Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: ReRZrGLnKI53z/V69IUuJHmhfcLQqTnX0rIzrDvfwj8=
Subject key identifier: 9C:0E:74:70:89:3E:72:D0:8F:EB:05:77:27:99:BE:51:33:21:9E:4E
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 019E2AA776D958D0BAF45955DC3827639FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 0A6A
Signing time: Fri 15 May 2026 08:01:18 +0000
Manifest this update: Fri 15 May 2026 08:01:18 +0000
Manifest next update: Sat 16 May 2026 08:01:18 +0000
Files and hashes: 1: AE7tKoXDyuuPCaDaUfMyBa4xWdM.roa (hash: xVpRKPTRXjz76O68/XRyRJECKQ9lTBxMBzIgyh25rxU=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: fDMSy4fP99hdGKXAkOOxl5NxFR/6PShSH5WvvmhpVYE=)
3: rNinx4CuZpXEUOOVr_5qkOxUOro.roa (hash: c7dKHMaq9EPZZdDOaPAKKGKEDbpiSPHR+ZX8mfzSM64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:a7:76:d9:58:d0:ba:f4:59:55:dc:38:27:63:9f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: May 15 08:01:18 2026 GMT
Not After : May 16 08:01:18 2026 GMT
Subject: CN=9c0e7470893e72d08feb05772799be5133219e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:7b:26:fb:d2:de:e3:0c:d3:da:58:bf:76:
26:ff:f8:5c:36:b8:cb:3f:3e:6a:f3:a2:97:dd:1e:
47:1e:01:57:5f:5f:71:4d:c6:cd:83:fd:49:67:6a:
8f:68:25:05:ac:ef:10:24:64:02:8b:85:6a:6a:ac:
ee:85:b2:a0:09:bb:70:47:78:80:a6:5d:83:90:06:
2a:40:ce:35:94:18:90:45:83:03:e9:25:eb:82:d3:
ff:c3:1e:6a:20:58:0d:f4:b4:9d:d4:b4:9e:4c:5c:
fb:b1:61:28:0c:96:d5:a0:0d:c2:bf:9f:05:b8:96:
7e:a4:ca:83:03:e0:48:f9:42:00:c3:08:eb:a1:f6:
8f:5a:d9:db:0e:6e:b3:45:21:05:40:04:2a:ce:c3:
69:1e:e6:01:b7:d3:00:14:c9:33:f4:57:48:86:9d:
2b:09:c2:f6:62:7a:95:ea:f3:ea:33:41:22:c4:43:
cf:c5:98:cf:90:ab:3e:53:85:a0:f2:94:6e:fc:0c:
81:92:08:0c:a8:b8:74:29:52:6a:56:c4:de:20:d2:
86:b2:c9:e7:59:39:c5:c8:42:bd:3d:05:47:40:9b:
e3:51:d8:16:04:24:9b:e5:c7:ff:9c:ea:96:da:99:
43:ea:6b:a3:f1:10:f5:52:5b:ec:81:db:82:54:a2:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0E:74:70:89:3E:72:D0:8F:EB:05:77:27:99:BE:51:33:21:9E:4E
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:52:f0:5f:db:a6:4c:09:e1:b2:e8:a0:fa:40:5e:ca:19:eb:
0d:af:bf:a5:40:b3:6a:f9:8a:90:a0:98:01:9d:e2:57:0c:53:
df:85:af:9f:86:39:4a:05:eb:73:b6:90:0f:9c:43:f5:5a:a1:
1a:c3:8b:e9:6e:9d:d9:73:1a:f8:9f:9b:94:c2:46:4b:3e:42:
27:9a:12:9d:8e:d3:21:ef:7c:c9:54:ec:51:f1:a4:4c:05:78:
15:45:16:02:6b:23:bb:79:c8:8e:48:ec:da:f6:57:03:be:75:
e3:ef:0e:81:75:0c:89:ab:74:e7:9b:42:c5:7c:e0:a9:e5:6f:
ab:73:f1:30:d9:d9:c7:46:9d:53:42:0c:9a:93:56:89:a9:83:
fd:78:d7:55:8a:7a:ce:d5:5d:68:1d:b0:d9:c1:ba:d6:67:29:
e2:4d:68:ec:45:29:58:d3:d9:6f:9a:f2:fd:39:eb:bf:c9:8e:
30:25:a1:64:89:60:dd:f2:89:28:51:a4:2e:68:93:64:f3:14:
77:5e:80:bc:fe:15:e9:23:14:18:b5:2b:33:04:43:28:64:24:
65:7c:5a:f0:1e:1d:d9:ae:42:2e:45:8c:d5:a4:a6:94:cc:77:
2c:4e:5f:7b:38:6f:2a:d1:96:58:c4:5c:b1:64:61:4c:a8:a0:
4f:ef:3b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:47:07 2026 by rpki-client