Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: WvQUTdBn/RsD41tNdwNN1V2KCacjESFboQh4K0Ydh9U=
Subject key identifier: 6F:5C:D3:67:29:D2:9D:7B:7C:54:8E:7F:88:DD:8A:F7:80:22:3A:C0
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 019CAC46FD41E026E963D9148A60CE9E076B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 09A4
Signing time: Mon 02 Mar 2026 02:00:59 +0000
Manifest this update: Mon 02 Mar 2026 02:00:59 +0000
Manifest next update: Tue 03 Mar 2026 02:00:59 +0000
Files and hashes: 1: AE7tKoXDyuuPCaDaUfMyBa4xWdM.roa (hash: xVpRKPTRXjz76O68/XRyRJECKQ9lTBxMBzIgyh25rxU=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: g/wTofKDrbpJ1MotfaJmkQCgcwmHrhdtptP+ftH26Q0=)
3: rNinx4CuZpXEUOOVr_5qkOxUOro.roa (hash: c7dKHMaq9EPZZdDOaPAKKGKEDbpiSPHR+ZX8mfzSM64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:fd:41:e0:26:e9:63:d9:14:8a:60:ce:9e:07:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Mar 2 02:00:59 2026 GMT
Not After : Mar 3 02:00:59 2026 GMT
Subject: CN=6f5cd36729d29d7b7c548e7f88dd8af780223ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:59:5c:7e:c4:52:00:1c:d8:18:b1:62:c5:84:
fb:cf:f3:e4:bc:ad:1e:41:fd:00:09:ed:5b:36:81:
22:c6:22:32:e7:4a:d9:82:5a:c1:7e:fb:9d:a7:65:
4e:7d:6f:e5:c9:09:56:2d:5d:42:17:86:06:66:02:
f0:06:2a:a3:f5:cc:c0:a1:33:e4:16:32:cc:6b:ac:
2b:81:43:fa:71:ab:80:62:be:e9:49:1f:a8:b4:9d:
83:c1:92:af:d0:80:03:ce:d2:d0:30:64:ff:81:73:
68:2d:21:02:dc:16:32:5f:03:be:d2:21:77:51:37:
2e:4c:30:c1:58:0d:e5:66:bc:23:22:b6:d4:d8:16:
89:50:6e:88:75:00:32:b2:0a:4e:d0:19:26:32:a9:
e6:0c:dd:b4:70:f0:2f:f4:2e:c5:38:22:46:ce:ba:
62:c8:97:95:9d:87:6a:2a:1b:e2:9d:34:9f:c2:6b:
79:6f:95:ea:68:0a:c0:20:ba:57:18:06:16:9f:e0:
79:62:a9:09:64:34:be:45:3b:fa:21:79:15:36:8c:
73:c6:33:59:e6:82:03:4a:79:be:cd:02:87:26:e5:
b0:89:48:59:48:ab:1e:26:65:54:85:ab:87:da:6e:
d6:6b:7b:08:81:e4:14:71:23:15:d9:27:9f:21:71:
f7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5C:D3:67:29:D2:9D:7B:7C:54:8E:7F:88:DD:8A:F7:80:22:3A:C0
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a5:3f:ca:5f:87:d6:59:3d:f0:d0:b1:82:71:8e:0f:7e:a3:
8b:3a:1a:89:5e:4e:44:a5:1f:d0:cf:51:e5:f6:c3:0b:fa:f1:
56:bf:61:30:c9:70:54:79:f9:14:49:a7:e9:6f:a9:c7:85:3b:
93:0d:c1:9a:14:01:75:8f:c4:37:13:be:5c:8d:b3:0b:1b:a1:
ec:d0:b0:12:46:b8:13:ae:c2:03:24:98:16:32:05:f9:8b:b8:
c0:ba:15:9f:31:07:54:53:bb:88:ad:34:39:ed:4a:ed:3c:43:
89:2b:37:7a:19:0b:fe:c3:8f:ae:6e:be:c0:14:3a:0f:ed:1f:
6d:5c:70:c4:8f:77:b6:42:70:ce:93:cf:02:38:5b:fc:80:37:
08:7e:a8:10:d7:ce:89:1c:02:81:7d:19:33:e7:e6:76:22:53:
0e:9a:6f:80:ce:22:41:ce:82:eb:12:f1:7f:dd:22:cc:9d:fc:
f9:45:68:8b:f9:22:a2:0d:a8:17:71:03:3a:16:1a:82:da:e2:
10:20:db:19:e5:98:ea:78:44:66:eb:0b:46:d1:81:aa:6b:d3:
e5:da:1f:a0:b6:02:e5:da:d8:1b:2c:54:ee:5c:f8:57:89:61:
8e:69:8c:fa:af:ce:ea:9c:67:13:31:59:06:fe:64:a7:c7:e6:
6a:23:5e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:17 2026 by rpki-client