Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
File: yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft (raw, json)
Hash identifier: c9wK2tpdKe3ihgQOUHrNka0SLuZ92ZKA9mLszFHXf1I=
Subject key identifier: B7:78:0C:27:1A:1F:D3:67:31:F6:25:EE:88:09:63:66:7C:31:81:42
Authority key identifier: C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
Certificate issuer: /CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Certificate serial: 01A0FCB4B6324FBF34DC852E9AEBC17596A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
Manifest number: 1A87
Signing time: Fri 02 Oct 2026 13:01:36 +0000
Manifest this update: Fri 02 Oct 2026 13:01:36 +0000
Manifest next update: Sat 03 Oct 2026 13:01:36 +0000
Files and hashes: 1: DQIguyk5vsbJ0WUq91-VKOsHIzc.roa (hash: 7wVw6qQqVdHA1hWjDiCXVImmM58vnAnP1SdP0652WV8=)
2: vYK77FNt1GtU4kxqqT6prWNdHv0.asa (hash: SpkNgSEBNtdc4X2ATiCX/JpdFP0WNomdyv6Ot3VcmYM=)
3: yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl (hash: tHjOPlpzDNXKddJ7//oSJD+cYYROX9DQNHl7cGwM9ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:b4:b6:32:4f:bf:34:dc:85:2e:9a:eb:c1:75:96:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Validity
Not Before: Oct 2 13:01:36 2026 GMT
Not After : Oct 3 13:01:36 2026 GMT
Subject: CN=b7780c271a1fd36731f625ee880963667c318142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:0c:c0:2a:7d:c9:fc:b0:dd:0a:2d:c7:71:
de:08:6e:00:7c:0b:96:65:6c:0f:cc:3d:3d:d2:8e:
d6:f1:f6:81:c1:77:28:fe:ed:52:e4:a3:bf:e5:a8:
5a:2d:9a:96:cf:65:52:23:60:d8:16:81:9d:b1:52:
4a:1c:77:34:66:af:14:16:68:0c:08:92:07:1a:53:
e4:9d:b9:56:89:7a:0b:1f:d0:37:8c:83:49:03:03:
af:76:41:0f:2d:0e:10:5d:2e:ca:f1:e8:b8:88:8c:
78:e5:da:1a:8d:2a:61:a0:07:b9:83:5f:57:5b:5c:
6f:a7:35:24:eb:9d:88:3a:80:39:6b:88:52:94:3b:
4b:c2:a1:6a:3b:b2:51:ff:de:27:67:97:8d:3b:4f:
d9:72:9b:b8:3f:cb:33:b5:bd:00:cd:c8:e1:98:f1:
3e:bf:11:5f:0c:03:7c:34:a3:9a:09:11:af:6c:a6:
77:d0:66:77:b3:76:87:26:07:02:51:51:6e:4f:9d:
a2:fd:d1:da:d6:16:44:f8:60:8d:26:97:88:09:9e:
a6:d7:12:9a:07:1c:a3:6c:a7:d8:c0:bf:6a:86:ba:
af:be:b4:c6:51:1b:13:27:a4:9e:f9:e1:e5:75:d6:
90:c2:05:81:d5:5d:8b:f7:e4:97:0c:f8:ad:c2:6a:
5b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:78:0C:27:1A:1F:D3:67:31:F6:25:EE:88:09:63:66:7C:31:81:42
X509v3 Authority Key Identifier:
keyid:C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:86:66:86:3e:a4:e4:a9:c3:6d:aa:08:cb:09:94:7d:b3:81:
7e:77:16:8b:3c:83:75:53:b1:73:de:fd:51:d1:f8:7a:47:43:
f1:bb:e1:ee:ea:a1:d1:8d:70:e3:d5:e4:ed:95:5e:f0:fe:d6:
e7:3a:4a:65:25:b0:39:8b:ef:6d:bc:3c:9a:cd:77:f7:4c:75:
f9:1e:f7:8f:dd:8b:2e:df:fd:d7:e5:dc:6c:9c:76:b0:b2:e4:
a1:73:51:a5:42:d4:76:9b:65:b4:55:19:1f:18:cc:4e:3c:b1:
e3:a4:03:b5:4c:3f:db:1f:3f:7c:b5:d4:ec:72:ee:41:43:9d:
4a:24:96:55:9e:b7:c4:8c:67:1d:f2:b7:e8:6a:65:95:2b:c9:
cd:55:f0:c9:5c:76:2b:c5:65:a4:6f:3a:b4:c0:2d:f6:5e:05:
e1:3b:b7:3d:6f:9f:32:bb:a7:e6:b2:c9:b1:6f:32:c3:bf:e2:
49:b5:42:c2:76:2d:9e:1c:ff:bf:16:92:96:ac:cd:b6:ca:ae:
46:fe:16:a3:25:fc:87:54:f2:7c:3a:73:03:8a:d2:a3:25:41:
45:a4:c0:64:ad:56:db:75:10:74:b7:3f:c4:dd:f7:80:0c:7c:
1a:f9:f8:49:c2:3f:ea:ad:76:7b:18:a9:9a:30:53:4d:1d:99:
28:84:25:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 20:58:33 2026 by rpki-client