Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: 9/sxKEbIWKai3SfZjX5ObujyHs9xDC07yuZGhVh5g1Q=
Subject key identifier: 9E:35:B3:4C:EC:C1:B9:3A:D8:E9:68:03:6C:58:25:4B:4B:45:00:27
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 019DA3786A64717C9C8641C4609669684AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 0A24
Signing time: Sun 19 Apr 2026 02:01:10 +0000
Manifest this update: Sun 19 Apr 2026 02:01:10 +0000
Manifest next update: Mon 20 Apr 2026 02:01:10 +0000
Files and hashes: 1: AE7tKoXDyuuPCaDaUfMyBa4xWdM.roa (hash: xVpRKPTRXjz76O68/XRyRJECKQ9lTBxMBzIgyh25rxU=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: zSt0EydgdMyCmXOG0e8/ZCAy2ijhX4RRHjkli+fcCMc=)
3: rNinx4CuZpXEUOOVr_5qkOxUOro.roa (hash: c7dKHMaq9EPZZdDOaPAKKGKEDbpiSPHR+ZX8mfzSM64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:6a:64:71:7c:9c:86:41:c4:60:96:69:68:4a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Apr 19 02:01:10 2026 GMT
Not After : Apr 20 02:01:10 2026 GMT
Subject: CN=9e35b34cecc1b93ad8e968036c58254b4b450027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ab:04:cf:38:1f:6c:ab:4b:4d:c4:a3:07:57:
8a:d4:59:e5:45:5c:ae:31:a0:e2:90:2f:c6:c1:fb:
bd:96:e1:fe:d0:e0:4b:9d:7c:da:61:de:fd:38:c2:
7c:e2:1e:ea:26:77:d5:1b:35:da:59:37:cc:d9:89:
35:12:5d:6f:c3:08:4a:8c:64:09:7d:79:ec:23:72:
32:1c:10:75:e7:25:02:0d:2f:30:b8:28:a7:56:6c:
23:84:cf:d6:98:b6:f0:5d:0a:d2:13:de:29:18:24:
6e:2d:5d:6d:7d:8b:8e:98:1d:60:00:48:7b:dd:21:
c7:a9:ea:2d:94:8b:d3:57:6b:52:32:e4:4e:42:44:
b0:d7:3c:fb:7c:0f:6a:4e:92:eb:8b:ac:88:60:dc:
ae:ab:da:4e:cc:12:76:a1:ce:49:fc:73:6e:28:1a:
b9:96:e6:2f:43:d7:55:ec:c5:59:ef:1a:f9:bf:f4:
ab:b1:30:5b:bb:57:dd:e9:67:a2:8b:56:d4:59:8b:
8e:7d:96:90:33:a7:84:42:14:e4:aa:93:38:e5:48:
85:da:c6:3e:92:5b:ba:65:de:dc:52:4c:89:ab:6d:
40:c4:aa:f3:73:25:13:38:0f:cb:85:00:cb:40:8a:
2d:2f:48:bd:55:d7:e3:f5:a0:93:07:9f:46:9f:9a:
5e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:35:B3:4C:EC:C1:B9:3A:D8:E9:68:03:6C:58:25:4B:4B:45:00:27
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c1:45:31:33:6f:ea:92:55:19:f5:d6:42:29:0d:e3:b7:cd:
a2:eb:75:0b:75:77:a1:da:4c:98:29:d4:a7:3b:d7:60:6a:23:
12:c1:88:04:f2:85:d8:e2:c3:65:35:e9:1c:d9:36:69:ac:9e:
63:10:26:f5:28:5a:95:82:27:7b:bf:a6:59:57:5c:5b:8d:a7:
3d:8d:ee:4c:57:8e:40:17:e8:fe:11:22:97:b0:2f:20:d6:cf:
50:65:c1:ea:88:73:0e:f7:35:f6:49:db:0a:3e:e2:51:6c:2c:
36:3d:36:e1:69:c5:4e:1a:a3:ae:5a:8a:88:0a:1d:66:88:44:
2d:3b:6b:d1:8c:15:33:a9:f3:33:6a:bd:9a:ba:45:c0:8c:b5:
61:84:a3:82:f4:9b:b6:a9:b0:70:52:ae:6c:aa:a1:10:5d:68:
47:4c:20:af:f3:9d:6c:af:a7:ca:28:43:07:5b:96:98:4a:8b:
f2:2a:b7:6e:79:1f:89:5c:02:18:d6:40:b0:d9:0b:2b:3b:be:
f8:8e:52:7b:e4:97:da:fb:2d:28:dc:5f:72:ca:cd:b6:46:eb:
21:3a:1b:78:db:8e:a1:45:e8:c6:1c:b2:3e:b8:d5:67:73:a1:
a5:8f:8a:9c:ef:6b:d9:f1:24:49:f4:f7:18:ed:14:b9:e9:2b:
7a:72:c4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:16:23 2026 by rpki-client