Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
File: PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft (raw, json)
Hash identifier: cINKisWyz5VhwkSR0UJ4WvPQv8+eGisWGB2RHCFWMzQ=
Subject key identifier: E2:C8:00:85:C1:BE:4B:BE:10:0D:6F:2C:5D:8A:D8:06:AE:44:A8:70
Authority key identifier: 3D:8E:9B:06:F5:2C:25:2F:E4:B9:92:DF:6A:60:AF:BA:1E:2A:65:04
Certificate issuer: /CN=3d8e9b06f52c252fe4b992df6a60afba1e2a6504
Certificate serial: 019F935B7BBB22861FD7AA1A9DA5222D4060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:13 +0000
Manifest this update: Fri 24 Jul 2026 09:01:13 +0000
Manifest next update: Sat 25 Jul 2026 09:01:13 +0000
Files and hashes: 1: KjEP_FeRjaCDWUpm2501anJue10.roa (hash: CaZmS0hWmvo4gvgK/puCqUe+E5whldBNRP9ESBAkrCs=)
2: PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl (hash: 8MmM1oJPI0A7m+/d/UrMqd/8A94lOCaVbYLBjQy0NQ0=)
3: RfLbU_NtwZVGZGWu9yPN4FC6N74.roa (hash: yuAby2LbbCSpG7kfmQ+En+69+UvEC4Uf5CSlJYEhBKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:7b:bb:22:86:1f:d7:aa:1a:9d:a5:22:2d:40:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8e9b06f52c252fe4b992df6a60afba1e2a6504
Validity
Not Before: Jul 24 09:01:13 2026 GMT
Not After : Jul 25 09:01:13 2026 GMT
Subject: CN=e2c80085c1be4bbe100d6f2c5d8ad806ae44a870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:5a:d5:3e:70:1f:d9:49:aa:fc:82:2a:ee:
ac:21:98:71:5a:1a:70:cd:52:61:70:73:2c:d8:31:
2d:35:a7:08:fa:e2:2a:d1:38:08:85:b9:f0:06:b2:
33:ec:50:d6:1d:30:34:9a:84:54:68:d0:17:e1:02:
be:e7:cc:c6:5a:77:e9:d6:19:c2:57:05:41:da:0c:
ff:fe:75:d4:48:bc:7b:a9:77:f7:bd:3e:5f:d0:8b:
e8:0b:68:d4:83:92:26:b1:30:49:79:4f:d7:7d:cc:
3f:d5:b4:66:00:6e:c4:96:28:e9:66:0d:b2:c0:53:
07:0a:be:25:56:50:16:19:6f:6b:2d:69:79:36:ee:
eb:a1:85:75:cb:04:a4:a8:d2:57:20:f3:67:9f:85:
ba:7e:17:3b:30:6f:a5:6c:4d:30:42:07:8e:ec:58:
03:19:77:c4:03:ad:31:30:76:43:3f:74:b1:42:86:
88:75:88:e0:12:d6:a4:d9:d1:72:6a:4a:70:24:4c:
d0:6e:15:2a:c0:c3:92:2a:11:b3:0f:e6:40:9e:7a:
cb:85:e1:fd:e3:20:1b:4a:be:39:a2:d0:e6:f8:0d:
4d:02:3a:35:8f:e8:d9:b0:a7:a8:90:0f:5b:8f:8c:
c2:0b:26:f0:75:4e:9e:ed:a9:51:ef:ae:74:2f:f6:
2e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C8:00:85:C1:BE:4B:BE:10:0D:6F:2C:5D:8A:D8:06:AE:44:A8:70
X509v3 Authority Key Identifier:
keyid:3D:8E:9B:06:F5:2C:25:2F:E4:B9:92:DF:6A:60:AF:BA:1E:2A:65:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PY6bBvUsJS_kuZLfamCvuh4qZQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/PY6bBvUsJS_kuZLfamCvuh4qZQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:12:5c:26:30:9e:73:bd:9f:9f:7d:2d:44:b2:a4:23:ee:27:
75:90:e6:1a:0d:6e:5c:3c:06:da:60:3e:32:37:ca:74:ee:1c:
fa:66:8c:66:68:f6:a7:0e:b5:52:d7:be:3d:92:8c:b1:ae:93:
15:f1:d9:47:82:c6:bb:ef:91:af:be:8c:f1:9e:74:c6:63:7e:
46:64:02:00:b6:5e:f0:77:80:5d:4c:93:a1:51:f7:57:9e:79:
92:2c:9f:9b:eb:2d:3a:e5:2a:3e:85:10:31:4d:80:a7:39:46:
27:b9:6b:de:09:71:7c:4f:0a:a6:b4:93:85:8d:8c:26:6d:2b:
fd:10:b0:a7:ee:ec:b3:70:73:89:61:1b:25:4b:d8:8d:ef:d4:
e0:84:f1:15:fa:d8:6a:8d:40:03:6d:10:42:c4:16:c7:40:ca:
e4:16:4f:d1:53:e7:09:cd:68:1f:18:7e:a4:f3:e0:6b:e1:b8:
4d:6b:8a:b1:4e:57:2c:ff:4b:8f:cf:fe:af:b3:9e:c3:a3:5a:
22:5e:f8:a1:70:c1:ae:12:71:0d:64:1c:32:0c:4f:5d:2e:f8:
5e:ed:94:50:eb:92:a3:d1:cd:70:d3:40:8c:ae:3a:8f:61:4c:
cc:3d:7c:cd:5e:13:10:c2:a2:c7:1e:d9:f8:e8:a6:72:1f:bc:
6c:1a:2b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:54:30 2026 by rpki-client