Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: cyeY/dfrOX2ncsjuG+CyKW/ZAU4QFekmPGwJ5t0rezg=
Subject key identifier: 33:AC:62:5D:89:10:13:E3:38:2C:A5:FA:E2:01:7E:6B:14:17:A1:12
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 01A1DB384F81244F03C14C38FB0364B29423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 117A
Signing time: Sat 14 Nov 2026 18:01:03 +0000
Manifest this update: Sat 14 Nov 2026 18:01:03 +0000
Manifest next update: Sun 15 Nov 2026 18:01:03 +0000
Files and hashes: 1: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: +xJZPkQaCuvrIu5XceCO0FHa6BYl42gBthzfIQifzDI=)
2: cIwuNOBQZVEAKmirlwvqGCKlAVA.roa (hash: MTQrQYMht/gMO7+xqgltPlCnk6FhdwKMEakt6nRw8pI=)
3: xTW_lD5hyFR2vQYBVeIQ8tHTVWU.roa (hash: +MCBleBXBQDx6fs7+ejDOMAZrsryKfTQT1EHgUrcOhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:38:4f:81:24:4f:03:c1:4c:38:fb:03:64:b2:94:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Nov 14 18:01:03 2026 GMT
Not After : Nov 15 18:01:03 2026 GMT
Subject: CN=33ac625d891013e3382ca5fae2017e6b1417a112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:06:38:03:b0:00:87:de:36:bf:2e:59:6c:16:
97:09:da:5d:2b:46:19:27:ae:52:66:d7:44:d7:2a:
5c:18:ca:52:99:c3:94:00:9f:c4:74:07:bc:e9:4d:
2c:30:00:98:5f:3f:18:82:6f:c4:10:fa:8d:f3:01:
64:43:cd:7a:74:94:1e:dd:f5:67:0e:20:98:fe:22:
7c:74:1a:07:e2:77:67:a8:c8:67:22:62:a5:57:84:
d2:72:a3:8a:db:99:06:95:e5:1d:a4:d3:fa:c3:82:
2f:ed:81:15:47:cb:99:fa:c0:1f:bc:4f:4e:54:73:
96:51:8f:d8:06:12:86:0e:1e:1b:1d:af:85:72:46:
f1:73:26:3b:f0:a8:64:89:6a:d0:4d:bc:06:e7:76:
eb:f0:7f:40:8b:f8:7b:ca:b5:a6:05:a4:73:ef:6a:
ed:ba:8a:35:c1:9e:12:52:2c:0c:68:9a:4f:61:ce:
21:2f:6b:7e:a5:33:24:9a:3f:b5:4a:c8:8f:22:ff:
30:dd:82:2a:a8:fe:d8:13:ee:b4:97:79:cf:38:10:
85:1b:a7:36:57:f5:e3:dd:20:c2:7c:a2:3d:3c:0a:
84:77:7d:b5:82:54:0e:7c:bf:6b:c8:77:6d:c9:9a:
d5:be:30:39:72:07:b8:46:b9:27:d6:09:a4:c7:a5:
2c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AC:62:5D:89:10:13:E3:38:2C:A5:FA:E2:01:7E:6B:14:17:A1:12
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:15:aa:b8:58:0f:1c:88:58:bd:3c:6c:27:5e:48:ec:49:66:
54:0e:ee:d5:9a:99:cf:c3:82:82:30:31:38:45:db:07:90:70:
ca:bb:f9:a5:3a:dd:31:4f:d2:83:56:11:1e:5a:b8:ad:4e:27:
35:bc:9a:28:cf:7f:1d:b5:81:2a:f7:9e:15:d4:0f:48:0f:53:
4e:0d:b7:d2:a6:b5:65:d5:fa:4e:1f:b4:55:1c:44:68:c6:56:
c0:bb:d1:ba:68:2f:58:1f:94:49:0a:eb:5d:56:47:54:f4:ae:
c9:9b:9e:3e:17:30:bf:25:2a:98:d8:9f:77:ee:e9:49:12:0a:
82:62:8e:82:1a:75:18:d9:3b:f6:d8:95:10:a4:4d:ed:bc:31:
e6:2f:45:15:bf:27:54:73:a4:a8:3c:c0:2f:02:57:ba:4e:d0:
ba:5e:2c:39:de:2b:e3:cd:65:3f:cb:53:7a:df:ed:7b:30:a4:
a4:fc:81:9b:73:31:28:60:1b:f9:70:e7:bc:4b:1c:d1:2a:f9:
0d:24:c7:06:e0:b0:97:76:d9:8d:e0:00:4e:71:5b:24:df:6a:
20:58:9f:ad:29:89:1e:a8:3c:8f:8e:85:ba:d0:fd:8d:92:f9:
01:ff:54:59:98:fa:16:8c:71:b6:42:7b:c3:d6:ad:50:c3:84:
a1:45:f2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:39:50 2026 by rpki-client