Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
File: 8yyk3zLccfQREE-UtRrBS2Z1gks.mft (raw, json)
Hash identifier: meUnUu5k2esEYNSRDO/usCgD/hmhx+frX5nMzqiO/Tk=
Subject key identifier: 71:10:A8:73:42:F0:F3:DE:A9:77:28:86:4B:FC:05:7E:3B:9C:59:A6
Authority key identifier: F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
Certificate issuer: /CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Certificate serial: 01A1445F666F4612830D0560302A1120A256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
Manifest number: 04E6
Signing time: Fri 16 Oct 2026 11:01:05 +0000
Manifest this update: Fri 16 Oct 2026 11:01:05 +0000
Manifest next update: Sat 17 Oct 2026 11:01:05 +0000
Files and hashes: 1: 8yyk3zLccfQREE-UtRrBS2Z1gks.crl (hash: mx7k8zIQZrLWF+xXH8wPakexGZgCPDwvaMt1qqCbsgo=)
2: YO6OstzVnVo9QhzrIx9loswdAJg.roa (hash: +INj2IveiQZp/sokzKmgLlYwMzOhLR6s+/Ir+302j9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:5f:66:6f:46:12:83:0d:05:60:30:2a:11:20:a2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Validity
Not Before: Oct 16 11:01:05 2026 GMT
Not After : Oct 17 11:01:05 2026 GMT
Subject: CN=7110a87342f0f3dea97728864bfc057e3b9c59a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:fd:10:51:57:8f:9f:6b:71:aa:b7:47:b3:
05:a5:7d:c2:2d:35:95:74:bc:2b:d3:20:d6:e2:30:
5e:29:af:28:8c:fa:39:e8:30:b7:9e:9a:38:7b:55:
57:67:e2:6d:0e:2a:f3:4d:9b:75:2c:01:9c:3f:4c:
75:5b:c5:48:ca:b8:0e:e9:2b:47:59:8b:ca:95:17:
7d:ca:64:b1:eb:63:ce:73:02:5f:13:d8:76:e9:b4:
d4:83:d0:85:a3:21:f2:e8:4f:bd:2b:eb:c8:50:b8:
14:ca:8e:a9:18:77:d0:2a:ee:b9:bd:1b:f2:30:aa:
82:8a:76:af:bc:7f:d0:43:1a:e0:2b:0b:c9:1d:eb:
b3:66:c4:b1:f5:47:2c:4d:c4:8b:9a:ff:16:b1:c8:
71:a2:66:2a:30:60:a6:15:89:9c:57:56:ce:3a:1b:
3b:97:b6:81:19:33:ca:78:c7:ee:5d:61:1e:90:50:
db:4a:0a:88:7a:a9:ad:1d:4d:2e:09:f1:3e:5c:dc:
12:06:c4:1d:81:c8:ef:51:01:24:c9:d7:2a:46:17:
3d:0d:4e:11:ef:93:df:b1:5c:81:63:8c:29:8f:9a:
63:70:2d:b8:ec:84:36:ae:19:2e:af:4f:6a:07:7b:
34:25:a1:7f:2e:68:7a:f9:84:a7:2b:4e:8b:ce:c7:
97:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:10:A8:73:42:F0:F3:DE:A9:77:28:86:4B:FC:05:7E:3B:9C:59:A6
X509v3 Authority Key Identifier:
keyid:F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:08:9d:ae:a3:b3:f0:05:97:47:9e:64:a7:e8:a4:c9:a5:a7:
f9:45:75:e2:52:16:57:0b:92:72:e9:3f:15:3d:b8:29:22:eb:
57:2b:90:d4:12:81:47:75:6c:be:03:86:fc:8c:e0:fb:8e:0c:
ea:eb:d1:98:f9:d4:fd:bd:4f:fa:c6:77:38:8f:a3:ca:73:58:
ad:ee:87:11:79:64:3f:54:68:a0:d4:f0:a0:7d:51:df:31:90:
07:98:14:e4:af:4c:7c:a2:9a:56:a2:8a:29:bb:4b:e8:2a:8e:
ca:3d:99:d1:08:5f:be:e6:0a:bc:0d:5d:bc:6f:ce:a9:3f:32:
6f:49:19:f4:d1:ff:29:e5:29:f8:5d:5c:4b:bd:da:02:e1:57:
9e:8c:f5:a7:94:c2:79:14:40:c5:7b:26:bf:5e:29:73:ec:21:
b2:d7:33:4c:2d:39:4a:7f:e5:ac:f3:ca:ed:d4:ec:c2:3d:35:
dd:ea:a9:83:41:af:5e:d0:91:92:1e:a2:95:bb:78:93:8c:2e:
ba:1b:e9:b7:c9:ba:3e:a7:40:5c:9d:5d:8e:f2:84:79:90:06:
9b:bf:43:9c:72:23:93:39:52:40:e8:54:b7:cf:37:b4:da:6d:
22:89:53:73:d7:84:b5:12:51:33:9c:2a:9a:8f:1d:f8:b4:6f:
07:a5:44:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 22:31:58 2026 by rpki-client