Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
File: PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft (raw, json)
Hash identifier: yAsM/3dXCyVromPbQbNUFqe0XDrbZYOW08OL/OLgDlg=
Subject key identifier: 4E:EF:90:33:9C:BB:FC:92:DE:0C:EC:B7:EC:C9:43:DD:8F:A8:90:BF
Authority key identifier: 3D:8E:9B:06:F5:2C:25:2F:E4:B9:92:DF:6A:60:AF:BA:1E:2A:65:04
Certificate issuer: /CN=3d8e9b06f52c252fe4b992df6a60afba1e2a6504
Certificate serial: 01A029FDB8093461FC82192ADC5320EABFE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
Manifest number: 8F
Signing time: Sat 22 Aug 2026 15:01:28 +0000
Manifest this update: Sat 22 Aug 2026 15:01:28 +0000
Manifest next update: Sun 23 Aug 2026 15:01:28 +0000
Files and hashes: 1: KjEP_FeRjaCDWUpm2501anJue10.roa (hash: CaZmS0hWmvo4gvgK/puCqUe+E5whldBNRP9ESBAkrCs=)
2: PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl (hash: V3h5RHFyyyQ9g6rPn2nqkV0yChBEPU8shhriuXwbqEk=)
3: RfLbU_NtwZVGZGWu9yPN4FC6N74.roa (hash: yuAby2LbbCSpG7kfmQ+En+69+UvEC4Uf5CSlJYEhBKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:fd:b8:09:34:61:fc:82:19:2a:dc:53:20:ea:bf:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8e9b06f52c252fe4b992df6a60afba1e2a6504
Validity
Not Before: Aug 22 15:01:28 2026 GMT
Not After : Aug 23 15:01:28 2026 GMT
Subject: CN=4eef90339cbbfc92de0cecb7ecc943dd8fa890bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:c7:22:dc:27:02:61:c6:f5:d0:e6:d1:b5:
5d:86:71:17:8a:6d:59:26:49:46:37:9a:17:b1:a7:
16:5c:5f:2f:1b:b5:59:f4:07:81:02:7e:b9:26:47:
df:ac:63:3c:d4:cc:77:b0:4a:58:49:5f:a9:13:21:
f2:04:4e:f8:52:9e:d2:51:3e:5d:51:23:99:cb:0d:
c9:6b:19:73:9a:b8:9f:c2:3f:ed:3a:62:e7:d8:db:
96:1f:89:d6:9d:4b:56:a5:38:0b:6f:85:1e:df:c1:
09:43:b9:d2:2b:01:fc:aa:ee:d7:a2:35:dd:72:d4:
e7:82:f9:53:e9:09:cf:2a:04:56:a0:70:c5:8d:ce:
d2:30:b4:ec:88:a3:a5:8d:f1:8b:40:d1:1b:d8:37:
46:b5:e4:df:ec:ec:72:1a:1d:51:f0:6c:39:49:8d:
15:26:82:ec:55:5f:48:d6:1f:70:3a:6c:6c:7f:23:
58:a0:1d:ad:fd:b0:a8:e3:0e:7b:d6:85:58:56:be:
9e:8d:19:a9:fd:0d:82:2c:65:9a:ae:3d:54:a0:06:
e7:96:dc:e7:c2:1b:d3:c8:71:13:b1:e5:e9:ee:51:
fb:b4:19:62:cf:6a:5b:86:40:e3:fd:cd:8b:e7:23:
0f:4e:35:f7:4a:c8:43:79:f2:e9:5b:72:85:c4:1a:
77:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EF:90:33:9C:BB:FC:92:DE:0C:EC:B7:EC:C9:43:DD:8F:A8:90:BF
X509v3 Authority Key Identifier:
keyid:3D:8E:9B:06:F5:2C:25:2F:E4:B9:92:DF:6A:60:AF:BA:1E:2A:65:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f0:1d:bf:55:ab:bb:a8:f7:db:41:81:65:af:be:b5:26:94:
ae:bf:ab:7f:43:65:75:e9:7f:69:d9:1d:5a:e8:3e:6a:7e:a1:
bc:52:86:5a:a1:28:23:5e:b6:22:63:9c:e2:72:c6:42:ca:07:
53:95:f8:02:6d:8a:e4:87:a7:7c:37:79:0e:93:e9:6d:97:f5:
c6:5f:7b:4a:97:d1:4e:8c:cb:a2:cd:f9:70:d2:4f:22:04:f6:
d8:01:b9:11:42:55:b6:6b:b5:e0:97:5f:52:e3:6b:79:51:50:
46:dc:b4:8d:c9:2d:d8:71:e3:2c:0e:47:9c:4c:5b:b4:0f:5c:
43:11:42:b1:79:4d:55:d3:28:43:73:78:82:e1:7a:ff:e7:17:
2e:2d:b1:cc:c4:96:56:dc:18:16:9a:72:2e:08:1d:8c:73:e7:
be:1b:9a:af:7d:48:14:26:a4:4d:ff:96:24:76:09:3d:11:23:
35:5e:20:ba:3e:d9:ba:0f:1f:a6:87:b6:82:fb:6c:c0:f8:d1:
f7:94:10:d3:72:83:49:74:bd:73:7a:37:27:ad:b8:0a:4c:fa:
7f:73:ff:0d:3a:35:8e:53:c0:a1:f2:a4:ac:14:b2:a3:1d:b8:
10:85:e2:23:91:f7:cf:bd:c4:91:57:cd:7b:1f:27:af:0e:56:
ab:72:c2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:11:58 2026 by rpki-client