Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
File: PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft (raw, json)
Hash identifier: +PWFX5uKQ3XhDhWVdM4iWCL40fF+FC4nQyWYZzyELow=
Subject key identifier: 1B:8A:D3:4D:A9:FA:39:93:2E:18:9A:17:01:A9:E1:2F:94:2D:77:8E
Authority key identifier: 3D:8E:9B:06:F5:2C:25:2F:E4:B9:92:DF:6A:60:AF:BA:1E:2A:65:04
Certificate issuer: /CN=3d8e9b06f52c252fe4b992df6a60afba1e2a6504
Certificate serial: 01A0DF85FF3FC46F63E11AA93B128CE970AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
Manifest number: ED
Signing time: Sat 26 Sep 2026 21:01:35 +0000
Manifest this update: Sat 26 Sep 2026 21:01:35 +0000
Manifest next update: Sun 27 Sep 2026 21:01:35 +0000
Files and hashes: 1: KjEP_FeRjaCDWUpm2501anJue10.roa (hash: CaZmS0hWmvo4gvgK/puCqUe+E5whldBNRP9ESBAkrCs=)
2: PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl (hash: JHhOrwLIqpkyWbHpw5V+ClC+9+f6L75mudhWLprvNFg=)
3: RfLbU_NtwZVGZGWu9yPN4FC6N74.roa (hash: yuAby2LbbCSpG7kfmQ+En+69+UvEC4Uf5CSlJYEhBKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:85:ff:3f:c4:6f:63:e1:1a:a9:3b:12:8c:e9:70:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8e9b06f52c252fe4b992df6a60afba1e2a6504
Validity
Not Before: Sep 26 21:01:35 2026 GMT
Not After : Sep 27 21:01:35 2026 GMT
Subject: CN=1b8ad34da9fa39932e189a1701a9e12f942d778e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c5:2a:69:69:6a:47:34:0a:e5:89:94:c7:b7:
78:0c:b9:52:46:57:ea:c6:f5:50:1b:7d:6d:fe:8f:
1c:f0:ed:8b:38:8f:6b:6b:8b:e6:f5:15:4c:2f:b2:
4e:46:02:8e:56:97:cd:23:b4:b9:60:c7:91:9d:b5:
86:c6:d9:a7:2f:fa:7b:45:7d:90:04:be:2b:49:8c:
c6:6f:70:e4:a3:0e:1a:45:e0:36:a4:7e:4e:3b:10:
60:04:c9:8d:33:38:b9:dc:4a:be:32:09:fb:70:bf:
72:d9:27:51:c2:01:1c:a3:65:9c:93:e8:a2:ec:eb:
35:e5:31:6e:d7:13:49:d3:cc:aa:05:1d:47:a9:4d:
2b:42:75:ac:4b:8b:3c:97:23:b6:e6:fa:f2:df:07:
61:ed:96:aa:35:5a:ef:a2:47:d4:67:b0:f3:c0:8c:
cc:31:f2:43:34:53:8d:02:f3:86:46:5d:41:6c:57:
f9:73:10:4e:a4:ac:3a:1c:45:17:80:de:04:c8:96:
dd:6b:99:a7:6c:3b:b2:24:c1:e7:64:ab:b3:75:e0:
25:16:b8:c5:c9:06:af:98:b4:0f:7d:a2:4b:60:ac:
e3:27:16:ee:bc:30:a2:f0:3e:c2:47:51:ab:c1:aa:
bd:9d:4b:3f:6e:93:56:2c:44:c1:64:2a:f7:e9:eb:
bd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8A:D3:4D:A9:FA:39:93:2E:18:9A:17:01:A9:E1:2F:94:2D:77:8E
X509v3 Authority Key Identifier:
keyid:3D:8E:9B:06:F5:2C:25:2F:E4:B9:92:DF:6A:60:AF:BA:1E:2A:65:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:84:43:7a:8c:54:35:67:8c:29:a6:c9:f5:99:41:eb:22:3b:
47:bb:7c:00:b3:b4:f8:b2:83:a1:a7:a7:ef:60:df:1d:09:50:
19:12:60:db:33:c6:0f:30:8f:da:72:00:f0:7d:a0:ae:cc:30:
a8:9b:79:ec:15:05:8a:79:e8:04:ba:e0:de:e4:a6:c1:eb:10:
ef:42:16:40:21:2e:90:6e:86:bb:ae:f7:5b:5d:36:f5:e4:e1:
c2:95:57:40:58:bd:64:3d:1e:77:b8:54:90:3c:de:e9:87:89:
df:6f:19:97:a3:b8:cf:19:c9:c2:a0:37:2d:9a:16:f8:64:db:
f5:36:e1:e0:3f:97:96:4d:31:0d:56:7e:9e:44:2a:c8:8d:7f:
b3:84:65:3d:5f:4d:4b:85:75:a8:7e:33:04:ec:97:e6:78:c5:
be:32:76:46:c9:97:fc:51:da:7e:9b:bb:2b:ee:c8:d3:25:62:
46:c4:8f:d1:a1:aa:a0:95:36:1e:fe:0f:c3:62:65:52:b4:a4:
a9:91:ea:56:b8:e4:e2:62:91:f7:8e:87:af:a0:10:00:d0:8f:
12:55:b4:ea:a3:5d:43:d7:70:72:71:9c:5a:df:b9:ab:95:fa:
4b:d5:24:1b:47:99:b9:56:fa:c5:06:fe:52:a7:32:60:de:6e:
40:c9:03:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:58:52 2026 by rpki-client