Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
File: A_P-YHUIK-jliDKbQ9dhv257AdA.mft (raw, json)
Hash identifier: 2aPntTDWbDKsjYcukw8WHCe7+9lMpnczdFYyvMUaBoI=
Subject key identifier: 07:F9:28:05:89:76:B4:8F:D1:D1:02:8C:12:91:E6:0D:44:38:42:6B
Authority key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
Certificate issuer: /CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Certificate serial: 019F17F9654BC74DB76431F5CC54471B7BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
Manifest number: 0BBB
Signing time: Tue 30 Jun 2026 10:00:47 +0000
Manifest this update: Tue 30 Jun 2026 10:00:47 +0000
Manifest next update: Wed 01 Jul 2026 10:00:47 +0000
Files and hashes: 1: A_P-YHUIK-jliDKbQ9dhv257AdA.crl (hash: qYNuPzKThoSs4v1RLMbYzvvrkMhcqsLFYRcyFERi/qI=)
2: y8-TomRf2SfXgjAfIqDbASYx4Kw.roa (hash: uG779XP+SowZScRgyybF2Yr7PqJO6NR4pXnq6h4jggk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:65:4b:c7:4d:b7:64:31:f5:cc:54:47:1b:7b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Validity
Not Before: Jun 30 10:00:47 2026 GMT
Not After : Jul 1 10:00:47 2026 GMT
Subject: CN=07f928058976b48fd1d1028c1291e60d4438426b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:58:57:b1:2e:30:ec:fa:f3:7d:56:fb:ab:
8c:bf:a4:26:07:12:eb:df:1f:af:ee:6c:4c:28:9e:
f4:53:6a:2f:33:48:8b:40:b2:71:1f:d5:70:51:9e:
21:2c:9a:22:f5:69:33:57:04:08:93:f7:69:ae:21:
49:7c:6a:71:d4:f3:42:99:bd:44:53:86:ba:53:63:
fc:6e:e2:0f:5e:49:42:88:ec:01:cd:2b:53:46:1f:
27:9e:e3:6c:6f:4c:8d:d0:85:18:ce:74:d1:d8:76:
21:47:3a:4a:b4:c5:d9:7e:44:ab:b0:c1:36:e2:e9:
93:d2:05:9b:24:e6:f8:e9:c2:33:f9:94:59:37:d8:
a7:df:b0:e0:ed:8a:6d:93:a2:39:28:98:7c:92:43:
94:fe:73:92:1f:69:8e:c4:21:49:72:84:1a:b0:3f:
a6:b5:c3:95:d3:68:b3:7f:fd:3e:46:fd:1a:64:d5:
95:40:96:0c:0b:40:ed:22:3d:ce:95:04:91:7f:6b:
b9:f8:e2:b8:c5:c8:2d:24:ab:1b:86:43:e9:57:33:
46:70:b7:f1:9c:87:f4:96:60:f5:3b:01:53:87:0b:
92:c0:53:93:a3:cb:8f:1c:25:96:20:85:28:39:d9:
f1:7d:42:10:69:51:1c:e1:90:d6:1d:fc:f7:e0:6f:
71:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F9:28:05:89:76:B4:8F:D1:D1:02:8C:12:91:E6:0D:44:38:42:6B
X509v3 Authority Key Identifier:
keyid:03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0b:19:87:1a:4e:be:aa:a3:b9:f4:8e:bf:3b:4c:5b:76:c2:
1d:ea:9a:02:b7:9a:7c:b2:4d:76:cb:2d:32:0e:f6:91:5c:76:
14:c2:fc:9e:25:12:88:8b:c1:92:c5:e1:cb:92:31:6e:5f:00:
90:0d:56:d9:35:73:d7:7f:10:2b:d5:e7:aa:1e:bd:2d:c8:ff:
0a:f1:d4:f1:5a:ed:46:75:61:ab:f2:8b:97:f3:80:a6:ae:78:
a8:87:6b:32:54:3e:ae:7b:36:00:cd:53:79:f3:e7:22:fe:c1:
ae:83:a7:e6:5e:56:ea:15:6a:4a:d2:f9:e2:c3:06:8d:a4:f5:
24:dd:e2:ef:cf:f1:3d:e6:7c:38:c6:ce:e3:99:8f:a9:a9:44:
ab:c7:ac:41:ac:32:e2:78:c0:83:77:89:6b:77:77:b4:af:c8:
70:05:da:5c:cb:df:32:ee:f7:cb:7b:9a:dc:60:81:48:2f:2f:
a4:6b:01:b8:79:60:68:70:26:94:26:0c:b1:f2:96:d8:37:81:
d1:c6:41:12:4e:d8:ba:be:51:cf:13:07:91:fe:72:df:4e:1b:
2c:72:40:73:c1:c1:0f:57:f4:a6:fe:99:1a:76:e2:10:13:70:
c7:12:f1:3c:a5:8a:69:44:67:be:f5:d6:29:7a:a6:49:96:8f:
47:8a:35:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:15 2026 by rpki-client