Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: GPypp/pY7j4+a7vqdrgMwikTMnvS2oxmMf+t5yRTtP4=
Subject key identifier: FD:D6:D7:D1:86:C1:AA:65:54:6F:80:9D:67:12:C2:74:C3:61:9D:00
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 019F1A1F72F50FBF0DD5955AEDE0F7234979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 0AE6
Signing time: Tue 30 Jun 2026 20:01:36 +0000
Manifest this update: Tue 30 Jun 2026 20:01:36 +0000
Manifest next update: Wed 01 Jul 2026 20:01:36 +0000
Files and hashes: 1: AE7tKoXDyuuPCaDaUfMyBa4xWdM.roa (hash: xVpRKPTRXjz76O68/XRyRJECKQ9lTBxMBzIgyh25rxU=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: xNAhqDBtJeVQ7tu3/A+mx7aBpf6M1Yr+Uad4THJ65Wk=)
3: rNinx4CuZpXEUOOVr_5qkOxUOro.roa (hash: c7dKHMaq9EPZZdDOaPAKKGKEDbpiSPHR+ZX8mfzSM64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1f:72:f5:0f:bf:0d:d5:95:5a:ed:e0:f7:23:49:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Jun 30 20:01:36 2026 GMT
Not After : Jul 1 20:01:36 2026 GMT
Subject: CN=fdd6d7d186c1aa65546f809d6712c274c3619d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:51:b4:12:d1:41:ee:ea:9b:c2:3d:d5:5c:30:
9e:e3:75:ff:84:9e:3b:ce:dc:20:d8:8c:6c:26:d6:
31:e7:16:72:46:77:61:5d:59:0e:d7:3a:69:97:11:
89:77:2d:c4:7e:bb:b7:2f:4a:ef:23:00:37:05:36:
fb:f5:4e:1c:7c:ed:e5:14:fa:b6:4b:0c:7c:c1:df:
91:f8:54:2b:89:8b:6d:6a:96:27:9c:70:c3:75:10:
12:6f:a8:12:37:ab:1a:9d:5f:9b:4b:39:86:44:53:
16:b2:0a:5d:2c:62:db:05:1f:a8:af:38:1f:bc:e4:
b0:9d:5a:1e:f3:3a:9b:2e:71:91:df:07:93:2b:f7:
37:93:86:b7:2e:a0:04:8b:06:e6:3a:22:58:1b:df:
35:00:14:f3:90:48:07:88:ec:5b:4c:84:e9:17:40:
e1:34:a0:ef:20:9d:59:57:54:8f:d2:5e:4c:ab:a7:
82:f0:28:22:9e:9d:b0:35:1c:62:5c:75:ec:dd:c9:
3e:98:4f:73:4f:03:e3:92:d2:eb:72:b6:03:87:19:
d1:0e:94:19:01:fe:82:2a:47:36:1a:7b:ec:8e:ba:
d4:b5:e7:88:61:bc:b5:4b:18:f4:f0:d3:4d:2f:37:
d7:18:bc:27:e7:3b:f8:ad:79:5d:40:32:d5:4a:d4:
1e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D6:D7:D1:86:C1:AA:65:54:6F:80:9D:67:12:C2:74:C3:61:9D:00
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:ff:fa:43:92:2a:66:9b:96:aa:b6:bd:76:44:db:97:3f:49:
32:03:eb:0a:b9:b9:4e:58:36:07:66:09:ad:ad:f0:5c:ba:06:
f6:08:c0:e7:b6:e1:4e:07:37:d3:e9:c7:1e:db:4b:6e:dd:80:
ba:65:98:6b:d8:d9:86:29:e8:ce:ab:d8:2d:63:c4:81:d7:bf:
10:6d:b8:bd:9b:97:e7:03:91:9e:dc:63:ac:75:92:5a:32:99:
e1:81:ee:c4:3b:11:98:b8:a2:2c:79:2b:2c:bb:08:e5:01:4b:
40:6a:fc:15:a6:08:9b:be:f8:25:d5:3b:41:41:8d:00:50:9a:
82:b2:f5:c5:5a:57:ec:c2:0d:b8:f6:d6:4d:5f:ae:be:ad:9d:
40:35:52:b0:47:21:e8:d4:aa:d3:cd:60:ab:d4:d6:de:df:34:
3c:01:c4:16:84:55:cb:ee:bc:17:99:ab:84:b2:d3:4f:43:63:
cf:b5:d3:22:6d:f9:bd:21:26:54:57:fc:5e:9b:4c:59:d0:76:
28:65:5a:fc:ec:e6:71:ac:40:27:e0:29:07:c7:87:c2:17:22:
5e:38:d9:79:25:fe:36:be:8d:da:0f:a1:62:42:a5:19:69:3e:
31:a0:ee:7f:2a:07:f8:63:06:f1:56:1a:21:20:4f:3f:32:a2:
83:f8:7b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:11 2026 by rpki-client