Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: Izi8cysjB/efttNyh7KMw8Uw/7uJDvqLwjUEI45jpYg=
Subject key identifier: 47:02:48:4F:DF:C4:34:7F:D6:BA:35:D3:53:65:85:4A:25:89:57:8C
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 019EE81FAD64E057A8E3728500048DB27051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 0FF3
Signing time: Sun 21 Jun 2026 03:00:50 +0000
Manifest this update: Sun 21 Jun 2026 03:00:50 +0000
Manifest next update: Mon 22 Jun 2026 03:00:50 +0000
Files and hashes: 1: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: OcKIZU3Ykg/hMPGQAIgBV3Q8TxaOAKTjZc4gka7Qtms=)
2: cIwuNOBQZVEAKmirlwvqGCKlAVA.roa (hash: MTQrQYMht/gMO7+xqgltPlCnk6FhdwKMEakt6nRw8pI=)
3: xTW_lD5hyFR2vQYBVeIQ8tHTVWU.roa (hash: +MCBleBXBQDx6fs7+ejDOMAZrsryKfTQT1EHgUrcOhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 21:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:1f:ad:64:e0:57:a8:e3:72:85:00:04:8d:b2:70:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Jun 21 03:00:50 2026 GMT
Not After : Jun 22 03:00:50 2026 GMT
Subject: CN=4702484fdfc4347fd6ba35d35365854a2589578c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:30:b0:ae:6b:60:b0:4f:25:a3:96:ee:c8:
5d:60:53:56:5b:05:c8:ff:9e:ec:c8:4e:40:be:5c:
d0:41:21:a0:34:c3:80:74:3e:3c:62:29:99:c6:2d:
3a:e5:6f:b6:49:20:06:cb:67:75:1b:56:50:bd:d4:
d9:e8:ab:fd:d8:c3:81:a3:96:c0:bb:65:5d:c4:c2:
17:b5:aa:70:7e:bc:83:aa:d2:f1:ba:47:f6:8c:16:
b1:44:d0:04:29:2e:35:fc:33:af:b8:61:ee:6a:7c:
f5:1a:15:9d:b7:c1:cb:72:43:e5:c8:99:37:ad:4e:
15:e7:21:d4:54:aa:97:dc:b9:87:0c:9d:d2:5a:cc:
71:64:e0:16:d6:d9:ef:05:c2:3a:73:f5:da:3f:d5:
17:b4:dd:f0:04:92:09:58:b4:3b:f5:b9:ec:1d:42:
a8:ac:6c:98:2a:0d:5c:3b:b2:52:69:d3:52:19:64:
57:4b:66:cf:a6:f8:52:b0:ca:b4:af:39:7f:a8:14:
2a:36:f9:f4:d0:bf:25:99:67:cd:c3:4c:4f:37:24:
fc:f5:6c:74:45:5f:50:df:95:77:95:82:65:14:1f:
55:8e:6b:88:a3:c2:a9:4a:98:45:27:0b:57:2b:7f:
27:fd:7d:2b:b6:b3:61:3c:44:f7:10:fb:41:ba:2a:
bc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:02:48:4F:DF:C4:34:7F:D6:BA:35:D3:53:65:85:4A:25:89:57:8C
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:60:10:ff:8b:a8:1d:0c:dc:45:ea:7f:12:aa:d6:20:ce:f9:
67:de:8b:15:57:fc:04:55:df:1a:3c:8f:a7:43:ac:5a:9c:e7:
ef:fe:71:bc:88:d9:12:a0:9b:3c:dd:7f:fd:96:b4:ff:cd:18:
f3:27:1b:19:35:02:55:dc:5a:ef:ee:c5:95:89:3c:ba:5d:dd:
9a:5e:99:c8:bb:8c:c4:29:7d:65:29:4e:07:34:33:57:4e:d8:
36:2e:bf:41:3e:b8:e6:ba:9f:ea:d0:75:7b:cc:89:52:3a:8f:
c5:1d:bd:41:74:06:94:7a:27:1f:36:e6:d1:db:67:4e:b2:10:
9b:ee:bf:7b:2d:a7:66:5b:a9:43:4e:7b:38:70:bd:01:be:73:
f5:48:e8:87:49:d3:64:bb:8d:89:0f:91:8c:04:33:71:b2:7b:
66:84:bd:29:56:e4:41:ae:d1:a3:aa:2e:d2:56:dd:b7:90:8d:
de:b0:14:3a:f1:89:25:19:35:73:76:10:5e:60:22:b7:bb:fd:
c0:3e:69:d6:5f:a2:26:ee:ef:27:f1:5c:09:27:17:21:bb:19:
ea:6a:64:66:09:f4:34:e2:e5:51:ad:6e:88:c7:91:dd:68:b0:
6e:67:30:a1:8d:b1:55:31:4c:a3:1b:2d:1a:b6:4e:c1:db:4b:
5e:85:5c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 04:50:58 2026 by rpki-client