:85:16:BC:E8:1C:96:85
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Certificate issuer: /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial: 01A1295639F3D2334EBC782CDF3AF2CB577C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
Manifest number: 10CA
Signing time: Sun 11 Oct 2026 05:01:19 +0000
Manifest this update: Sun 11 Oct 2026 05:01:19 +0000
Manifest next update: Mon 12 Oct 2026 05:01:19 +0000
Files and hashes: 1: 51U34o8JYb8CQVhcBv2qFWgAPgs.roa (hash: xu3fMRX2q3+Mv4t+1E/L+4OKYLdaxsUvme7/Xi7jOeA=)
2: Naj_hbjSCfJxAXzUztYdICw-HJU.roa (hash: oHxNo2orkmmjEzObI45+SgF12BlHV9OAFLzlNY9SiB0=)
3: Y0JgC_HMkhaub-FpoenVQYrZOiI.crl (hash: qiniRzCVzXPBkT5MWEHhw0H0zkfUAdO5fT6OsYnl0to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:39:f3:d2:33:4e:bc:78:2c:df:3a:f2:cb:57:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Validity
Not Before: Oct 11 05:01:19 2026 GMT
Not After : Oct 12 05:01:19 2026 GMT
Subject: CN=a8265b7ad7fa9e8824c23b1b168516bce81c9685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:90:0d:09:80:6e:f3:4f:bd:3e:29:92:ee:af:
d8:e8:e9:83:9e:7a:68:b4:0f:89:db:2b:a7:a0:22:
c9:66:60:5e:8f:96:ab:cf:95:01:19:e1:a9:56:a2:
aa:c8:1f:29:96:b7:94:9e:07:b8:0a:62:4e:7a:0c:
00:f1:bb:29:cc:b1:91:f2:42:e3:fb:93:db:88:65:
65:12:8f:9c:8b:48:5e:68:34:50:e7:dc:8f:de:b4:
d5:64:06:e1:65:1e:b6:ef:40:66:ca:32:94:87:2b:
d5:04:1a:eb:8b:01:72:1a:5b:00:eb:58:f2:84:86:
3c:bd:28:a9:a9:af:8b:46:ac:2b:a2:c0:7d:d8:69:
f8:c3:8b:99:62:50:04:5a:66:ec:20:c0:ee:59:e1:
3f:53:67:40:ea:07:5f:c0:da:7f:ee:84:f5:00:4d:
12:43:bd:12:bf:5e:97:85:38:4a:ef:f5:38:ca:f7:
8a:3e:8c:bc:81:9e:a9:83:80:4f:6c:19:33:16:a9:
52:65:92:96:a2:83:64:22:55:44:e8:1f:78:35:c4:
4a:ca:f9:89:52:0b:07:01:fb:78:b5:32:84:b4:19:
04:66:9e:cd:0e:ff:28:af:ee:b0:bf:37:3f:51:cb:
81:61:74:c6:2d:bb:48:38:bc:6c:57:79:e9:35:e2:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:26:5B:7A:D7:FA:9E:88:24:C2:3B:1B:16:85:16:BC:E8:1C:96:85
X509v3 Authority Key Identifier:
keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:0f:0d:a7:25:9a:7d:70:e6:e7:d0:cb:b0:52:6f:39:43:5b:
fc:b4:f0:da:d2:59:96:14:7b:db:bd:f2:2d:b6:45:8f:45:d1:
ad:5c:73:02:af:ba:26:17:6d:25:51:7e:15:63:cf:80:f5:b6:
63:59:12:07:d1:8e:cf:ef:0e:c4:33:b2:7d:45:0d:6c:4e:ed:
4d:28:d2:1c:64:b6:3d:1f:da:c1:53:08:51:42:99:aa:28:00:
07:76:9b:55:81:ce:f9:fe:74:a3:57:72:89:2b:33:16:26:32:
2c:00:ff:ac:43:41:d0:75:5c:a6:fa:b6:77:ed:d7:ac:ba:16:
b1:9a:1b:e9:b8:90:42:49:29:9b:49:19:25:7e:d1:1a:c8:ec:
41:18:7a:cf:c4:33:4b:44:fb:b5:ce:13:de:d8:a3:02:31:1b:
9d:ce:92:52:be:66:fa:be:71:31:ab:bd:fd:c0:a6:a6:77:80:
ac:4d:1f:68:c8:ea:23:33:df:e1:6d:53:af:2e:48:87:30:24:
3b:41:3c:d4:92:ef:a4:33:5a:ce:16:a1:03:43:02:93:eb:22:
67:37:dc:a9:9f:02:2d:73:db:4a:25:ca:c8:09:a3:7e:fd:12:
a6:b9:33:4f:3b:ac:ad:fe:fb:f8:57:7e:56:5b:a2:44:f1:54:
28:34:b5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:59:08 2026 by rpki-client