Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
File: y38v-zmqLfIAS3yhVz0RMXqPt0o.mft (raw, json)
Hash identifier: sXrdbdSl27AG6Ix/aPp1+y2SW2DJWUpG+CieaPd1KfY=
Subject key identifier: 20:66:12:F0:BF:79:22:1A:E2:D6:75:36:3F:44:CB:D2:C3:D8:93:3B
Authority key identifier: CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
Certificate issuer: /CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Certificate serial: 019FA974CCE8EF25FD699AEC341B4D3E763C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
Manifest number: 01EB
Signing time: Tue 28 Jul 2026 16:00:31 +0000
Manifest this update: Tue 28 Jul 2026 16:00:31 +0000
Manifest next update: Wed 29 Jul 2026 16:00:31 +0000
Files and hashes: 1: 6Ns2Tq-n87jQpr-uT64fUsVKUX0.roa (hash: z05GfLGcIJ87A3P7XPgnZqPOo0sEQDgBgR5Fwhr1K/M=)
2: vBFUgAPrb_za250_sAWNgAKVaak.asa (hash: b0gKI4/m0v9gKs9clAAyF8VJb5SwiSpATYcLJDL8KGc=)
3: y38v-zmqLfIAS3yhVz0RMXqPt0o.crl (hash: KCZqGELcA5A1GikAQizjZLPXBw01u4zuvImAeBD/57w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:cc:e8:ef:25:fd:69:9a:ec:34:1b:4d:3e:76:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Validity
Not Before: Jul 28 16:00:31 2026 GMT
Not After : Jul 29 16:00:31 2026 GMT
Subject: CN=206612f0bf79221ae2d675363f44cbd2c3d8933b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:0c:7f:e2:cb:24:4e:2f:f4:c2:a3:58:a8:
fa:d0:94:ff:ee:25:ff:96:ed:cb:87:a7:3b:a3:34:
56:6c:69:df:3a:f5:cc:5f:aa:7b:9a:b6:b5:2d:45:
76:77:8b:4e:d5:b7:fd:09:c7:65:19:57:37:10:57:
bd:d6:21:ef:be:ae:19:cc:1f:2d:6d:0a:09:c1:30:
6a:ca:ed:1c:e5:f8:a5:b3:88:a8:98:c3:32:27:e1:
b8:7e:93:40:68:25:1b:43:8f:85:d9:3e:ab:9f:ca:
8d:7a:8b:d9:a9:ec:f9:80:73:78:52:6e:e5:97:6c:
03:99:14:f0:13:37:bd:fb:10:d4:80:bb:02:aa:14:
f8:3f:7c:30:c3:44:77:48:34:a1:7a:32:d5:e9:85:
4a:f1:aa:3b:f7:fb:fa:b6:e9:f6:26:ba:38:21:e9:
4f:4d:bf:14:68:8c:5a:fe:57:a0:06:60:ad:c0:22:
b0:18:ff:64:8f:67:7b:a7:d9:9d:84:9a:17:e8:b2:
1d:96:2c:cf:03:4c:bc:7e:c7:a1:cb:69:46:64:62:
70:88:a8:53:1b:ed:78:33:ad:bd:15:c1:c5:9b:88:
29:cb:b3:b4:1e:3e:10:2c:00:e2:ce:e9:1d:98:2e:
ee:3b:b0:3d:19:61:c3:a2:81:62:4f:aa:d4:7a:e4:
76:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:66:12:F0:BF:79:22:1A:E2:D6:75:36:3F:44:CB:D2:C3:D8:93:3B
X509v3 Authority Key Identifier:
keyid:CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b9:a1:fa:c3:c2:6f:b0:91:fc:09:9b:ed:4c:97:3d:1e:73:
8e:8a:74:af:44:96:43:63:58:30:15:98:9a:ae:5b:6e:13:5f:
cf:bf:28:53:37:f1:67:58:66:e1:b2:c1:03:1e:30:1d:ba:a4:
9b:ee:28:20:f0:f9:0c:ff:62:a8:c9:9d:66:d5:18:74:aa:d6:
14:ac:27:84:b6:33:3f:52:31:c8:ad:9c:be:9b:52:41:ac:13:
87:8b:bb:41:19:b3:9f:74:70:0a:9d:a2:df:71:ef:41:3f:ad:
66:15:1a:6b:5d:38:b6:d5:56:3d:86:db:d2:4b:6c:07:26:7d:
6b:f1:c5:de:5a:9b:99:99:a1:8b:e8:56:69:2d:8c:cd:7b:6e:
7d:0b:b7:5e:d6:d0:48:a0:1c:91:27:8c:07:55:49:21:cb:fb:
9d:82:b9:cb:5e:79:50:9b:77:10:f9:6c:5e:50:b9:af:4d:32:
39:83:c1:c5:d2:49:8e:4f:47:09:21:25:e5:2a:c0:fa:fe:f9:
04:3a:96:c5:7f:60:d0:fb:8b:ad:41:c3:50:5b:a4:d0:2c:1d:
9e:dc:47:8a:da:d8:f2:9b:84:a3:f6:71:93:53:0a:ac:1e:d5:
b2:e1:bc:a5:26:0d:03:87:5f:9e:fe:68:e2:b2:dd:5b:d4:a1:
7e:d6:4e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:12 2026 by rpki-client