Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
File: y38v-zmqLfIAS3yhVz0RMXqPt0o.mft (raw, json)
Hash identifier: N6lewiKnsq4raGdtC1qERcxcBq1uuUEFrkIHscLh89U=
Subject key identifier: 9F:32:B3:05:37:87:F3:D8:D6:CA:13:61:BD:8E:25:CB:E4:D0:74:75
Authority key identifier: CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
Certificate issuer: /CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Certificate serial: 019F10E48769BC1E2904E639696AA11E9DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
Manifest number: 019C
Signing time: Mon 29 Jun 2026 01:00:39 +0000
Manifest this update: Mon 29 Jun 2026 01:00:39 +0000
Manifest next update: Tue 30 Jun 2026 01:00:39 +0000
Files and hashes: 1: 6Ns2Tq-n87jQpr-uT64fUsVKUX0.roa (hash: z05GfLGcIJ87A3P7XPgnZqPOo0sEQDgBgR5Fwhr1K/M=)
2: vBFUgAPrb_za250_sAWNgAKVaak.asa (hash: b0gKI4/m0v9gKs9clAAyF8VJb5SwiSpATYcLJDL8KGc=)
3: y38v-zmqLfIAS3yhVz0RMXqPt0o.crl (hash: nWWLwkhsxodPdfE/2lUqlpIvsg1Ckptm0k2SYDeqmvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e4:87:69:bc:1e:29:04:e6:39:69:6a:a1:1e:9d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Validity
Not Before: Jun 29 01:00:39 2026 GMT
Not After : Jun 30 01:00:39 2026 GMT
Subject: CN=9f32b3053787f3d8d6ca1361bd8e25cbe4d07475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:bc:97:31:39:59:17:05:3b:67:5d:03:f2:
25:fa:ee:d0:76:54:b1:01:15:0e:1d:6f:2c:5b:55:
85:97:9e:47:20:0d:c8:ba:fc:65:01:72:f2:21:7d:
94:c3:85:ee:0c:e4:1e:ba:a1:c7:a1:e1:2e:1f:93:
53:3c:d3:81:4d:0b:a8:1e:5f:ab:c3:ff:6d:6c:f2:
ad:a2:8a:58:12:4f:51:b2:b6:21:84:9d:ce:02:b6:
c1:b4:ec:1b:c9:4e:5b:3d:7e:46:1f:dc:56:10:2d:
eb:49:d8:47:03:03:94:b1:ad:2e:bb:e6:84:ba:f6:
8d:1f:74:5e:46:ce:ca:dd:de:1e:f0:dc:aa:55:ac:
a4:a9:60:e0:69:fb:61:27:59:47:df:e8:81:09:24:
12:8c:bf:ad:75:bc:a4:b0:f9:b0:27:71:d2:3c:56:
51:e9:55:ed:9b:89:7d:81:42:c6:2b:7e:33:26:23:
8f:8a:e4:89:1b:98:32:e4:90:9a:87:30:24:55:45:
82:03:74:9e:f0:e0:65:55:7e:69:ef:97:a1:e2:4d:
2f:ca:80:1b:bb:8f:3d:06:d3:8e:e4:13:37:a1:bd:
e8:ca:05:76:c5:1a:05:87:1d:b2:2d:d9:a1:94:66:
4e:4b:9b:fb:33:a2:2f:0e:92:6c:c4:b4:c4:82:b0:
20:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:32:B3:05:37:87:F3:D8:D6:CA:13:61:BD:8E:25:CB:E4:D0:74:75
X509v3 Authority Key Identifier:
keyid:CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:47:e9:82:4f:56:f0:7d:97:c9:35:a6:10:9f:e8:52:40:5f:
0f:9f:b5:ac:aa:ed:e6:40:47:62:7d:3e:78:42:18:07:19:ab:
82:06:b0:71:62:3d:1d:27:b4:cb:68:ff:7d:ae:73:a6:c2:59:
41:7f:03:72:3e:07:72:79:e5:b2:6a:8d:46:f6:06:bc:c3:64:
e7:60:22:bf:f1:0c:21:28:5b:1e:b1:65:d6:80:99:a3:a1:bb:
8d:a8:8c:c8:19:9b:03:f5:82:ff:7d:b0:67:65:d5:b9:f2:49:
79:f3:5c:36:79:87:80:77:30:19:69:ac:e0:0a:8f:bb:0c:0d:
c6:95:19:17:bd:0f:ba:03:d8:5b:99:da:63:a8:a7:50:b8:74:
95:ab:39:4b:eb:ab:aa:6f:97:c0:dc:26:0f:d4:95:38:9c:56:
50:c7:37:b3:d8:ac:2c:1a:12:91:58:c8:3e:06:21:96:bb:06:
b0:96:50:40:93:70:e8:62:91:e0:6f:56:f2:6c:0e:c9:2b:57:
40:70:98:40:35:e8:20:f3:1d:54:f1:56:d9:e0:40:15:07:e9:
df:19:91:c1:00:c8:bc:df:0b:ba:32:bf:64:c2:6d:a4:29:e9:
64:08:4f:6d:0d:2a:27:7a:de:0e:b9:48:d5:81:82:36:61:45:
67:24:c3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:51 2026 by rpki-client