Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
File: y38v-zmqLfIAS3yhVz0RMXqPt0o.mft (raw, json)
Hash identifier: 3vWXp5fjEHnVKUBsBfEaCzYiA/7FvkitWqHS3BaBi8w=
Subject key identifier: D3:55:49:BD:31:DE:E6:88:B0:BF:3B:A8:32:4F:8B:CC:25:DA:82:A1
Authority key identifier: CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
Certificate issuer: /CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Certificate serial: 019EBFC872461C51E2BBFDB17429C7DEB59A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
Manifest number: 0172
Signing time: Sat 13 Jun 2026 07:00:45 +0000
Manifest this update: Sat 13 Jun 2026 07:00:45 +0000
Manifest next update: Sun 14 Jun 2026 07:00:45 +0000
Files and hashes: 1: 6Ns2Tq-n87jQpr-uT64fUsVKUX0.roa (hash: z05GfLGcIJ87A3P7XPgnZqPOo0sEQDgBgR5Fwhr1K/M=)
2: vBFUgAPrb_za250_sAWNgAKVaak.asa (hash: b0gKI4/m0v9gKs9clAAyF8VJb5SwiSpATYcLJDL8KGc=)
3: y38v-zmqLfIAS3yhVz0RMXqPt0o.crl (hash: KvbS5C1yzPR7lBCyfPMwKwX+6ixL3YP0GVWsoe/APXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:72:46:1c:51:e2:bb:fd:b1:74:29:c7:de:b5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Validity
Not Before: Jun 13 07:00:45 2026 GMT
Not After : Jun 14 07:00:45 2026 GMT
Subject: CN=d35549bd31dee688b0bf3ba8324f8bcc25da82a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ab:e2:47:d3:8e:2d:fc:43:1c:84:25:dd:96:
8e:63:9a:19:36:c0:f3:fc:3e:59:64:99:9e:1e:8d:
35:5b:c7:b3:ff:1f:ca:ac:df:42:39:c7:0a:4b:ee:
77:e0:b1:70:68:8a:ad:b1:db:a9:6c:19:ff:ed:f0:
14:7f:37:02:61:af:64:8b:3c:1f:d9:27:ce:11:0c:
18:31:16:de:31:5b:3d:16:cc:9d:ce:7e:c2:be:76:
27:6f:63:71:db:db:51:9a:f2:bd:88:93:11:16:6d:
0a:0e:af:d5:60:f5:8d:5f:fd:ec:3f:c2:66:70:a7:
45:4d:10:ee:ec:26:b8:74:ed:e5:59:7c:fb:f1:1b:
6c:f0:a9:44:e3:5b:b7:bf:83:4f:e7:fe:fa:3a:0a:
0b:f2:70:bd:0d:15:0c:f0:00:23:1f:59:b6:a6:11:
38:60:8c:92:a4:e4:66:84:df:42:30:53:1f:fb:03:
47:0c:44:e8:93:cc:21:bb:07:b6:5c:ea:e9:47:47:
26:25:3a:79:46:9a:3b:5f:bd:10:53:97:f9:f5:01:
3c:14:70:ff:fd:d9:cc:3c:de:12:b3:d2:e8:16:a3:
7e:55:fd:7d:ef:95:07:5e:d4:7c:d7:a0:8f:99:06:
5c:6a:52:94:7e:d2:8b:32:79:4e:5c:b2:31:fc:44:
2a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:55:49:BD:31:DE:E6:88:B0:BF:3B:A8:32:4F:8B:CC:25:DA:82:A1
X509v3 Authority Key Identifier:
keyid:CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:df:26:b6:79:37:33:a8:ee:50:0f:ef:2e:a4:99:7e:93:22:
36:b4:fe:88:d2:e6:ee:e2:ae:2e:d1:70:2f:cd:18:81:c1:38:
b4:10:e1:a4:60:14:38:59:c3:47:ac:16:61:79:20:a0:20:56:
b7:e7:9c:95:ff:ff:14:7f:8c:1e:bf:90:bc:6d:53:bf:51:6b:
b5:be:58:28:77:27:f5:c8:18:2f:6b:17:df:e9:84:48:a9:33:
14:e7:8f:9e:ad:7f:86:5d:82:34:e1:7d:38:44:3b:38:dc:20:
15:da:97:9e:9b:c8:c0:f9:3c:7a:a7:b5:c6:fa:1b:c2:67:be:
bb:42:cc:90:aa:50:c5:bf:63:c1:b2:c1:79:29:5e:2e:1b:a8:
1d:06:01:b1:54:26:80:91:1a:99:8a:c8:1c:a6:55:5b:7d:2c:
0d:fe:d8:fe:6e:15:de:a6:b4:a6:88:de:07:93:60:08:0b:0e:
1e:eb:ce:c7:17:2f:15:42:82:90:b8:a3:65:cd:87:45:36:4b:
df:8e:6b:07:89:56:1f:05:ef:e8:cc:7c:48:f6:ae:5e:83:3f:
10:b3:22:83:32:cd:fb:7b:56:0a:99:c5:af:f6:ae:df:61:7a:
2d:91:ac:e0:01:cf:ba:f9:4e:f8:06:50:a6:b7:3a:55:7b:b5:
d8:36:6b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:02:50 2026 by rpki-client