Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
File: Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft (raw, json)
Hash identifier: pFgr7pothAAQkQ2l/hEJpi9g5imrQrk8aXPVCBEKVwo=
Subject key identifier: 3C:49:15:B7:0E:C6:FB:85:0E:A3:EA:3B:E6:E0:25:20:A7:EF:66:F9
Authority key identifier: 63:EC:63:94:13:4A:17:D6:49:7C:A3:AB:AC:D3:75:C4:01:42:F3:E8
Certificate issuer: /CN=63ec6394134a17d6497ca3abacd375c40142f3e8
Certificate serial: 019FAABED035E0168FFC45457FD1C502F295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
Manifest number: 3D
Signing time: Tue 28 Jul 2026 22:00:59 +0000
Manifest this update: Tue 28 Jul 2026 22:00:59 +0000
Manifest next update: Wed 29 Jul 2026 22:00:59 +0000
Files and hashes: 1: XXWqfoKtAcCM7UMttu9lDzEg9w4.roa (hash: iyy9JReMyZF7zyDL2nrwHjgy/k2YaXeJe511rH+4Yew=)
2: Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.crl (hash: M6UhGAg57QM7VNT8qD6m8s8WeYxVytQifGGyoYJS8iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:d0:35:e0:16:8f:fc:45:45:7f:d1:c5:02:f2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ec6394134a17d6497ca3abacd375c40142f3e8
Validity
Not Before: Jul 28 22:00:59 2026 GMT
Not After : Jul 29 22:00:59 2026 GMT
Subject: CN=3c4915b70ec6fb850ea3ea3be6e02520a7ef66f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:7b:b5:8d:70:4b:1b:1e:35:33:8a:6a:5a:
b3:13:29:21:6a:75:41:95:0e:67:7f:f1:10:d6:88:
07:2a:e9:89:8f:9b:15:17:65:79:5f:b9:6b:18:3b:
ae:f2:f8:9a:b3:4f:5d:f8:69:c9:01:18:c6:2c:3c:
f2:19:04:13:72:c9:c1:b6:66:00:4d:b8:d8:50:d6:
9a:47:4c:11:d9:bd:63:5a:df:1b:8a:cd:4c:f5:f2:
00:0d:bc:a9:85:87:fe:49:67:55:26:e9:64:2c:82:
1c:73:48:20:7a:53:2f:b5:d7:44:dc:60:0e:ec:b6:
95:ce:90:54:b0:ef:d8:58:70:13:a6:bd:f7:30:26:
a9:40:ea:1e:b2:0a:56:a6:39:fe:33:bd:18:14:d5:
a0:34:26:ed:20:d4:53:e3:c5:e2:ef:5b:9b:3d:18:
85:d6:d5:79:85:a3:6e:26:38:f0:65:7c:e3:0e:5f:
fd:31:44:c3:ce:da:40:59:83:8e:60:bd:0b:5f:7d:
f1:f3:aa:68:5a:a6:a1:12:06:be:18:c2:16:56:4f:
79:c1:ac:94:d7:71:e8:c1:34:6b:ca:f1:b2:2c:f2:
7d:fb:65:ba:58:be:c5:1f:5c:2e:d1:91:ba:44:2b:
bd:38:89:29:a5:68:fc:3f:6a:c1:37:17:f0:fe:d8:
15:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:49:15:B7:0E:C6:FB:85:0E:A3:EA:3B:E6:E0:25:20:A7:EF:66:F9
X509v3 Authority Key Identifier:
keyid:63:EC:63:94:13:4A:17:D6:49:7C:A3:AB:AC:D3:75:C4:01:42:F3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0f0532-5d25-4e10-bfd3-9d8ee760915a/1/Y-xjlBNKF9ZJfKOrrNN1xAFC8-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d2:e8:4b:df:8f:6c:38:c8:12:b7:56:b8:28:30:aa:93:15:
de:8f:1e:e9:7e:10:8d:f8:8e:8c:90:52:99:54:dd:18:c0:6e:
c5:26:1f:72:bd:1d:1d:6e:dc:72:65:7c:17:09:e3:3b:dd:91:
ac:95:78:f9:b8:0e:c9:ae:5d:dd:80:f5:ea:06:89:b9:b6:07:
dd:5b:92:9e:18:2e:6c:de:f8:54:5e:9b:1b:8a:c7:7c:6e:bd:
2b:b6:43:fe:83:fb:f6:aa:61:2c:ce:02:5a:77:b5:78:24:ae:
cd:83:1f:e1:0e:b0:55:3c:6e:c1:33:7a:24:01:63:6a:43:68:
e4:5c:69:f6:90:59:d9:9b:88:92:21:ce:39:de:fc:17:9e:2a:
0d:e1:97:50:62:22:85:d7:cd:94:f1:ba:15:33:85:5b:80:d5:
26:cd:5e:e8:20:0e:2c:0d:37:2f:d6:8b:4f:e6:5e:e1:ea:73:
52:2b:27:27:32:05:e2:95:45:91:a7:4b:bd:c9:c7:69:e4:2a:
85:bd:10:08:b1:ee:fb:d6:0c:4e:b9:0a:26:bf:e3:cd:d3:8e:
f4:ef:bb:53:4a:34:c3:63:a0:8c:3c:67:5c:58:28:af:71:f8:
15:6a:c5:2b:3a:35:8f:41:db:2b:54:1d:3b:37:4f:d1:60:d3:
c9:69:de:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:23:59 2026 by rpki-client