
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: 3C6Dbgdbi9a5ewmAsHRyHaX05Na+ObagRQdSpWU+0N0=
Subject key identifier: 98:3D:EF:A6:24:EF:27:58:21:2B:DF:B6:B4:48:BC:F5:A6:72:4E:5C
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 01A001DDA589A46AEA987AF88E2619D39496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 0B5E
Signing time: Fri 14 Aug 2026 20:01:38 +0000
Manifest this update: Fri 14 Aug 2026 20:01:38 +0000
Manifest next update: Sat 15 Aug 2026 20:01:38 +0000
Files and hashes: 1: AE7tKoXDyuuPCaDaUfMyBa4xWdM.roa (hash: xVpRKPTRXjz76O68/XRyRJECKQ9lTBxMBzIgyh25rxU=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: ssLyvLRSS+aCmL3NGhA5jEvtI9EisCXKlsBuG9NylKo=)
3: rNinx4CuZpXEUOOVr_5qkOxUOro.roa (hash: c7dKHMaq9EPZZdDOaPAKKGKEDbpiSPHR+ZX8mfzSM64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 20:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:a5:89:a4:6a:ea:98:7a:f8:8e:26:19:d3:94:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Aug 14 20:01:38 2026 GMT
Not After : Aug 15 20:01:38 2026 GMT
Subject: CN=983defa624ef2758212bdfb6b448bcf5a6724e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:19:18:77:2a:ca:2c:07:e1:b3:02:ba:84:
d5:71:8d:fb:7d:a5:63:bc:70:e3:17:c5:7d:ce:7c:
ca:8a:00:9e:34:c5:f3:03:4b:fa:4f:e9:27:db:f5:
48:5a:21:23:e2:16:c0:ce:e2:2e:34:0e:ed:bd:f0:
6b:ca:9b:e6:4f:b5:63:32:ec:2c:bb:4e:dc:3c:54:
c0:09:17:69:58:ec:91:aa:0b:d8:5a:51:b3:77:66:
52:d4:76:45:c8:d6:1c:85:c0:51:70:92:44:7a:4a:
59:12:06:08:e6:21:e7:10:82:1f:97:18:8c:34:f8:
dc:ab:a3:fb:16:b0:e9:26:50:32:37:14:be:3b:09:
09:b9:d4:9d:53:4e:83:ef:cc:5a:ea:3f:2a:0c:fa:
8c:2a:4b:0d:a9:90:1c:f2:e3:a6:c8:fc:3a:b5:2f:
9c:6d:8e:86:f6:a8:2a:ec:0c:9a:1c:be:86:88:f9:
6c:0f:d8:a1:e8:9f:cf:35:e6:3c:a2:c6:77:2f:61:
09:5b:86:14:23:b2:41:7e:38:d2:a8:30:2c:de:e4:
51:93:ab:c0:be:92:40:81:48:fc:fc:9a:89:c5:f0:
e9:6f:2b:41:48:95:5b:0b:52:9b:33:cc:4b:c5:24:
2e:7e:e2:f5:f6:24:ac:80:e0:2e:95:be:d2:c8:a3:
74:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3D:EF:A6:24:EF:27:58:21:2B:DF:B6:B4:48:BC:F5:A6:72:4E:5C
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:60:27:fd:cb:c8:c1:bb:c1:14:a4:36:17:eb:50:6c:70:81:
e7:0d:89:71:ba:4d:53:19:bd:9a:57:2f:c6:6d:f3:e7:ce:bb:
59:df:d5:60:f2:9b:ae:d6:6d:8a:65:43:b5:dc:ca:00:ed:ac:
51:58:34:c9:5e:80:7f:d8:a5:e0:4f:91:35:22:60:67:8e:41:
af:65:37:a5:0a:d3:fa:bd:66:f8:76:1e:d8:9f:36:55:f8:ff:
7f:95:f5:e2:f2:e6:b0:80:4d:ac:d1:0c:f0:bb:56:06:3a:7c:
22:f4:46:37:9d:3c:c3:78:46:fd:ec:89:73:f1:29:e4:c3:12:
a2:78:61:65:55:6d:15:82:51:ab:06:27:7f:98:8b:83:bf:dd:
cf:b4:e5:6b:53:52:85:4c:d1:41:73:dd:59:3b:b3:d5:19:f2:
fa:26:c9:b4:fd:2c:fc:42:72:c1:22:a7:eb:54:d4:97:d5:b2:
09:d7:5a:5c:1e:d8:18:43:03:b3:af:66:e2:15:09:b0:47:5e:
01:5b:c0:8e:69:b4:e6:d0:45:3f:22:df:93:20:16:96:45:59:
9e:9e:bb:6b:65:48:d3:5e:55:d9:3d:3e:ea:f7:7d:c5:bf:ae:
76:fa:90:4d:02:97:56:26:4a:c5:01:ab:59:bc:bb:c9:be:6f:
23:98:68:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:23:00 2026 by rpki-client