Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
File: Y3A8pQxDKs1_HLunwH2iICKZymM.mft (raw, json)
Hash identifier: bYPl8ZIpD8NT6pB8KY//XoxDgDff6vUxSaGBahj1nLg=
Subject key identifier: 32:44:46:9B:6A:0F:0A:C1:21:91:FB:AD:79:B0:2B:30:EE:90:EC:38
Authority key identifier: 63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63
Certificate issuer: /CN=63703ca50c432acd7f1cbba7c07da2202299ca63
Certificate serial: 019EBAA2D59DE2CF10C6FF09892892D01125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
Manifest number: 165C
Signing time: Fri 12 Jun 2026 07:01:34 +0000
Manifest this update: Fri 12 Jun 2026 07:01:34 +0000
Manifest next update: Sat 13 Jun 2026 07:01:34 +0000
Files and hashes: 1: 8sUmY3d_fBjNKoah_kXD2nXdcuY.roa (hash: 97Wzx4qbPJ85JZpPVzF/01GChfo0hYHtP4G+A4D6wjE=)
2: Y3A8pQxDKs1_HLunwH2iICKZymM.crl (hash: 3EdZdCba5L/y6h+N9jS94gyACh/PLwjVrsV73DMXyeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:a2:d5:9d:e2:cf:10:c6:ff:09:89:28:92:d0:11:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63703ca50c432acd7f1cbba7c07da2202299ca63
Validity
Not Before: Jun 12 07:01:34 2026 GMT
Not After : Jun 13 07:01:34 2026 GMT
Subject: CN=3244469b6a0f0ac12191fbad79b02b30ee90ec38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:1e:09:fc:30:30:39:df:65:cd:80:fa:db:
85:b8:1c:e3:1b:cd:33:63:96:f1:fe:2c:7d:20:36:
9b:69:17:43:42:f9:28:17:4f:e9:77:93:4d:c7:9f:
06:27:68:2d:8a:80:fb:5d:33:f4:9d:1b:27:99:ea:
fe:82:11:2a:42:4f:5f:13:a8:1a:34:69:cb:91:d9:
f7:57:2e:be:71:85:2e:97:78:ab:24:0d:e2:85:a1:
a1:de:e1:0d:4b:98:51:b0:fe:91:69:d3:da:4c:36:
1e:ea:5e:51:fc:13:e3:7e:f3:63:d9:2d:bf:97:11:
6b:f9:f3:70:4c:d4:b4:7f:11:69:e0:40:21:cf:fe:
d1:63:bc:b8:54:0f:db:7d:53:83:a4:5b:f4:86:fe:
a1:ef:8f:c9:36:b3:f6:0e:45:83:57:22:87:bb:73:
d0:a1:26:bb:0c:b2:76:ee:98:31:7f:1a:73:71:01:
e5:14:b5:fd:70:08:04:6b:f2:3e:c3:72:8c:42:d4:
6f:da:4f:6b:5b:4e:ad:e9:d5:89:a6:f9:ad:34:11:
28:34:24:c0:5b:54:14:52:cc:1e:f2:64:e5:64:af:
8b:ae:7c:f0:51:5e:ab:ef:37:f3:92:fb:37:c0:af:
d8:1c:81:00:31:65:d8:2d:45:07:22:c6:84:3b:b8:
34:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:44:46:9B:6A:0F:0A:C1:21:91:FB:AD:79:B0:2B:30:EE:90:EC:38
X509v3 Authority Key Identifier:
keyid:63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1a:9d:38:fe:62:ce:94:d3:8a:4e:bf:ac:a9:22:ea:87:0a:
c2:a7:b0:6e:72:64:2a:a0:51:55:39:5a:47:dd:3d:a5:cb:35:
23:52:50:27:4f:9a:4e:f1:84:dd:f8:da:83:37:06:7e:b3:f6:
e2:e6:69:52:cc:fb:62:03:a3:3a:e9:c8:b8:e3:9a:45:3a:63:
aa:fa:3b:42:34:66:f2:08:34:db:59:83:2e:57:5a:8f:50:ac:
64:42:6a:f8:5c:d8:f6:e7:15:1c:98:b9:14:18:82:ed:2a:1e:
9f:7e:4f:15:89:3b:72:53:15:5a:57:35:37:ce:54:a5:c9:83:
cd:10:9e:c4:c9:28:86:45:11:1c:f9:2c:90:52:3c:db:d8:61:
29:ef:2d:15:7a:88:47:26:4e:93:a6:0e:96:4c:76:be:09:f6:
21:d8:03:df:5b:12:a7:32:e2:11:2c:9f:2e:3f:90:da:c6:27:
81:7d:b2:47:98:75:82:e6:d7:05:97:4a:0e:73:00:37:41:0e:
d6:d2:2b:e4:3f:03:85:0c:96:af:8c:36:04:fc:85:72:01:8e:
6e:1f:48:ff:55:59:38:01:3f:0b:cb:3f:c9:9c:9d:2b:91:91:
53:a4:35:94:01:21:21:87:cf:a7:87:1d:80:39:d6:7c:d5:a0:
04:e5:f2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:27:42 2026 by rpki-client