Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
File: y38v-zmqLfIAS3yhVz0RMXqPt0o.mft (raw, json)
Hash identifier: Iqk4+/EEkuSvjr+RCRwTP2HW56AtmgQEqIQ9M7EEdd4=
Subject key identifier: C8:5B:22:90:B6:A6:89:54:54:DF:5E:58:03:E2:C0:3F:29:C9:9D:CF
Authority key identifier: CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
Certificate issuer: /CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Certificate serial: 01A03C3ADBA62CD109809D814C83B8129B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
Manifest number: 0237
Signing time: Wed 26 Aug 2026 04:01:25 +0000
Manifest this update: Wed 26 Aug 2026 04:01:25 +0000
Manifest next update: Thu 27 Aug 2026 04:01:25 +0000
Files and hashes: 1: 6Ns2Tq-n87jQpr-uT64fUsVKUX0.roa (hash: z05GfLGcIJ87A3P7XPgnZqPOo0sEQDgBgR5Fwhr1K/M=)
2: vBFUgAPrb_za250_sAWNgAKVaak.asa (hash: b0gKI4/m0v9gKs9clAAyF8VJb5SwiSpATYcLJDL8KGc=)
3: y38v-zmqLfIAS3yhVz0RMXqPt0o.crl (hash: pyMgB2nkC9t4tNPPRgt2yyptEXPwgy+ZlRukcFgU2Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:3a:db:a6:2c:d1:09:80:9d:81:4c:83:b8:12:9b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Validity
Not Before: Aug 26 04:01:25 2026 GMT
Not After : Aug 27 04:01:25 2026 GMT
Subject: CN=c85b2290b6a6895454df5e5803e2c03f29c99dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d3:0b:01:f9:58:52:d5:fe:d2:61:15:fb:d6:
48:fe:1e:84:c4:cd:0b:aa:56:97:11:3b:f7:5a:be:
b9:6a:8f:1b:d5:23:14:a4:96:6e:72:17:88:05:5b:
37:7a:52:da:99:ee:3d:b4:7a:67:c9:f5:8f:a0:e5:
bc:d7:e4:19:15:6c:de:d2:6e:68:20:55:bf:1e:78:
d0:11:27:cf:c2:ff:e5:02:c0:7e:22:87:7e:47:a5:
72:9e:11:22:9d:bb:f3:91:44:60:d6:f8:1a:06:05:
f3:17:04:12:ff:62:2a:6a:61:4b:d1:83:a7:4b:07:
21:c8:ca:32:53:d2:b5:d3:4b:82:db:69:6e:20:82:
26:d8:8c:62:fe:bb:22:ef:65:10:51:7e:eb:41:87:
a5:f5:ec:ed:0b:2c:f9:85:52:e2:61:19:7e:04:b4:
a5:89:ed:a8:dc:70:8c:db:47:3a:39:e0:ac:15:08:
9a:f2:80:86:9c:d4:ef:87:74:93:82:1d:66:cf:46:
fb:24:21:f1:1f:87:6c:d2:f5:4c:dc:d5:74:16:47:
8e:21:96:11:b2:06:e8:35:be:48:36:46:f9:1a:bc:
8e:dd:5b:3c:d3:f1:01:48:5e:ef:3e:d2:dc:50:14:
f6:7f:ae:e1:f2:df:a0:a6:58:9f:51:b6:e3:f9:9e:
aa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5B:22:90:B6:A6:89:54:54:DF:5E:58:03:E2:C0:3F:29:C9:9D:CF
X509v3 Authority Key Identifier:
keyid:CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e2:16:de:78:32:d1:75:a9:59:da:bf:c4:eb:ee:45:52:e5:
79:a8:21:3f:2e:4d:06:a9:39:6f:62:f8:b4:1f:33:c8:92:40:
b9:31:dd:ff:b8:ff:c2:4f:50:1f:ad:49:53:80:64:97:36:90:
d3:43:5f:f0:7d:16:17:64:b1:c2:c7:de:ee:0b:2e:a8:76:5e:
c1:e5:f4:a8:c2:70:b7:d9:27:23:5d:33:a6:31:7a:8e:ef:82:
3b:e3:34:7f:84:28:83:1c:dd:f3:05:a1:6e:fb:51:fa:62:11:
f4:fc:8c:16:80:61:d8:7a:0c:ea:9e:80:ad:3b:9a:b3:a3:61:
50:15:42:f5:69:fb:26:05:56:7b:57:2f:5e:e4:87:c1:45:02:
47:18:cc:82:cf:f3:93:01:10:d3:30:34:5f:b4:24:74:c7:8b:
48:37:c1:65:89:9b:32:a4:33:30:b5:25:ec:9a:ec:35:b9:a9:
60:b3:48:67:fa:cd:e8:8f:47:ce:3e:e9:1d:99:e0:55:02:cb:
43:36:ef:1d:e2:4c:12:c9:cb:af:86:8d:18:ac:22:87:e9:13:
85:05:bc:e2:09:f0:87:05:e3:4f:05:cd:79:74:37:5a:08:6a:
72:25:39:d2:bc:81:57:2f:0a:cb:b4:e1:c7:c9:b1:ed:21:4a:
df:56:a6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 09:47:34 2026 by rpki-client