Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
File: PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft (raw, json)
Hash identifier: zFw1mXlF0FHLGZin0dE9Rabqwpj0IxP6K3O4kpu2TLk=
Subject key identifier: 36:3D:D7:BC:5E:E2:3F:61:BE:DA:D2:12:5B:B1:25:35:A4:D4:6B:A4
Authority key identifier: 3D:8E:9B:06:F5:2C:25:2F:E4:B9:92:DF:6A:60:AF:BA:1E:2A:65:04
Certificate issuer: /CN=3d8e9b06f52c252fe4b992df6a60afba1e2a6504
Certificate serial: 019FA8997AEB86CEB5A0632AA48D9579DB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:58 +0000
Manifest this update: Tue 28 Jul 2026 12:00:58 +0000
Manifest next update: Wed 29 Jul 2026 12:00:58 +0000
Files and hashes: 1: KjEP_FeRjaCDWUpm2501anJue10.roa (hash: CaZmS0hWmvo4gvgK/puCqUe+E5whldBNRP9ESBAkrCs=)
2: PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl (hash: Ngrz5cihbRqegTdXQQAdH0H+EpIPMPaMIrBYpPv3wEk=)
3: RfLbU_NtwZVGZGWu9yPN4FC6N74.roa (hash: yuAby2LbbCSpG7kfmQ+En+69+UvEC4Uf5CSlJYEhBKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:7a:eb:86:ce:b5:a0:63:2a:a4:8d:95:79:db:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8e9b06f52c252fe4b992df6a60afba1e2a6504
Validity
Not Before: Jul 28 12:00:58 2026 GMT
Not After : Jul 29 12:00:58 2026 GMT
Subject: CN=363dd7bc5ee23f61bedad2125bb12535a4d46ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:a7:b6:8a:e6:76:aa:7a:be:59:7d:44:a4:
4d:7c:5e:38:f6:4c:ae:da:19:d7:0c:f4:a1:3d:b0:
37:9e:9d:ec:22:21:39:9e:be:cd:38:ff:bb:5e:c7:
19:68:d8:4b:e8:b9:b5:70:94:26:9a:bb:51:cd:64:
db:d0:63:4d:23:8f:1d:12:c3:26:3e:a2:f9:bc:41:
6c:72:87:ed:ad:dc:65:18:bd:e6:67:d0:10:29:87:
ab:47:b7:4c:eb:12:12:f6:c1:11:ba:75:5d:fd:83:
e9:00:c7:cf:9e:5e:1d:9d:6b:98:47:19:78:4b:c3:
f7:6e:55:57:74:3c:2b:a4:c5:89:b9:31:20:3f:92:
7c:7b:37:91:de:04:78:1d:55:3f:e7:49:b5:e5:b8:
e4:23:a1:54:b1:34:9e:28:30:ca:1d:eb:48:e8:72:
f7:cd:fd:08:24:bb:14:d5:de:02:c1:48:78:b5:99:
8e:46:0e:49:14:5d:d4:ff:60:02:d6:6e:29:06:c9:
22:c1:8b:06:97:91:db:c1:19:56:77:1c:6f:e2:6e:
8d:2b:2d:ea:0a:05:84:e9:b0:d3:0b:0f:42:22:a9:
41:c7:68:c1:4c:9d:c4:55:55:9c:0a:4d:6b:7d:ce:
75:2d:1d:bd:b7:84:b4:06:7a:ac:17:bb:0b:2a:1e:
23:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3D:D7:BC:5E:E2:3F:61:BE:DA:D2:12:5B:B1:25:35:A4:D4:6B:A4
X509v3 Authority Key Identifier:
keyid:3D:8E:9B:06:F5:2C:25:2F:E4:B9:92:DF:6A:60:AF:BA:1E:2A:65:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2e:81:1d:e1:2e:11:09:db:67:3b:85:6b:44:e1:10:34:30:
14:2b:bc:72:6d:ce:6d:1c:d0:14:8f:3b:da:b4:ab:46:10:bf:
82:4b:75:f1:5f:df:e9:60:01:22:c9:a1:57:93:f9:e5:18:56:
40:b5:c4:28:66:af:54:62:39:ca:16:6d:21:66:e2:bc:d7:2f:
da:c8:c6:d7:1e:ca:4e:e2:a9:dd:7b:e5:1d:cf:a4:ae:a7:60:
2b:e6:a6:ff:5a:de:eb:43:38:7c:3e:64:17:af:f4:da:57:af:
31:e8:ff:d6:4b:e6:7b:57:08:e1:07:a1:c5:7d:8e:a6:17:a1:
68:12:ef:79:98:39:05:03:7c:bc:a8:30:c5:73:41:31:2f:d1:
74:46:85:ca:03:72:7a:9a:d3:95:a3:0c:d3:f4:cb:3a:b0:e4:
19:e2:8d:de:4b:26:11:5a:85:a7:64:fb:a2:b9:e7:d3:64:91:
18:a9:6b:7b:d6:0b:30:8d:d8:5b:67:b3:ee:31:1f:d6:c7:cb:
4c:80:cc:fd:65:d2:a5:f7:74:14:26:1a:a6:cf:8f:ca:98:60:
fb:25:4b:d4:23:9d:60:a2:21:b2:4c:db:70:9a:ca:36:ce:61:
62:87:bc:e8:19:83:4a:94:3e:6a:7a:d0:ca:5b:3a:54:2a:4b:
00:58:dc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:08:58 2026 by rpki-client