Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: 2F+OOOyR0NaoFmbi+MNd1T9aKSZSfXa4Apr1Y0Doc1w=
Subject key identifier: CF:DB:08:AE:63:35:9D:AC:CF:82:D8:D8:7D:28:33:5A:9F:D3:CA:39
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 01A08A8C5D37BEA0771E5E2DFD942ADE9AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 1973
Signing time: Thu 10 Sep 2026 09:00:49 +0000
Manifest this update: Thu 10 Sep 2026 09:00:49 +0000
Manifest next update: Fri 11 Sep 2026 09:00:49 +0000
Files and hashes: 1: Lsrf7nsJ0SILJoz91hQ7QSVYOyM.roa (hash: e35RQqzj6QwkN2NUro/zWKe5ECceCwxDtJyTfKjd9Gc=)
2: XCiWygchwIEKERqPFwZ00-sFrY0.roa (hash: tFv0lTiieMgtOpoLPIFuEMNuZOBOLhYh1Oi1gR7OKqY=)
3: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: eKde0lC9K6EF1/sgZAiYBN7c60CDQtsCaKAVrZRFrjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:5d:37:be:a0:77:1e:5e:2d:fd:94:2a:de:9a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Sep 10 09:00:49 2026 GMT
Not After : Sep 11 09:00:49 2026 GMT
Subject: CN=cfdb08ae63359daccf82d8d87d28335a9fd3ca39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d6:ef:99:dc:24:68:be:8d:d6:f2:2c:01:89:
3a:c3:65:a6:74:63:fb:d1:7c:dd:3d:d1:07:12:05:
e8:3b:fe:d9:47:df:7f:6e:45:82:fa:1b:2a:3f:16:
62:62:a9:fb:db:1b:73:b1:23:f0:80:a4:ff:e3:92:
b6:b1:03:f7:57:95:41:7a:c3:95:f6:c8:93:23:ab:
c7:99:7b:0f:d6:e9:12:ce:fd:d9:c5:fe:8b:fa:66:
4c:ce:53:ed:fb:94:51:78:2e:fa:69:09:00:3b:15:
0e:0a:f9:bd:16:3b:8b:08:09:14:23:78:e4:33:4b:
e6:da:84:4b:f0:05:fc:c3:06:30:5a:3e:ba:0f:22:
fc:f0:09:2d:21:21:f1:93:79:68:81:ad:88:e5:e9:
2b:06:2b:f0:86:b0:c1:70:cf:49:dd:6e:4f:ee:4d:
76:a5:3f:e7:be:d3:ff:68:90:39:da:90:b1:b9:73:
e9:0d:8d:50:78:7b:90:37:e9:ce:5c:97:94:18:69:
24:bd:18:89:19:d7:2e:35:ed:af:0f:b4:61:b4:b0:
3a:7f:14:08:24:4d:ef:7a:f1:2d:8d:0d:b7:7d:c2:
0a:d4:f1:ed:c6:3c:11:dd:c5:3f:5c:88:8e:6b:86:
9e:57:69:2d:45:33:af:65:c7:a4:02:74:d1:e6:82:
18:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DB:08:AE:63:35:9D:AC:CF:82:D8:D8:7D:28:33:5A:9F:D3:CA:39
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3b:65:b5:dd:2d:f1:1e:20:be:d4:0d:a5:77:5a:40:33:93:
a9:fa:6a:2b:40:23:95:ed:af:db:6e:48:37:c0:3e:83:02:54:
91:ae:3e:cf:a0:7c:1a:46:99:57:99:be:89:41:90:81:8b:77:
eb:e9:c3:2b:91:0a:e5:03:93:09:dd:7d:df:b6:c0:11:f9:5f:
5e:0a:9a:89:0b:0b:28:43:e3:2f:1e:ce:45:d7:46:61:ef:a5:
c2:dd:87:55:72:8a:cb:5f:c8:a6:40:9c:d9:ed:f4:b0:8e:de:
26:e3:3d:6a:38:13:fe:59:ec:1a:ab:d8:cc:8b:81:20:e2:94:
de:31:8d:fb:70:b5:cc:e4:82:02:91:fa:d7:fd:67:a9:d8:5c:
f2:60:b5:1e:23:13:e6:a9:89:8c:14:da:23:d8:ad:a0:d7:43:
84:54:e9:52:9d:9c:c7:5e:11:9e:2e:41:f8:27:85:e7:71:9f:
ea:44:31:20:24:80:e3:2c:b2:e2:5c:9c:87:ef:82:8b:3e:88:
5f:4c:af:68:65:3d:4e:c7:b9:c3:e6:a0:78:38:b1:ac:93:0d:
e9:0a:87:11:a8:1d:08:b2:f7:d4:1d:2c:87:38:02:f4:63:6d:
17:70:fe:47:a6:d1:70:3d:3d:4d:72:a8:4e:2d:9b:ad:8e:35:
c8:f3:16:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:30:26 2026 by rpki-client