Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: sohcZqdasNrXsKmm5iB69gp2jxf64Nc1RaWkE6QCcYQ=
Subject key identifier: C7:97:E6:4E:F6:B2:C2:4B:6B:FF:30:C2:C2:DA:00:66:6C:8E:D5:E9
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 019FAAF558A5187A99DF1438CF9EA0FFC682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 0B31
Signing time: Tue 28 Jul 2026 23:00:33 +0000
Manifest this update: Tue 28 Jul 2026 23:00:33 +0000
Manifest next update: Wed 29 Jul 2026 23:00:33 +0000
Files and hashes: 1: AE7tKoXDyuuPCaDaUfMyBa4xWdM.roa (hash: xVpRKPTRXjz76O68/XRyRJECKQ9lTBxMBzIgyh25rxU=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: 9dU2VQPwJhjkX48laXXf9QHMQVUB9po/Vwv6jNYKKDw=)
3: rNinx4CuZpXEUOOVr_5qkOxUOro.roa (hash: c7dKHMaq9EPZZdDOaPAKKGKEDbpiSPHR+ZX8mfzSM64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:58:a5:18:7a:99:df:14:38:cf:9e:a0:ff:c6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Jul 28 23:00:33 2026 GMT
Not After : Jul 29 23:00:33 2026 GMT
Subject: CN=c797e64ef6b2c24b6bff30c2c2da00666c8ed5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:19:65:54:19:60:2b:a1:0e:42:cd:cf:f6:50:
d2:2a:14:e1:18:6d:b5:4d:5c:bf:5a:e6:b5:64:96:
2e:a6:68:18:18:db:32:09:d0:c6:02:ed:88:b5:5e:
f7:8f:06:46:86:ac:a6:8a:34:d3:07:96:2e:b9:11:
ef:bd:78:9b:d7:42:59:57:84:5d:2e:59:fc:91:5f:
54:34:e5:1d:48:5a:bf:7d:38:ed:0a:73:1a:f2:4c:
e7:67:c4:9a:37:9e:84:fd:9e:81:32:63:cc:ed:89:
a2:24:52:ec:71:af:34:06:c0:6a:8b:3b:34:06:cc:
9e:5e:b4:97:48:99:8e:97:8d:db:37:ce:77:8b:40:
89:eb:8a:4c:70:b1:ea:fa:58:db:ea:95:85:c1:39:
d3:4c:d2:8f:21:61:5d:7c:d1:4b:e4:3a:85:c0:0e:
c7:67:30:56:2e:a8:43:93:b7:bc:59:1c:ba:c3:a6:
8e:3d:90:02:ff:18:c5:7c:9e:e0:de:35:0d:de:33:
da:8d:d2:8d:90:90:40:5f:9c:ed:c0:50:23:7c:0d:
13:b7:c3:14:c3:56:39:8a:70:20:60:fd:0b:10:8c:
3d:dc:43:b5:61:3e:11:8e:bb:09:ee:ae:b8:d6:d0:
24:a9:51:03:07:f8:e6:60:e2:d4:fc:e5:0c:7d:bd:
9f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:97:E6:4E:F6:B2:C2:4B:6B:FF:30:C2:C2:DA:00:66:6C:8E:D5:E9
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:56:0a:41:f2:9e:04:1e:45:b1:a8:e4:55:4d:74:e3:76:5d:
ac:d3:e3:8c:75:58:bc:12:dd:4c:55:e5:d9:a3:dc:20:2b:8d:
87:cf:97:42:7a:b8:21:c5:72:16:17:d4:ce:f8:55:c0:b9:91:
e1:2f:6b:c6:4c:8a:f5:44:52:a2:3e:ff:b6:08:92:bd:4b:cb:
22:07:4f:69:5c:f0:37:21:3b:3e:a7:fa:7b:50:de:c1:20:c5:
62:11:40:a9:81:3f:18:92:a0:0b:fc:70:18:2a:3e:25:13:62:
45:c8:ad:03:4a:f3:78:a4:59:e8:15:5e:e4:55:7c:98:7d:c8:
8c:6f:ee:36:82:1d:e6:4e:2c:40:2b:82:11:bb:76:c1:c1:16:
b2:d2:08:cd:1d:14:1a:5e:a8:7d:47:20:97:38:d3:9e:51:86:
a0:bf:c1:7e:ab:5b:50:00:52:f4:07:e9:72:12:37:89:5a:fe:
04:fc:e5:76:63:8c:c1:c3:77:0f:7e:eb:15:df:31:4a:93:5f:
25:f3:1a:bf:03:ff:fd:ec:d0:4b:09:ed:5d:94:70:6e:1c:9d:
b2:37:da:6c:1e:1f:b3:4d:23:a2:ac:e2:59:36:ae:94:00:3c:
52:a2:36:dc:67:b3:3c:f9:a5:71:66:40:f3:92:e8:3d:fc:ba:
37:f2:34:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9VilGHqZ3xQ4z56g/8aCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmRjMDlhZDU0YTM5N2M2MDRlOTRhMWM5NjZlMmMyOTYw
NTljYzEwHhcNMjYwNzI4MjMwMDMzWhcNMjYwNzI5MjMwMDMzWjAzMTEwLwYDVQQD
EyhjNzk3ZTY0ZWY2YjJjMjRiNmJmZjMwYzJjMmRhMDA2NjZjOGVkNWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BllVBlgK6EOQs3P9lDSKhThGG21
TVy/Wua1ZJYupmgYGNsyCdDGAu2ItV73jwZGhqymijTTB5YuuRHvvXib10JZV4Rd
Lln8kV9UNOUdSFq/fTjtCnMa8kznZ8SaN56E/Z6BMmPM7YmiJFLsca80BsBqizs0
BsyeXrSXSJmOl43bN853i0CJ64pMcLHq+ljb6pWFwTnTTNKPIWFdfNFL5DqFwA7H
ZzBWLqhDk7e8WRy6w6aOPZAC/xjFfJ7g3jUN3jPajdKNkJBAX5ztwFAjfA0Tt8MU
w1Y5inAgYP0LEIw93EO1YT4RjrsJ7q641tAkqVEDB/jmYOLU/OUMfb2f9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeX5k72ssJLa/8wwsLaAGZsjtXpMB8GA1UdIwQY
MBaAFGP9wJrVSjl8YE6Uoclm4sKWBZzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yZDBkYTQtYTUzMi00YjAzLTkwNTUt
NGE1Y2JkYjUwZTI5LzEvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yZDBkYTQtYTUzMi00YjAzLTkwNTUtNGE1Y2JkYjUwZTI5
LzEvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVYKQfKe
BB5FsajkVU1043ZdrNPjjHVYvBLdTFXl2aPcICuNh8+XQnq4IcVyFhfUzvhVwLmR
4S9rxkyK9URSoj7/tgiSvUvLIgdPaVzwNyE7Pqf6e1DewSDFYhFAqYE/GJKgC/xw
GCo+JRNiRcitA0rzeKRZ6BVe5FV8mH3IjG/uNoId5k4sQCuCEbt2wcEWstIIzR0U
Gl6ofUcglzjTnlGGoL/BfqtbUABS9AfpchI3iVr+BPzldmOMwcN3D37rFd8xSpNf
JfMavwP//ezQSwntXZRwbhydsjfabB4fs00joqziWTaulAA8UqI23GezPPmlcWZA
85LoPfy6N/I0rw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:31:17 2026 by rpki-client