Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
File: PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft (raw, json)
Hash identifier: zGyZs6DZqsB5wyCgNwGVWhcmjVycitn6bKomFZ9GF08=
Subject key identifier: 3A:EE:C6:DA:6C:21:02:D9:AC:DD:C0:90:67:82:A0:01:CB:D8:BD:CE
Authority key identifier: 3D:8E:9B:06:F5:2C:25:2F:E4:B9:92:DF:6A:60:AF:BA:1E:2A:65:04
Certificate issuer: /CN=3d8e9b06f52c252fe4b992df6a60afba1e2a6504
Certificate serial: 019F405175C3FD704526E4CF17DA3E982D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
Manifest number: 16
Signing time: Wed 08 Jul 2026 06:01:48 +0000
Manifest this update: Wed 08 Jul 2026 06:01:48 +0000
Manifest next update: Thu 09 Jul 2026 06:01:48 +0000
Files and hashes: 1: KjEP_FeRjaCDWUpm2501anJue10.roa (hash: CaZmS0hWmvo4gvgK/puCqUe+E5whldBNRP9ESBAkrCs=)
2: PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl (hash: NRYoq4L7wutecX4EEJEXlzYiL8TLhALrUBcyn+GL8Jw=)
3: RfLbU_NtwZVGZGWu9yPN4FC6N74.roa (hash: yuAby2LbbCSpG7kfmQ+En+69+UvEC4Uf5CSlJYEhBKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:51:75:c3:fd:70:45:26:e4:cf:17:da:3e:98:2d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8e9b06f52c252fe4b992df6a60afba1e2a6504
Validity
Not Before: Jul 8 06:01:48 2026 GMT
Not After : Jul 9 06:01:48 2026 GMT
Subject: CN=3aeec6da6c2102d9acddc0906782a001cbd8bdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:23:9c:21:4c:49:05:a4:9e:7a:a7:f8:cc:
1d:e6:f1:f3:44:49:0e:4f:66:d5:81:7e:18:b2:e7:
5d:1c:3b:bf:14:ff:dd:62:f3:c2:d6:64:e7:ed:ef:
11:0f:8f:be:eb:13:09:99:64:6d:1f:fd:c4:06:a1:
28:88:a7:0b:ac:44:dd:5f:d0:fa:34:1e:68:9a:30:
a4:fa:b5:af:6e:b6:57:c7:79:a6:20:e8:81:f9:eb:
e3:98:3d:91:3c:95:19:de:86:d2:b2:c2:8d:79:73:
5c:ec:61:1f:c1:4e:5b:90:3d:c2:b6:5a:f0:ec:1c:
a1:b5:e2:65:31:80:80:66:b5:ec:64:7f:58:80:f4:
da:c1:8a:5d:95:ac:6a:ab:f9:d1:4b:57:b9:f5:46:
6b:e1:55:1e:85:36:31:c0:6e:44:f2:5d:94:67:a8:
0b:e8:54:31:29:4f:3b:e0:ab:c9:fc:e1:0f:43:7b:
69:c1:b0:02:ea:75:2d:3a:01:89:ec:62:e8:18:f7:
83:07:e3:58:1e:82:b3:f8:7f:7a:27:a1:cd:79:bc:
52:9d:29:05:57:27:6d:f9:56:b8:0a:6f:d1:39:ab:
45:68:c4:92:48:45:d3:4c:32:78:d3:1f:97:cc:6f:
25:a5:89:e8:93:13:d7:45:84:22:25:cb:24:55:7a:
42:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EE:C6:DA:6C:21:02:D9:AC:DD:C0:90:67:82:A0:01:CB:D8:BD:CE
X509v3 Authority Key Identifier:
keyid:3D:8E:9B:06:F5:2C:25:2F:E4:B9:92:DF:6A:60:AF:BA:1E:2A:65:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:99:db:4e:f5:75:3c:e2:1b:3e:ba:5f:3b:76:c0:03:7c:77:
16:34:3c:07:e6:a8:82:e8:79:8f:1f:9f:65:a3:03:d8:04:bd:
2e:6b:63:e7:bf:8c:24:2d:e6:7d:7c:f2:33:76:b5:57:f7:93:
bc:48:5e:07:5e:e6:7b:ec:95:cd:c8:91:64:99:22:0b:ee:f0:
2c:f4:b5:d9:0b:71:a9:20:c3:aa:ce:32:d1:bd:a0:db:fd:ba:
6d:8c:c8:9f:36:53:c5:be:98:39:4a:3a:fa:d6:2b:6d:5b:ec:
10:63:99:30:f8:7c:fe:c3:cd:42:78:83:07:a2:ee:51:eb:28:
5f:dd:7e:b1:14:1f:9f:59:d0:51:27:0d:da:75:1d:9a:6e:85:
02:c2:71:26:17:2c:22:cf:cd:ee:61:49:6a:e9:f3:e1:cd:f2:
1e:7c:e3:9a:d7:62:85:70:63:a3:60:c1:93:40:79:ad:8e:15:
96:da:65:9a:6b:51:5e:7b:61:00:10:fa:bb:f3:07:ae:a5:62:
ee:47:03:7a:99:0a:da:ea:67:be:f2:a4:ec:27:54:ec:9f:40:
51:83:b5:67:5d:c0:1f:20:ec:b7:b5:db:ce:9f:38:8d:e5:c7:
3f:ea:aa:d1:0d:7f:04:55:9f:a1:e7:f0:d9:a1:f4:75:59:5b:
70:f2:6e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 13:13:12 2026 by rpki-client