Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
File: YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json)
Hash identifier: x5boX1PRVvKguesz/sauyD08yv0zscJXxLA+byzaaFI=
Subject key identifier: AA:38:06:E3:7D:FE:39:4D:4D:B9:D3:9E:3B:B1:0C:C2:15:DB:B0:93
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 019FAE64505AA318726067DAC5EC6814AE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
Manifest number: 0A3C
Signing time: Wed 29 Jul 2026 15:00:37 +0000
Manifest this update: Wed 29 Jul 2026 15:00:37 +0000
Manifest next update: Thu 30 Jul 2026 15:00:37 +0000
Files and hashes: 1: 1-oc31O5yGfJm_mzZWVg8lkL2Wxc.roa (hash: Zj2r9ATg5ynR2EMFecfZew5Um/8F+DW2YUnerFrqrJY=)
2: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: eFKJkWzHG8PGNLWTcHgKzx1Y+e/o0so3VOwkqljOThs=)
3: _3UUxWfdIKjZ94RP_R__5_MA69o.roa (hash: xEub+d4iGHet4J1D7KwTY4kCPRXkdFvIc+V+yAPzmjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:64:50:5a:a3:18:72:60:67:da:c5:ec:68:14:ae:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Jul 29 15:00:37 2026 GMT
Not After : Jul 30 15:00:37 2026 GMT
Subject: CN=aa3806e37dfe394d4db9d39e3bb10cc215dbb093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:69:0f:4c:07:6f:a5:10:35:52:00:95:d3:
e4:af:39:ad:62:1d:c8:61:a5:56:bf:cd:6e:40:43:
8a:82:d8:ee:44:21:5c:81:39:e6:8f:5a:42:f2:6f:
94:50:57:1d:ef:61:62:a9:8b:22:7b:49:28:c1:99:
63:31:50:0c:36:d0:e1:9f:3c:17:50:5d:30:21:64:
41:8a:36:87:87:2e:ad:6e:66:e1:aa:b8:8f:6d:4d:
cf:24:a0:c7:fa:31:b1:07:e9:97:87:25:e2:7e:4d:
75:df:df:65:1a:31:4a:b7:9b:6a:3b:61:c3:01:0d:
54:4b:34:69:1b:e1:21:26:1e:19:75:d4:8f:8e:c1:
28:e7:7a:27:4c:6a:ff:78:67:ea:83:a9:e0:c3:ce:
5c:a7:df:e1:c2:5d:94:0f:5a:2f:77:ea:65:da:af:
c6:df:a2:aa:b8:5e:dd:c4:dc:a4:48:7a:4c:d6:b0:
a3:c5:56:8a:af:ce:89:55:86:3f:a6:48:7a:91:2d:
50:20:9f:be:d2:6d:3e:81:c3:ec:9f:a7:74:95:fe:
0c:c7:4c:d2:d4:32:37:c4:0b:70:fc:3b:2e:bc:ac:
31:1e:f2:76:3e:27:74:85:24:0f:07:1f:4b:5b:53:
64:89:92:6c:8c:12:aa:9a:b5:dd:2c:04:21:64:7a:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:38:06:E3:7D:FE:39:4D:4D:B9:D3:9E:3B:B1:0C:C2:15:DB:B0:93
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:db:97:13:95:e3:a8:26:d9:79:b9:16:bd:e8:5a:cd:1f:2a:
b8:0e:04:5c:01:38:f3:58:60:63:54:38:ef:68:5c:65:f1:07:
d0:e3:1c:3f:47:c7:28:8d:6c:4f:76:c5:40:76:d1:b0:26:7d:
43:64:5d:05:0f:38:ac:98:5e:32:a7:05:52:18:cb:65:7e:dc:
cc:5b:e8:4c:26:22:f5:c0:4a:d4:04:b6:86:37:5f:02:60:a0:
2a:d6:be:50:9f:60:58:60:7d:f9:e6:bb:bf:13:90:d1:0d:d0:
c4:04:f1:91:1d:e8:93:1f:d6:a2:fb:04:33:77:50:b1:77:98:
61:0c:a3:12:e9:99:4a:7b:e0:f0:c7:0c:a3:2f:3d:ce:23:d2:
e7:3a:cd:df:85:38:9a:44:ec:c0:a3:2a:06:40:4d:b4:e8:94:
9a:20:38:70:43:b0:12:c6:45:c5:d0:e0:c0:31:f8:e1:e4:b2:
5d:15:03:b2:dd:3d:e9:9c:a5:e1:48:af:b3:91:53:e3:5b:6b:
49:85:d6:ef:e4:70:dd:70:14:c9:84:09:4b:74:a1:c0:92:ab:
e8:42:b0:46:35:55:b8:05:e0:26:ec:27:40:3b:28:5a:f1:ff:
0b:ce:56:d5:8f:af:85:13:4f:bc:21:86:ce:e7:fe:63:21:a4:
62:c3:fc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 21:32:20 2026 by rpki-client