Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
File: y38v-zmqLfIAS3yhVz0RMXqPt0o.mft (raw, json)
Hash identifier: TOEarB2CcmYRU0MJmAXVQOYpn76snikQ3CGtSnH9gKE=
Subject key identifier: 47:60:EC:B5:E6:9F:E4:DA:BC:66:63:E7:08:B5:90:C0:87:E8:9E:24
Authority key identifier: CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
Certificate issuer: /CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Certificate serial: 019F8E6B51ADA59BF99FB30DF69301413C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
Manifest number: 01DD
Signing time: Thu 23 Jul 2026 10:00:25 +0000
Manifest this update: Thu 23 Jul 2026 10:00:25 +0000
Manifest next update: Fri 24 Jul 2026 10:00:25 +0000
Files and hashes: 1: 6Ns2Tq-n87jQpr-uT64fUsVKUX0.roa (hash: z05GfLGcIJ87A3P7XPgnZqPOo0sEQDgBgR5Fwhr1K/M=)
2: vBFUgAPrb_za250_sAWNgAKVaak.asa (hash: b0gKI4/m0v9gKs9clAAyF8VJb5SwiSpATYcLJDL8KGc=)
3: y38v-zmqLfIAS3yhVz0RMXqPt0o.crl (hash: a65pIFLJKypVGk+V/Z9nNJ506BHVuMuHaW7rkMnis4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:51:ad:a5:9b:f9:9f:b3:0d:f6:93:01:41:3c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Validity
Not Before: Jul 23 10:00:25 2026 GMT
Not After : Jul 24 10:00:25 2026 GMT
Subject: CN=4760ecb5e69fe4dabc6663e708b590c087e89e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:fb:8c:21:10:3c:77:e2:95:2c:eb:6c:ac:
d6:a1:d3:48:10:d2:58:4b:30:68:0c:0a:99:3f:33:
71:b8:18:a4:74:71:bf:4c:e2:8f:c0:a3:8f:48:db:
d6:e7:51:48:ac:29:91:09:18:43:38:e9:19:3c:23:
3e:ed:da:0b:b8:b6:0c:be:12:40:3d:21:f7:35:26:
d0:ca:b1:58:b0:45:75:00:f5:8e:44:d3:3a:60:55:
dc:3e:44:2e:56:7d:6b:c8:b7:7c:ab:69:3d:d3:5b:
55:ff:c7:b9:de:c9:c4:bf:2c:35:97:79:56:34:ed:
8d:1d:63:bf:38:c8:20:7f:20:64:c3:8a:59:19:c9:
c7:05:ab:e8:9c:60:71:13:18:4b:02:95:56:36:50:
a6:a8:b4:4f:da:a9:42:58:a0:60:d1:8b:de:4b:1c:
7f:f7:e7:f0:25:1c:e5:23:c9:c1:0c:6b:84:bc:5d:
f5:ad:df:a9:b0:54:e5:fe:e1:09:ab:4c:4f:f1:3c:
21:74:10:11:5c:b5:c7:a1:d0:ff:47:8d:dc:45:0a:
b3:33:5a:a7:f8:e1:c4:0a:0c:09:9e:c3:5c:07:41:
38:05:2a:2e:d2:bf:96:49:ee:46:9b:ab:84:c8:09:
bc:46:22:7f:a1:fe:87:73:5c:f0:00:6e:f9:29:02:
29:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:60:EC:B5:E6:9F:E4:DA:BC:66:63:E7:08:B5:90:C0:87:E8:9E:24
X509v3 Authority Key Identifier:
keyid:CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:67:4b:92:39:e8:eb:76:6c:ab:25:23:af:43:24:6a:0b:b7:
e4:a2:6b:6c:d1:2c:ef:39:a1:24:d4:94:c0:1b:e2:50:3f:86:
86:6e:44:b1:e5:2d:4a:2d:2c:32:f2:16:4e:35:28:83:33:75:
9a:16:b3:b7:0b:40:51:ee:03:b7:35:f3:8e:01:03:59:60:4b:
ed:71:90:c1:74:96:54:c2:9c:84:4d:8b:62:f1:8a:ed:21:ec:
64:fe:72:bb:02:44:b5:65:cd:51:62:5f:d9:bd:19:13:dc:0f:
1d:c9:eb:61:ba:06:f1:e2:33:99:9a:8c:64:b8:01:da:56:d9:
a7:3f:16:29:66:d6:ae:24:f8:fc:4f:2e:68:59:95:ba:6e:83:
e5:56:df:2a:33:77:a7:b7:74:d1:ec:71:dc:fb:c1:3e:90:46:
bc:be:fb:57:d6:0b:5d:cc:4d:61:5e:63:7d:d3:ee:de:9a:40:
36:d8:1c:83:66:70:9f:bc:96:22:e2:7e:be:0b:1e:6b:c2:33:
93:39:75:fe:e1:52:dd:00:38:84:22:d3:00:ed:44:59:4c:ea:
48:46:a9:99:4a:ca:49:a4:45:4a:a2:b2:27:15:7e:40:cb:f5:
5f:3d:a1:c6:90:80:87:71:b3:31:9b:b7:94:b5:e8:c9:42:f3:
6c:99:fe:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:22 2026 by rpki-client