Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: 2ohY3+Ocgy2KH7gnUrV8ZTrNC1bkEmjzHKMAWk+h1q4=
Subject key identifier: CB:75:4B:BF:2F:12:42:21:95:E4:4F:FE:C7:63:06:69:1C:70:7C:2D
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 019E1F1147277F7A8527456068CB2E455FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 0A64
Signing time: Wed 13 May 2026 02:01:26 +0000
Manifest this update: Wed 13 May 2026 02:01:26 +0000
Manifest next update: Thu 14 May 2026 02:01:26 +0000
Files and hashes: 1: AE7tKoXDyuuPCaDaUfMyBa4xWdM.roa (hash: xVpRKPTRXjz76O68/XRyRJECKQ9lTBxMBzIgyh25rxU=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: 8dhF6NRe5GX0tvC6AAtECTCs8QfKI9pn30n3NGRWs54=)
3: rNinx4CuZpXEUOOVr_5qkOxUOro.roa (hash: c7dKHMaq9EPZZdDOaPAKKGKEDbpiSPHR+ZX8mfzSM64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:47:27:7f:7a:85:27:45:60:68:cb:2e:45:5f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: May 13 02:01:26 2026 GMT
Not After : May 14 02:01:26 2026 GMT
Subject: CN=cb754bbf2f12422195e44ffec76306691c707c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:cd:fc:2a:a7:2b:13:f5:19:2b:10:fa:6f:
10:e7:f9:de:b0:d1:40:70:9f:03:31:98:d5:9f:c7:
85:46:13:92:4c:f8:f9:f0:f7:da:27:db:4f:0f:c4:
7f:9f:b3:f5:29:34:63:45:7d:f0:fe:95:83:e6:18:
a8:0b:27:c9:90:e5:ac:97:72:b4:af:d0:8c:ef:f7:
d3:54:b3:6c:3d:54:91:1a:18:dc:d7:10:c4:4c:07:
d1:d8:85:02:d6:66:3e:46:5a:a0:6a:e1:88:8d:ab:
12:0d:87:49:ed:7b:9b:ea:35:ac:3a:3f:44:2d:5f:
5c:3b:6d:b6:91:cb:da:40:1e:65:d4:25:d4:d6:ef:
89:66:69:83:99:d0:0e:69:0b:15:7e:d4:b4:1b:61:
0b:fc:cc:9f:df:10:35:67:83:9d:21:af:36:65:b2:
ca:4e:a5:27:1b:3e:c2:c9:c9:4b:50:ba:31:0b:28:
00:d7:dd:7e:8c:06:14:18:cc:b4:48:a8:6f:82:18:
f6:e9:be:ad:4e:13:54:1e:49:da:38:e9:3f:1d:84:
c7:cb:02:c4:6e:77:fd:03:e3:bd:bd:33:e3:60:9f:
16:e5:18:db:29:f6:79:2d:6e:d4:c0:ec:0e:68:41:
0b:d5:1b:7e:ad:50:15:22:26:94:22:9d:26:90:51:
ea:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:75:4B:BF:2F:12:42:21:95:E4:4F:FE:C7:63:06:69:1C:70:7C:2D
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fe:dd:e2:c5:97:5a:40:ef:18:90:f2:c1:40:c8:d5:68:e2:
98:2a:e9:35:47:3e:68:66:54:85:bc:6e:24:9d:33:aa:8e:4f:
dc:71:93:65:1d:75:ab:ee:a3:2a:af:59:1d:af:25:ab:9f:ce:
09:64:24:24:8f:b7:72:59:b1:c4:5f:ff:1e:3d:c7:3a:7e:78:
e0:68:c2:a9:b4:a6:d2:09:12:9c:36:35:b5:52:97:3d:17:b5:
01:6f:66:23:21:a5:6e:55:78:fb:6d:15:c6:af:5b:6b:66:d2:
9f:14:f4:71:fb:2c:15:99:20:57:ea:c0:01:fb:ff:e9:37:e0:
be:50:63:21:cd:6f:f2:72:a9:be:f3:9b:b4:c2:81:89:93:56:
0c:d8:5b:dd:80:70:bf:1d:d0:7e:9a:42:fd:3f:53:38:4d:d4:
dc:a1:02:31:a4:70:1f:aa:74:4e:fb:9e:75:fc:bb:e1:d5:21:
ab:47:5c:73:e0:77:ee:c0:07:8a:2d:37:5e:33:00:f6:d2:82:
71:6f:3d:0d:30:cf:fc:be:10:64:b0:9e:31:71:18:e2:03:cf:
83:c3:8b:65:56:30:ff:89:a0:eb:2a:ad:9f:f6:2c:bc:48:24:
12:1c:17:dd:c7:04:a4:73:ef:2f:b8:22:52:f2:c1:c9:a5:44:
d1:ac:05:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEUcnf3qFJ0VgaMsuRV+pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmRjMDlhZDU0YTM5N2M2MDRlOTRhMWM5NjZlMmMyOTYw
NTljYzEwHhcNMjYwNTEzMDIwMTI2WhcNMjYwNTE0MDIwMTI2WjAzMTEwLwYDVQQD
EyhjYjc1NGJiZjJmMTI0MjIxOTVlNDRmZmVjNzYzMDY2OTFjNzA3YzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryTN/CqnKxP1GSsQ+m8Q5/nesNFA
cJ8DMZjVn8eFRhOSTPj58PfaJ9tPD8R/n7P1KTRjRX3w/pWD5hioCyfJkOWsl3K0
r9CM7/fTVLNsPVSRGhjc1xDETAfR2IUC1mY+RlqgauGIjasSDYdJ7Xub6jWsOj9E
LV9cO222kcvaQB5l1CXU1u+JZmmDmdAOaQsVftS0G2EL/Myf3xA1Z4OdIa82ZbLK
TqUnGz7CyclLULoxCygA191+jAYUGMy0SKhvghj26b6tThNUHknaOOk/HYTHywLE
bnf9A+O9vTPjYJ8W5RjbKfZ5LW7UwOwOaEEL1Rt+rVAVIiaUIp0mkFHqswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMt1S78vEkIhleRP/sdjBmkccHwtMB8GA1UdIwQY
MBaAFGP9wJrVSjl8YE6Uoclm4sKWBZzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yZDBkYTQtYTUzMi00YjAzLTkwNTUt
NGE1Y2JkYjUwZTI5LzEvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yZDBkYTQtYTUzMi00YjAzLTkwNTUtNGE1Y2JkYjUwZTI5
LzEvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUP7d4sWX
WkDvGJDywUDI1WjimCrpNUc+aGZUhbxuJJ0zqo5P3HGTZR11q+6jKq9ZHa8lq5/O
CWQkJI+3clmxxF//Hj3HOn544GjCqbSm0gkSnDY1tVKXPRe1AW9mIyGlblV4+20V
xq9ba2bSnxT0cfssFZkgV+rAAfv/6TfgvlBjIc1v8nKpvvObtMKBiZNWDNhb3YBw
vx3QfppC/T9TOE3U3KECMaRwH6p0Tvuedfy74dUhq0dcc+B37sAHii03XjMA9tKC
cW89DTDP/L4QZLCeMXEY4gPPg8OLZVYw/4mg6yqtn/YsvEgkEhwX3ccEpHPvL7gi
UvLByaVE0awF2A==
-----END CERTIFICATE-----
Generated at Wed May 13 09:11:04 2026 by rpki-client