
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft
File: yPZn5ggTAzhfE_1MttPaTYyxtsE.mft (raw, json)
Hash identifier: PrYpHdGwQybQbDGBmnuCwOhEITq1IRad+uMdJwyHHAk=
Subject key identifier: 93:39:8E:73:58:75:2F:BD:4E:16:B3:CF:7A:B1:37:5B:B1:3E:C7:0D
Authority key identifier: C8:F6:67:E6:08:13:03:38:5F:13:FD:4C:B6:D3:DA:4D:8C:B1:B6:C1
Certificate issuer: /CN=c8f667e6081303385f13fd4cb6d3da4d8cb1b6c1
Certificate serial: 019FA9ABD2C71BEA99BEB8F28A928DBF1784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPZn5ggTAzhfE_1MttPaTYyxtsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft
Manifest number: A3
Signing time: Tue 28 Jul 2026 17:00:37 +0000
Manifest this update: Tue 28 Jul 2026 17:00:37 +0000
Manifest next update: Wed 29 Jul 2026 17:00:37 +0000
Files and hashes: 1: 2Z6IYH5r9rEHXyb6yaUAQh53_hk.roa (hash: iFsFHaHiOwiJNWh0rDjxLKPBB1FTnSIyeAFgavIf9wA=)
2: yPZn5ggTAzhfE_1MttPaTYyxtsE.crl (hash: LDd68FGosklU7UqxoRfxAcLPTanAuDnKNBIuuhV7SoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPZn5ggTAzhfE_1MttPaTYyxtsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:d2:c7:1b:ea:99:be:b8:f2:8a:92:8d:bf:17:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f667e6081303385f13fd4cb6d3da4d8cb1b6c1
Validity
Not Before: Jul 28 17:00:37 2026 GMT
Not After : Jul 29 17:00:37 2026 GMT
Subject: CN=93398e7358752fbd4e16b3cf7ab1375bb13ec70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:5f:a0:47:15:28:fb:26:ba:5e:f2:ea:68:
bb:3f:f8:1e:f5:d7:60:76:60:dd:f2:09:01:df:79:
32:2d:98:5d:83:65:b2:75:70:ba:7f:19:e9:43:68:
8b:7f:3e:89:a6:79:3e:bc:71:61:26:c7:b5:be:11:
9e:53:71:32:ad:c9:18:3f:93:c8:9e:94:0a:4f:6c:
55:fb:6b:13:02:10:66:8f:c6:29:fa:f3:08:7c:79:
cd:9b:37:38:ba:c7:4f:10:20:80:96:c5:26:5a:74:
8f:ae:23:b3:18:dc:17:e3:e0:b9:78:67:9a:35:6a:
21:2e:0c:a8:8d:2d:4a:32:09:d9:de:77:2a:34:bf:
f1:f0:d3:8f:71:f3:9d:29:da:d7:fb:f7:90:5f:08:
8a:cb:31:e0:dc:5f:a9:b1:c4:6e:20:c9:4c:45:1e:
97:99:83:7e:99:90:d5:6c:cf:4e:34:4c:02:82:96:
2f:10:f5:ac:85:2a:84:39:db:c2:3d:31:63:61:e6:
b6:d8:c5:42:7a:43:38:69:3c:ff:c7:b2:b9:19:34:
a1:ac:b4:b5:ed:ba:9f:fe:f4:0b:74:6a:5f:94:04:
70:1e:aa:f5:ed:5b:14:06:25:38:1a:42:20:aa:a3:
a6:82:e5:19:f8:5a:1d:d0:68:cf:9a:4c:98:1f:39:
f8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:39:8E:73:58:75:2F:BD:4E:16:B3:CF:7A:B1:37:5B:B1:3E:C7:0D
X509v3 Authority Key Identifier:
keyid:C8:F6:67:E6:08:13:03:38:5F:13:FD:4C:B6:D3:DA:4D:8C:B1:B6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPZn5ggTAzhfE_1MttPaTYyxtsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/201ea2-55ea-46da-bc6f-a05ff37e82e9/1/yPZn5ggTAzhfE_1MttPaTYyxtsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:df:89:60:93:f8:51:d0:de:61:cd:db:6c:3a:cf:1b:8f:a9:
4c:65:1a:ba:b8:56:26:cb:64:d3:62:69:64:2e:ca:6d:f9:4d:
7d:72:79:45:a8:ca:d7:85:91:94:9d:91:fe:f0:2d:d8:dd:18:
24:08:d9:d1:75:5b:22:f2:0f:9c:0c:67:82:ac:29:5c:3d:2b:
6b:27:04:96:9d:c0:cf:e6:3e:16:aa:fc:e4:c1:20:05:be:25:
15:bd:ac:0c:ef:96:a0:e4:82:5e:e2:a1:94:5d:a5:6a:b7:f3:
1d:d6:74:dd:d3:02:7a:08:ae:23:73:42:ff:55:de:ff:71:4c:
7b:14:e8:4a:bb:41:24:c8:37:35:8a:b6:d4:b4:37:97:eb:33:
e6:dc:b9:1c:f8:9f:b3:52:d7:f9:aa:9b:62:98:28:a9:93:f2:
91:d1:ed:88:4c:48:21:e5:8a:de:0c:54:d1:3a:06:35:6d:33:
c9:16:3a:38:ac:3b:d8:d8:b5:64:c1:35:d5:f1:b3:a2:5f:64:
05:12:9f:c3:9f:04:9b:93:c6:90:d2:17:be:a8:60:fd:ca:dc:
6d:7d:65:62:69:c5:df:1b:62:9f:70:a4:22:d2:01:ab:24:f3:
2b:94:35:b5:77:d4:ec:2d:71:be:b6:0c:22:b5:98:49:81:40:
5e:89:1f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:44:11 2026 by rpki-client