Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: BxW52cV8kdVtdabW3IC2XQNCkzcQBrJ7sL0MB1dgzAM=
Subject key identifier: 67:F3:78:41:F7:27:58:97:7E:44:8A:F8:88:62:23:77:FE:8A:B1:9F
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 019D3941542C7A2A8A847BBA53EE481250C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 09ED
Signing time: Sun 29 Mar 2026 11:01:15 +0000
Manifest this update: Sun 29 Mar 2026 11:01:15 +0000
Manifest next update: Mon 30 Mar 2026 11:01:15 +0000
Files and hashes: 1: AE7tKoXDyuuPCaDaUfMyBa4xWdM.roa (hash: xVpRKPTRXjz76O68/XRyRJECKQ9lTBxMBzIgyh25rxU=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: WaXvDoeRC191qieTIA12XbV8VX7mQo4BUF12Roz8R7k=)
3: rNinx4CuZpXEUOOVr_5qkOxUOro.roa (hash: c7dKHMaq9EPZZdDOaPAKKGKEDbpiSPHR+ZX8mfzSM64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:54:2c:7a:2a:8a:84:7b:ba:53:ee:48:12:50:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Mar 29 11:01:15 2026 GMT
Not After : Mar 30 11:01:15 2026 GMT
Subject: CN=67f37841f72758977e448af888622377fe8ab19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:4a:5b:2e:5a:3d:7c:a9:7f:03:1e:27:10:
16:c5:a9:18:e4:89:17:c0:33:fe:03:1e:db:84:9c:
51:c2:ef:3c:4f:d2:75:e9:fd:33:1c:12:73:a1:e2:
65:77:45:cb:9b:11:8a:24:2b:fd:c7:2f:5d:da:e7:
1d:eb:7e:40:5b:c6:7d:d4:bd:0e:e1:b7:70:82:2a:
31:cf:36:c2:61:41:81:6f:bc:ec:2c:50:38:c4:1f:
db:f7:7c:71:a6:33:77:d6:90:10:36:0c:5e:d6:51:
93:e2:bf:b9:fd:ce:c2:46:e6:ca:de:a5:9d:2c:24:
e4:d7:6e:b9:70:f7:0d:c7:df:03:5e:9c:41:4e:67:
71:98:6c:3d:fe:b0:22:2f:a8:d3:e5:0c:72:0c:9c:
b5:7f:34:52:08:55:47:46:60:84:bc:0d:4e:8c:79:
90:6d:c0:c9:27:40:76:0a:08:b3:17:a1:a0:2d:42:
eb:fd:4d:3f:aa:2b:0b:a4:db:a3:11:83:5a:79:d1:
b5:58:ca:fc:bc:e1:e2:2d:69:27:e7:e9:8f:9a:e2:
4a:cd:0d:8c:e9:49:3e:0a:eb:05:6b:13:cd:67:f4:
5f:ed:1a:ef:7b:7f:ac:4d:c0:2a:61:f5:cd:7c:14:
11:f5:40:04:3c:bd:b3:c1:08:57:3b:88:96:3a:46:
71:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F3:78:41:F7:27:58:97:7E:44:8A:F8:88:62:23:77:FE:8A:B1:9F
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c1:2f:e8:31:f1:50:2f:95:25:61:a9:07:06:98:77:e3:1b:
a4:17:be:b0:df:0a:a0:02:50:1f:0d:b8:d7:e9:5b:f5:b5:c1:
f0:ff:2c:2e:5e:b5:eb:60:81:91:45:22:d8:ca:dc:84:a1:a7:
49:59:ab:30:cc:f2:a8:cd:b9:da:7c:54:f7:08:97:76:0e:74:
bd:dd:e7:bd:1d:8a:3c:d1:0d:39:97:c3:62:58:01:a3:f6:b9:
2e:0c:8f:bd:df:b8:d3:24:f7:44:a2:63:62:d7:70:c3:77:16:
64:4b:d1:bc:af:9d:b5:d4:41:ba:e9:e2:9f:99:9c:4b:75:44:
f9:c1:9b:5a:c1:dd:62:2a:a2:2a:ee:db:da:bb:c5:4a:ec:08:
c8:33:d8:19:76:04:23:c4:56:13:a7:24:75:07:7c:1c:48:da:
52:4e:b9:d1:38:7b:55:96:0a:84:23:e0:dd:b3:7c:a1:85:2a:
74:e7:ba:a6:b9:bc:a5:98:80:29:34:6d:40:56:69:8d:35:4f:
07:31:f2:0b:aa:7b:32:35:41:7a:75:5e:82:de:71:a7:9e:dd:
94:ca:af:3d:d6:28:d9:ca:91:a2:49:3d:71:ab:8c:23:69:61:
b5:d1:66:9d:1d:6d:0e:8b:0a:55:80:c0:94:d4:ee:1d:1c:ac:
66:e7:05:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:21 2026 by rpki-client