Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: ECVkuJctXgXuCokgUrPl9Hi2P9Igvw4vN7fUg76fih8=
Subject key identifier: 37:06:AD:4A:9E:E2:62:56:E7:61:4D:98:FC:74:49:EA:D9:0E:6C:61
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 01A1141816A76895A4F7CC63F93D0ECFF857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 0BEC
Signing time: Wed 07 Oct 2026 02:01:25 +0000
Manifest this update: Wed 07 Oct 2026 02:01:25 +0000
Manifest next update: Thu 08 Oct 2026 02:01:25 +0000
Files and hashes: 1: AE7tKoXDyuuPCaDaUfMyBa4xWdM.roa (hash: xVpRKPTRXjz76O68/XRyRJECKQ9lTBxMBzIgyh25rxU=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: lDJtIX+UZECsyN4i3SJBtwO3fItd8GCU1+7rdpG/e3c=)
3: rNinx4CuZpXEUOOVr_5qkOxUOro.roa (hash: c7dKHMaq9EPZZdDOaPAKKGKEDbpiSPHR+ZX8mfzSM64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:18:16:a7:68:95:a4:f7:cc:63:f9:3d:0e:cf:f8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Oct 7 02:01:25 2026 GMT
Not After : Oct 8 02:01:25 2026 GMT
Subject: CN=3706ad4a9ee26256e7614d98fc7449ead90e6c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:3a:81:0a:bc:ca:e4:b0:82:1f:95:f9:91:
d4:b5:97:7a:39:99:0c:83:1a:62:36:62:b9:e9:21:
83:0b:45:eb:48:a0:dd:84:eb:b8:05:bd:dc:5b:e1:
fa:cb:3c:16:ce:5c:91:df:98:ab:9e:a7:c1:26:ff:
dd:00:b4:83:3f:18:2e:3a:3c:e5:69:f6:59:c8:22:
c2:f8:0e:7f:28:3c:06:1c:f8:3c:91:45:87:be:45:
a0:78:fd:6c:7c:84:fb:29:da:d2:9e:06:24:77:7b:
24:7d:34:f9:48:07:25:52:a3:e6:2e:ab:53:4e:6b:
51:69:f6:54:1c:84:a6:da:8e:fd:f0:6a:6f:7a:31:
e7:75:1c:80:3d:34:d2:90:98:d8:3c:9a:89:2e:57:
2a:4a:ee:90:00:70:30:12:b5:4e:a9:ed:e8:ca:2e:
9e:a6:f8:39:2d:40:4a:fd:49:31:f1:a7:99:14:35:
bd:32:fb:34:c7:3e:05:e5:6f:4b:3b:93:58:30:0e:
e9:6c:6b:c1:10:2d:b6:47:26:44:85:b6:86:f8:6e:
da:8d:62:6a:6b:10:8d:2d:8c:0e:83:6c:dc:d3:3e:
83:dd:53:e6:bb:91:d8:c7:21:5c:68:cd:52:b8:c1:
eb:2c:5c:1f:7e:e4:6f:95:ad:f7:bf:16:17:72:f7:
86:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:06:AD:4A:9E:E2:62:56:E7:61:4D:98:FC:74:49:EA:D9:0E:6C:61
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:15:0a:ca:13:22:f7:ce:aa:57:b0:b2:4f:a6:06:e6:87:63:
30:6a:0a:0d:b7:50:5e:e5:3c:5a:de:d9:df:24:75:99:ee:64:
35:92:32:9e:96:04:24:98:ac:9f:b2:2e:c5:f6:e2:51:b3:13:
58:b8:3e:6b:81:3d:50:d7:4f:5b:c3:64:90:6f:1a:2a:40:00:
6b:fa:e0:4f:ad:a9:b4:51:6f:ae:c2:57:98:6d:06:5b:21:7a:
3f:ca:e0:2c:f1:6b:5c:17:32:51:ce:a0:4c:03:2b:e4:7b:db:
bb:7d:d1:5e:bb:a0:09:49:a4:79:92:b7:c1:c0:5c:48:14:22:
e3:fe:92:a6:86:f8:97:2e:61:51:26:ee:2a:45:2d:e9:6b:88:
57:1c:e7:e6:97:c7:f6:59:36:13:2b:51:7b:51:5a:ba:fa:e5:
32:55:04:be:c5:c0:ff:e0:a7:60:68:c5:61:5c:d1:f0:79:84:
fa:c6:48:b1:61:22:b2:06:b8:d9:01:2a:3f:4c:3d:fa:38:1c:
e6:05:2c:86:ee:62:a0:79:46:21:d8:20:f5:0f:c3:f3:46:3b:
23:a9:28:23:66:8f:a6:35:3d:b8:0b:63:bd:5a:15:a3:1b:d8:
1a:34:25:fb:26:9d:ed:9d:cc:47:16:4c:2a:5c:1e:55:3a:c2:
a3:5f:89:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:03:26 2026 by rpki-client