Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
File: Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft (raw, json)
Hash identifier: goCM//1d0IZXVmhPorKIq5MiwgkLzYfmX8aMrKKbquE=
Subject key identifier: A8:E7:56:74:E3:F7:75:3B:1E:DD:85:19:15:13:13:6F:A2:78:0C:16
Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Certificate serial: 01A13559B9A3DB85A01A237EDF1D6FF1FBC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
Manifest number: 10A1
Signing time: Tue 13 Oct 2026 13:00:34 +0000
Manifest this update: Tue 13 Oct 2026 13:00:34 +0000
Manifest next update: Wed 14 Oct 2026 13:00:34 +0000
Files and hashes: 1: LDt7gaxmt08mgFC-M4WkB6Rh2M4.roa (hash: GmZKtwbYE0ZQZpsBSkP4BAk8kkV/eLe4GNjMQ2lsJKY=)
2: Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl (hash: hUNtEiSVn0ovDW3KixQzfdSUewkGLdVrZB87n/zOApM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:59:b9:a3:db:85:a0:1a:23:7e:df:1d:6f:f1:fb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Validity
Not Before: Oct 13 13:00:34 2026 GMT
Not After : Oct 14 13:00:34 2026 GMT
Subject: CN=a8e75674e3f7753b1edd85191513136fa2780c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:db:64:07:8d:d9:ab:7a:a4:d1:49:41:ac:0e:
d4:54:f6:3a:fb:3f:bb:17:ac:d2:5e:b3:14:32:a6:
38:f5:21:b9:b4:88:a1:38:18:f2:9b:c9:b9:b6:d1:
4d:28:6c:6d:3e:8a:2a:34:62:0d:38:e3:6a:1c:8e:
e0:38:3d:4c:81:5e:0d:d5:bd:d7:bb:f2:fb:0f:82:
c8:d5:8e:fb:25:07:e3:c3:79:34:c7:f9:4d:c1:bb:
f8:a0:87:83:c9:fa:91:db:8a:0f:3c:31:31:08:88:
f5:cb:10:7e:4f:4c:ed:b7:92:2a:4f:40:58:25:06:
d8:32:58:48:3f:fd:85:48:4a:92:1a:b6:0e:52:0d:
cc:5c:dc:db:cf:70:3d:98:0b:b7:41:d4:c8:67:2f:
71:91:2d:9a:a5:2a:0f:15:cd:dd:2d:98:6c:ae:2c:
4a:71:bb:ea:52:66:e9:2a:11:f8:89:27:76:b3:49:
27:85:8b:41:5b:73:1a:37:00:1f:30:09:a6:78:bb:
a3:9c:88:9e:d0:62:24:69:9c:26:49:47:60:3e:e9:
2d:25:11:2c:4a:e1:c1:94:56:c6:7b:6d:0a:6c:c3:
b4:fa:eb:af:ee:19:4f:17:91:73:4e:d9:19:fb:cc:
1e:78:e9:26:ea:93:dd:05:70:b0:3a:a4:72:46:c0:
7a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E7:56:74:E3:F7:75:3B:1E:DD:85:19:15:13:13:6F:A2:78:0C:16
X509v3 Authority Key Identifier:
keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:82:9c:8b:76:eb:bf:87:38:77:8f:4e:ba:e2:80:bb:5f:70:
46:e9:85:e3:b1:d3:39:ba:ba:26:6e:3a:c0:f6:b2:4d:b8:a3:
00:0b:75:5a:41:37:78:1a:c6:5e:e9:61:5f:34:73:fb:3f:78:
65:91:f1:50:6e:cb:55:5a:e9:4b:0c:80:4e:43:71:c9:30:4f:
65:29:ec:af:62:18:6a:0b:3e:7b:a0:91:df:57:b9:a5:f4:04:
5c:ad:5b:02:7b:04:59:e3:4e:2a:8a:88:43:e2:20:05:ca:26:
9d:81:49:05:2d:88:b7:e8:6c:d5:f3:70:f4:b5:37:ea:83:52:
af:d0:23:d0:ea:b5:50:b1:87:cf:76:28:a1:51:ad:9b:18:cd:
f8:7d:e3:9c:48:1d:13:eb:d0:32:0d:df:55:11:47:00:41:12:
7f:84:08:d2:52:05:f3:94:8c:1a:ef:ac:91:48:38:2a:cd:a0:
14:b6:2e:fd:c7:09:4d:7a:ee:78:06:87:00:91:07:e7:40:e3:
9e:98:4c:d5:ad:fe:10:e3:ae:80:3e:38:f1:b3:1d:5e:a2:fe:
fe:fa:0a:6b:22:4d:b4:c1:90:37:b9:48:ab:76:cf:f1:e9:1c:
4c:5b:62:6a:a4:6c:55:5c:13:92:3b:64:d4:98:33:8f:a5:72:
48:3c:76:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:42:30 2026 by rpki-client