Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
File: pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft (raw, json)
Hash identifier: 1qXm+C8YHWNfF8JqeI1B3WXg9tel71V/lFuU9rFxpfM=
Subject key identifier: 8A:58:0C:D5:46:E9:4E:1A:94:4E:69:DF:FE:E1:9D:04:68:1D:25:82
Authority key identifier: A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
Certificate issuer: /CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
Certificate serial: 01A0CB59DA6F6B0D2A108CEE06F7E4A8112E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
Manifest number: 0ECC
Signing time: Tue 22 Sep 2026 23:00:58 +0000
Manifest this update: Tue 22 Sep 2026 23:00:58 +0000
Manifest next update: Wed 23 Sep 2026 23:00:58 +0000
Files and hashes: 1: XRP_MPkLm_0QssEiTHkCbDrEPpU.asa (hash: synzedK0MZTRSsmmEbbHPfwcXL4mKHgf1KOGnhSnQyw=)
2: nNH6sGpCvz3ezBX3sx86BQOdyAA.asa (hash: GLJegFjrYiTvKngtgiheUKQbcRubxcGvaIy2G1YhBWs=)
3: pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl (hash: cQrxio6QGpufNSmCl7K5vgcAd0qTuC85UlpUrbBJ0Qg=)
4: xSbXTvUREzkzc7-l2JL6Gfg8LbE.roa (hash: /FjGi3zucL1NzNe41iFvx0RHmpavP7RfeWxzQfA6e5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:da:6f:6b:0d:2a:10:8c:ee:06:f7:e4:a8:11:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
Validity
Not Before: Sep 22 23:00:58 2026 GMT
Not After : Sep 23 23:00:58 2026 GMT
Subject: CN=8a580cd546e94e1a944e69dffee19d04681d2582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:2b:27:3a:15:e9:5a:aa:60:d6:34:6d:63:
49:d1:87:1c:03:ec:b5:54:fe:d3:5a:bf:b9:42:b3:
be:34:9d:ec:69:cc:76:6f:c4:28:68:99:9c:83:55:
c6:4e:e9:41:d9:90:ad:62:b0:ef:41:da:81:40:92:
42:79:00:f3:ce:6a:e0:f9:d0:0a:6e:c7:27:2b:ee:
da:d0:90:cd:71:31:26:49:26:c4:7d:42:23:20:c1:
7d:94:75:60:5d:a6:c9:0b:f8:7d:e2:d0:89:2d:1c:
65:a9:b2:29:ef:ff:d1:6f:a2:7b:26:a5:9d:b0:57:
5b:f4:c8:23:b5:e8:99:7a:38:e8:d4:6e:96:71:5b:
62:24:de:ba:91:1e:20:05:10:40:28:40:b2:b0:22:
cd:27:69:2e:3b:9b:69:96:b4:64:b3:f2:e3:e4:c0:
ab:58:6f:c4:eb:d2:df:97:8b:67:bd:df:8e:5c:b5:
ca:a6:85:40:e9:45:16:7d:fd:64:49:91:59:36:2d:
7a:76:b1:45:2e:1b:47:ef:2a:d5:f0:0b:29:a0:1c:
40:76:f4:32:cf:d8:2f:4d:d8:a5:8e:06:0e:03:3f:
eb:fa:8c:7f:f9:45:dd:23:9a:dd:a7:ab:bc:96:5d:
50:5f:f9:89:a2:39:01:62:9b:08:4c:9b:be:45:2f:
27:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:58:0C:D5:46:E9:4E:1A:94:4E:69:DF:FE:E1:9D:04:68:1D:25:82
X509v3 Authority Key Identifier:
keyid:A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e1:13:75:df:84:60:15:77:4e:90:ac:95:6c:7c:7c:c0:f3:
f7:04:ba:ad:f7:c3:ae:cc:9a:2f:dc:a7:27:b1:6a:87:d1:20:
fb:53:2e:9e:75:b1:c5:98:cc:4f:b4:6c:87:9e:88:16:42:9f:
e2:64:72:fe:c6:8f:92:61:0a:dc:df:60:c7:93:de:a1:c7:d0:
6c:18:72:bc:67:47:1c:32:4a:c8:24:00:da:37:5a:ff:00:6b:
65:f5:8e:0b:82:ad:3d:83:8d:83:7c:48:46:23:9e:be:ce:35:
28:c6:1b:9a:8f:d0:e7:38:0f:b0:46:bc:15:84:9d:f8:91:77:
54:5c:06:67:04:47:82:ca:10:4f:44:e8:7c:6b:db:4b:1a:4d:
95:69:93:a9:ce:d5:41:ce:23:d2:e0:29:69:96:9b:3f:8d:ba:
c2:5f:a9:7b:41:ca:17:63:f6:3b:20:c1:1b:40:3a:56:8a:01:
e4:86:4d:94:8c:5b:c6:aa:9c:4b:9e:9a:38:a0:a2:a5:a0:e7:
bb:63:eb:db:b0:bc:bf:ea:72:6e:6e:27:e5:ab:32:14:0e:d8:
a2:97:47:b5:8f:14:26:e6:29:ab:62:32:5f:6d:88:1b:49:9e:
97:4e:50:f3:14:9f:a4:5a:1b:d1:49:53:2b:b4:4e:2c:23:19:
8c:d9:8f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:40:35 2026 by rpki-client