Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: MiLkZs5684AHC7afH8JMSdvkA4WI5fPmT0MBh1756BE=
Subject key identifier: 97:4A:D2:88:CB:7F:AB:59:B4:A3:51:A8:BB:0A:87:B0:DD:79:E0:D4
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 019F93C92D77C404A4585DCC7B904D6DCFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 0B25
Signing time: Fri 24 Jul 2026 11:01:02 +0000
Manifest this update: Fri 24 Jul 2026 11:01:02 +0000
Manifest next update: Sat 25 Jul 2026 11:01:02 +0000
Files and hashes: 1: AE7tKoXDyuuPCaDaUfMyBa4xWdM.roa (hash: xVpRKPTRXjz76O68/XRyRJECKQ9lTBxMBzIgyh25rxU=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: IUkNocHxDk4rgT7nYBTB9jzJGng0iRL3ZSniKVvdwhU=)
3: rNinx4CuZpXEUOOVr_5qkOxUOro.roa (hash: c7dKHMaq9EPZZdDOaPAKKGKEDbpiSPHR+ZX8mfzSM64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:2d:77:c4:04:a4:58:5d:cc:7b:90:4d:6d:cf:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Jul 24 11:01:02 2026 GMT
Not After : Jul 25 11:01:02 2026 GMT
Subject: CN=974ad288cb7fab59b4a351a8bb0a87b0dd79e0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0d:06:d5:d7:49:1a:d2:a0:92:e5:ee:3f:ff:
ca:ff:f5:64:44:26:bd:cc:33:9c:3f:de:e8:2b:cf:
3c:73:83:d9:7e:53:5e:f5:82:ee:bb:07:11:17:38:
56:f1:af:53:b4:11:8e:d6:f9:7b:d9:f6:6d:09:9a:
b5:b6:57:f7:ce:dd:51:48:2f:b6:97:e1:56:24:3d:
37:ea:62:ab:72:3e:97:9e:47:2d:50:21:f5:07:ae:
12:6e:1b:33:fa:fe:de:09:8a:60:5a:59:47:e3:35:
e5:3f:6b:40:a3:40:4a:b2:5f:0c:c2:70:06:0e:19:
12:4c:c1:3d:d5:d5:98:01:b9:d0:a7:a3:56:34:17:
f8:fc:87:56:eb:f4:ed:7f:14:45:48:78:ce:90:48:
89:1d:ef:e3:59:d6:df:af:e2:c7:4b:25:ee:9c:83:
cf:36:be:5d:8d:4f:71:ce:c2:3c:f0:c3:df:c3:1f:
3a:f6:9a:d0:fc:5a:cb:33:a2:b8:a4:1d:67:86:77:
83:32:81:37:b7:7f:61:9a:a5:9b:b3:d4:84:94:d3:
85:6c:61:89:b8:7f:6f:09:4c:a1:97:75:f5:4e:e9:
c6:5f:7e:75:45:2e:e5:ba:53:ec:d0:f3:63:dd:1d:
15:df:d9:d3:85:71:28:a6:30:7a:36:5e:7b:49:f7:
27:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4A:D2:88:CB:7F:AB:59:B4:A3:51:A8:BB:0A:87:B0:DD:79:E0:D4
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:73:10:52:75:16:75:ed:f0:b8:6b:07:9c:38:69:e4:a6:ac:
92:7a:3d:dd:8e:59:50:1a:0c:45:42:30:1c:59:7e:93:6c:bd:
61:48:cf:cb:72:ed:09:7e:05:61:90:36:f4:55:f6:5c:69:9c:
3d:81:03:40:dc:02:20:0b:7c:88:1b:26:b6:47:5d:10:29:8e:
c8:63:bf:be:33:a1:04:d9:89:39:7f:8f:00:7a:2e:ac:ff:ac:
08:7b:71:17:12:47:f1:17:ef:bd:c3:a5:0a:9f:86:f7:11:73:
2c:a5:4f:e5:03:74:1b:5b:92:7c:f1:85:61:81:01:1d:f8:aa:
78:c9:72:17:85:c8:4f:15:64:cf:95:28:d9:e1:6c:92:bf:a3:
10:51:2a:46:7f:07:45:5c:8e:9c:ad:ef:f2:2b:ec:fb:e9:e6:
e9:05:2c:c3:ce:1f:07:20:ed:65:ac:08:03:9b:e2:1d:42:4b:
bd:20:82:aa:b6:cb:6a:0c:2b:62:7c:d4:55:46:5e:54:5e:ae:
07:e4:4f:e5:36:67:cd:0d:eb:ec:82:14:1f:85:06:22:b6:68:
51:cb:55:81:fa:a6:46:e5:3b:49:76:ac:09:a7:b1:18:11:19:
a5:b5:c5:bb:4c:10:02:5a:36:56:ef:e7:da:74:e3:df:3d:15:
83:51:b0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:40 2026 by rpki-client