Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
File: YDgxphvIqPTLhYhwIvtvhjlzRdw.mft (raw, json)
Hash identifier: h2vsksWupkyuoAZv5mI+/2I3CHPXmJkX8Hv+/FgOGbU=
Subject key identifier: 33:B7:D3:3C:95:70:7C:1B:A1:A2:2A:EC:84:E5:65:32:5A:EA:23:76
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Certificate issuer: /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial: 019F92B5CF5B678E21D5ACFE7D2CD16EA3DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
Manifest number: 10DA
Signing time: Fri 24 Jul 2026 06:00:16 +0000
Manifest this update: Fri 24 Jul 2026 06:00:16 +0000
Manifest next update: Sat 25 Jul 2026 06:00:16 +0000
Files and hashes: 1: PItnMttIkdeuTPXavmvPG7wEEmg.roa (hash: g8vhWp9yKKoH5MZ8w1k35uUTgUFMBWzylaX6sR0nuqk=)
2: Y5fNbXlu-919bEGmzzCTqLKe4UE.roa (hash: Xsn3mIF6IxJP4Pj8lk0nwBSrm5qnIHW3nv1qCBDI+Z4=)
3: YDgxphvIqPTLhYhwIvtvhjlzRdw.crl (hash: 5unu2Z67xg4Bm/9gDdd9wddqdI6BZJ8No4Go1c+e/g8=)
4: iReKhZ_-E04pzg8ir_i-KAVJTug.roa (hash: JcLEmoPP4jSyDJ+Og5UHxUBX28l4cJMP5KxpG/1AnsE=)
5: nUQG3vVMD7WFpDWiG0W1IymBVlU.roa (hash: EHlmhx+RyBOq9teHa0Af8FNOADjMaSQN2EK+hlsZ4oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:cf:5b:67:8e:21:d5:ac:fe:7d:2c:d1:6e:a3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Validity
Not Before: Jul 24 06:00:16 2026 GMT
Not After : Jul 25 06:00:16 2026 GMT
Subject: CN=33b7d33c95707c1ba1a22aec84e565325aea2376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:bf:c2:94:9b:9b:ca:92:5c:b3:34:b5:6f:b6:
2a:8b:f7:b0:8f:86:40:4b:4f:9a:b2:b7:e6:d2:db:
1f:2e:9e:3d:b4:8f:e1:c2:5c:57:ca:36:a7:6f:6c:
51:7e:0e:f3:d8:1f:5b:3e:25:0a:b5:e7:1e:73:1f:
ed:a8:0b:66:b1:16:97:e1:d3:2e:c8:5d:28:a1:ae:
45:92:46:c8:1d:9a:14:88:53:4f:ba:00:7b:e1:70:
bc:72:ff:e3:98:34:c2:51:a1:f4:fe:73:c4:8a:a9:
68:dc:a1:91:4b:fe:8c:eb:45:d5:9c:30:ac:0a:72:
06:88:ef:e2:3c:d5:08:27:df:7f:d6:f3:19:5c:fb:
dd:85:bc:0b:30:55:06:32:a7:a7:cf:1c:0d:20:1a:
33:f3:4c:e8:63:02:1e:44:f8:ac:99:37:f7:e0:1f:
42:4b:47:88:51:dc:38:00:22:f0:f5:6f:e4:87:71:
5b:f8:9b:2d:50:ff:8d:40:fd:00:da:2b:65:e9:42:
d5:fe:69:d7:6b:a1:b6:c8:38:0b:d2:32:6b:4e:4e:
a1:ba:a1:50:3f:94:21:56:4a:d4:12:bd:5f:39:33:
d7:d4:1f:67:78:08:23:8d:b2:4e:e8:b5:96:ec:67:
1f:fd:4b:1f:eb:8f:9d:99:20:6c:4f:db:9d:14:8c:
e8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B7:D3:3C:95:70:7C:1B:A1:A2:2A:EC:84:E5:65:32:5A:EA:23:76
X509v3 Authority Key Identifier:
keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:51:47:94:4b:3e:e3:87:58:4b:d0:8b:36:44:44:14:c7:c1:
7c:f6:1d:cb:17:df:94:8d:c5:69:58:e6:f5:30:c0:16:a7:8d:
20:4a:d1:89:b7:d6:55:b4:15:82:5d:0e:b3:9c:20:b7:df:d6:
2f:76:34:4c:af:e7:69:c5:99:20:40:5f:5f:20:88:ad:f8:f9:
2f:4d:a3:e0:ba:ed:f7:c8:2d:da:c6:3c:36:c0:85:7b:5a:64:
a5:e4:27:30:c4:cc:9e:60:fb:5f:62:df:0e:f4:a5:6b:b3:a4:
74:ec:2e:e3:13:30:c5:90:06:de:f8:ca:98:7c:05:9c:f5:e9:
5c:a6:eb:3f:66:3a:e8:fa:71:e0:00:3a:9a:d4:c6:0e:ff:6d:
07:53:42:bf:2c:3d:f8:83:17:c6:0e:d6:5a:09:76:bd:2e:e6:
89:cc:ab:62:46:e6:b7:59:f7:d5:2d:5f:d8:7a:8b:15:d2:e0:
ca:9a:c3:e1:bb:79:2f:de:0f:2b:62:6a:93:55:ff:c8:a6:33:
50:d4:34:2e:30:8d:9e:a1:2f:ec:3d:91:e1:c8:53:ea:b4:a8:
be:07:33:8f:f7:61:c4:e8:69:0c:ad:85:bd:1a:21:f8:fb:2f:
40:d8:a9:86:14:36:00:b1:11:60:c2:d1:91:29:40:21:93:a8:
8b:3f:8d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:26:13 2026 by rpki-client