Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
File: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft (raw, json)
Hash identifier: sL5fMpKdZ6QzId00/qB/90/fwBMmRlvaaPKRhqwlt4c=
Subject key identifier: BE:FB:94:5F:EF:5D:59:4B:2A:D4:76:B8:34:F8:AA:B6:61:1F:32:C2
Authority key identifier: 63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
Certificate issuer: /CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Certificate serial: 01A137B64ABD855513976856B903D9A2A14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
Manifest number: 1084
Signing time: Wed 14 Oct 2026 00:00:55 +0000
Manifest this update: Wed 14 Oct 2026 00:00:55 +0000
Manifest next update: Thu 15 Oct 2026 00:00:55 +0000
Files and hashes: 1: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl (hash: 8FTTsmpc+y2GfaKGYALb+ONpUfu1+4J3tKtxEGbbtsk=)
2: aRuatR-K8nQ9ZXL9FpjwSLceO4A.roa (hash: Vt5YWGyW9wbAPKP7kNgM97gFfWqXrRoxA2e6gMj6LNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:b6:4a:bd:85:55:13:97:68:56:b9:03:d9:a2:a1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Validity
Not Before: Oct 14 00:00:55 2026 GMT
Not After : Oct 15 00:00:55 2026 GMT
Subject: CN=befb945fef5d594b2ad476b834f8aab6611f32c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:28:01:66:46:b5:a5:8a:ba:59:ee:a1:25:02:
58:ba:c7:de:c2:13:86:d2:95:00:1d:05:04:7a:4f:
40:6d:e0:10:3e:fe:bb:9e:d7:99:83:34:df:a0:12:
73:a1:e3:d5:86:56:0a:bd:fe:e4:96:83:6b:00:50:
9d:d1:e8:19:f4:ad:af:34:b5:38:a6:61:43:07:7f:
d5:eb:5d:94:a7:e1:45:e2:76:1d:95:c7:ea:1d:bc:
ce:a6:d6:32:d2:e2:ee:1b:cc:cb:a8:ad:80:57:5b:
92:94:c6:52:02:95:b3:8c:af:2c:d5:f5:fc:ba:03:
d5:77:cb:a3:55:2f:57:bb:f7:b6:e9:fe:f4:d2:f4:
63:d0:85:86:e4:d6:54:ea:9e:25:d8:82:4f:83:17:
75:79:31:1d:41:d0:10:ea:bc:80:c0:2b:42:4f:9c:
d3:3a:84:23:a8:db:c6:55:f0:25:c6:1a:8b:44:b2:
26:d7:38:24:a9:22:69:ae:00:f9:10:13:e5:e7:ae:
5b:db:e2:24:c6:69:a9:8b:85:6c:15:58:c4:c7:53:
b4:1c:00:a2:44:76:64:8c:7e:63:7c:b4:19:58:8d:
aa:d7:2d:a4:27:69:ba:eb:9e:c9:ea:1a:0f:21:21:
ba:d8:17:55:08:d7:a6:f3:cf:2b:53:d7:2c:35:2b:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FB:94:5F:EF:5D:59:4B:2A:D4:76:B8:34:F8:AA:B6:61:1F:32:C2
X509v3 Authority Key Identifier:
keyid:63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:04:37:26:65:57:6b:45:de:f3:99:59:ad:9f:37:99:21:a2:
ab:b7:f9:7b:dd:cc:13:2e:be:11:ab:ff:5e:9a:fe:f0:43:9f:
b7:c9:4d:6a:29:29:0d:ad:c9:07:61:22:bb:49:00:37:f0:2c:
07:0e:f5:d0:9c:df:05:54:02:7e:d5:1c:fa:d6:44:db:8b:e4:
86:08:25:d5:37:e6:e7:1b:e8:0b:1c:41:42:56:ba:eb:ab:ce:
f2:68:ff:9e:52:79:85:91:e9:c7:78:2e:e1:f5:6e:e6:c7:0a:
df:c7:d2:60:30:3a:29:9b:54:df:a6:7b:e8:a9:4f:6b:e0:eb:
b9:e3:59:59:72:b7:f2:00:32:32:00:2c:ae:50:c9:60:b5:83:
0d:c3:4a:67:c8:b6:c6:33:00:80:b6:20:93:09:a2:17:93:e8:
7d:0e:06:63:bb:c5:d6:1c:c2:0c:1b:da:93:b2:89:dc:ab:87:
a0:98:0f:5b:6f:7c:77:3e:4a:df:88:a0:20:09:62:88:92:70:
b4:14:41:50:e0:9c:b3:57:5e:2a:26:a6:86:bb:bf:12:1c:82:
64:7e:2a:c6:fe:fd:8a:50:3d:23:42:07:55:3c:9c:bd:ca:71:
79:de:33:42:bf:17:3b:95:1e:b3:59:4a:ff:3d:b6:b8:c1:56:
cc:68:98:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:50:25 2026 by rpki-client