Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: dLW5nIrOtInWfDVFX7uQb15VJ6Ray6QFVHkWGemknPc=
Subject key identifier: 25:42:73:EB:A9:4A:9D:E6:21:14:D2:5C:BA:81:90:13:73:24:96:E3
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 019EC1490AF6D20E2A6648282F0F46935527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 0AB8
Signing time: Sat 13 Jun 2026 14:00:50 +0000
Manifest this update: Sat 13 Jun 2026 14:00:50 +0000
Manifest next update: Sun 14 Jun 2026 14:00:50 +0000
Files and hashes: 1: AE7tKoXDyuuPCaDaUfMyBa4xWdM.roa (hash: xVpRKPTRXjz76O68/XRyRJECKQ9lTBxMBzIgyh25rxU=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: vMonoUvlQ4DCCHQzr0a9SsJd6eicir338GFUPQdVBA0=)
3: rNinx4CuZpXEUOOVr_5qkOxUOro.roa (hash: c7dKHMaq9EPZZdDOaPAKKGKEDbpiSPHR+ZX8mfzSM64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:0a:f6:d2:0e:2a:66:48:28:2f:0f:46:93:55:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Jun 13 14:00:50 2026 GMT
Not After : Jun 14 14:00:50 2026 GMT
Subject: CN=254273eba94a9de62114d25cba819013732496e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ef:a4:22:34:60:26:0b:42:a0:81:60:b5:96:
15:10:b5:8f:62:a9:8b:cc:3e:c0:d5:ab:e0:a2:0a:
1e:65:95:eb:44:50:2f:74:45:9c:81:b4:d6:c2:b0:
60:b1:42:97:b8:72:f1:d2:ca:10:14:b4:9e:17:9f:
90:0f:54:e1:a6:b5:c4:13:18:12:e5:79:cc:47:90:
a9:15:94:94:fd:df:fd:1a:15:95:24:2a:72:2f:66:
3b:6e:78:1f:d6:cd:b2:cf:ae:1f:97:64:b1:50:14:
9b:14:ad:0f:ce:32:b9:e0:d9:23:c5:48:ee:00:f5:
9f:1d:7a:1b:40:42:d5:9b:8a:40:39:00:07:fd:e1:
41:4f:21:ca:8d:95:87:d8:c9:c2:c6:45:cf:11:9e:
40:95:cc:e9:44:e2:fc:7f:b4:1f:d0:f1:bb:89:24:
8b:67:49:32:14:82:cb:7a:0f:2a:b2:66:f4:50:c5:
91:67:38:9e:89:49:f4:ef:6b:f8:98:58:83:c7:94:
ca:80:02:ea:f8:df:17:05:49:ce:73:e8:6a:99:0c:
a6:64:03:9a:db:ab:40:94:61:58:00:4b:07:da:67:
2c:3a:be:15:4e:27:ad:15:f6:4b:80:91:73:c9:7e:
70:4f:3a:c9:b6:f9:54:ad:9d:5b:7a:26:65:95:7d:
ba:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:42:73:EB:A9:4A:9D:E6:21:14:D2:5C:BA:81:90:13:73:24:96:E3
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:69:84:91:17:d0:9c:d5:78:d4:5b:db:4f:4c:49:92:9c:65:
a8:b3:2f:88:10:97:11:ac:00:8e:e7:8d:4c:61:a4:ec:1b:46:
d4:6b:92:02:72:84:56:4c:32:26:d2:2b:d1:55:63:fe:2d:25:
07:3a:55:0b:17:25:0d:43:09:50:55:2b:cf:e6:9c:14:7e:f9:
6e:da:f6:25:0e:b0:42:fb:ec:10:0f:bc:95:ac:67:c1:41:ba:
c0:49:01:6b:55:40:28:7b:d6:2d:2a:3d:5f:b8:30:76:d3:36:
41:64:45:46:00:5f:a1:3a:77:8a:56:df:56:b8:45:1b:07:32:
63:e4:80:11:0c:7c:23:6b:98:6b:3d:65:5f:b9:d7:fb:2e:d0:
18:2e:12:37:fb:af:4c:0e:41:e0:94:a1:87:39:c4:e3:e4:3a:
1d:91:7c:63:d0:e6:33:97:3d:e0:bc:99:00:bb:a6:c3:5f:12:
68:97:f4:be:9a:e2:8a:5d:46:59:ed:6d:cb:28:bf:2f:f5:33:
3a:56:a8:42:44:18:1a:77:5e:c9:41:4e:82:ef:a4:d1:67:e9:
93:7b:57:f0:52:32:78:7b:21:37:97:51:64:30:32:ab:60:91:
b4:97:45:bc:ee:25:5a:2a:7b:b3:45:f5:b3:b8:56:b6:f3:23:
dc:85:94:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:20 2026 by rpki-client