Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: 1jIoACAwp4oZ29s+AH0/as6vuY8h1bet6O4s1FGQ3PM=
Subject key identifier: 60:DF:2C:D5:FD:6A:3C:C3:01:BE:23:3A:5B:CF:0B:8F:20:DB:2B:3B
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 01A0DA28E1346AFC25CC1C747049FF751A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 0BCE
Signing time: Fri 25 Sep 2026 20:01:46 +0000
Manifest this update: Fri 25 Sep 2026 20:01:46 +0000
Manifest next update: Sat 26 Sep 2026 20:01:46 +0000
Files and hashes: 1: AE7tKoXDyuuPCaDaUfMyBa4xWdM.roa (hash: xVpRKPTRXjz76O68/XRyRJECKQ9lTBxMBzIgyh25rxU=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: +doeBWxtHqox24G4B5+oLMxWmjmldGXeJK58CD+sle4=)
3: rNinx4CuZpXEUOOVr_5qkOxUOro.roa (hash: c7dKHMaq9EPZZdDOaPAKKGKEDbpiSPHR+ZX8mfzSM64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:e1:34:6a:fc:25:cc:1c:74:70:49:ff:75:1a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Sep 25 20:01:46 2026 GMT
Not After : Sep 26 20:01:46 2026 GMT
Subject: CN=60df2cd5fd6a3cc301be233a5bcf0b8f20db2b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:d7:2c:7f:f2:72:36:27:9b:ea:79:ac:80:
29:53:f9:85:44:cc:68:28:6b:3b:bd:02:63:fc:93:
0d:94:81:db:bf:27:d7:40:74:4f:51:00:84:49:10:
5f:3a:42:ea:96:b9:d6:80:d7:38:d8:57:97:c1:52:
77:21:b9:1c:a2:a9:5a:0f:66:2e:40:dc:5a:7f:20:
04:7f:a2:d1:c2:97:9f:85:3a:62:72:55:4c:30:27:
08:df:a3:f5:a6:c0:98:1b:f0:8d:6f:99:fb:e2:4b:
42:e3:ca:41:f6:d7:4c:33:b4:13:50:3c:7b:d3:5d:
d3:4a:ae:90:78:32:fd:a0:ec:dc:5d:64:9f:89:3b:
7a:bc:04:07:0c:63:a6:e6:58:48:93:cd:2e:5e:68:
91:83:d2:e5:21:aa:0c:57:36:3c:25:ed:c1:e3:7c:
5e:5c:c3:b4:7a:ea:7a:f5:7f:cd:47:28:e5:9c:7f:
99:73:4d:73:81:dd:5c:7e:79:f7:97:3a:62:61:5a:
43:67:4e:37:8a:00:cf:8d:a6:6f:9c:cf:8c:14:11:
45:d5:f5:3f:d9:0e:e6:eb:c9:53:52:b1:fc:31:9b:
fb:c6:44:43:72:0c:23:c7:94:ec:c8:19:2d:f2:d8:
77:ee:53:8e:d9:bc:fa:9c:e2:46:28:e8:b1:9f:08:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DF:2C:D5:FD:6A:3C:C3:01:BE:23:3A:5B:CF:0B:8F:20:DB:2B:3B
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fc:11:25:a7:42:d6:6e:6e:ad:64:fd:11:14:27:9c:9b:9f:
cb:ba:4a:15:a8:b3:f1:02:a0:17:e1:b5:2e:91:3d:55:0e:29:
0f:a9:d1:39:a0:30:66:47:bf:3b:97:2e:26:a8:9c:71:3e:71:
81:0e:1c:77:60:df:da:88:0e:c9:f0:f5:24:01:77:a7:04:39:
0e:09:a3:f7:d0:1c:e8:43:ae:5f:71:cd:81:62:02:04:eb:1d:
e3:df:db:17:ea:66:d3:22:43:c0:e6:0e:0c:e1:42:03:4d:58:
04:d9:19:ee:87:07:32:83:e9:c4:a7:c4:7b:49:22:af:00:e5:
57:d2:db:31:97:41:1e:78:41:df:89:2b:52:54:c9:a6:e1:15:
98:3a:67:ec:8c:42:8b:dc:22:52:be:b5:56:2a:bf:d9:84:f6:
44:ae:95:b9:1e:2c:b1:8c:f9:8f:b6:ef:f1:d7:52:bf:3d:cd:
49:51:37:aa:d9:b4:65:2c:78:3a:ee:9c:83:7f:46:af:58:f6:
61:8d:9c:4b:b6:67:41:80:19:d0:1c:ef:ff:e2:32:15:57:46:
77:cc:8e:76:e4:2b:29:7b:ac:15:1a:c6:a4:55:cc:4a:2f:f1:
52:c9:bb:7e:99:8c:57:a7:af:f5:5b:32:77:a6:9e:b7:07:42:
0a:21:e4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:39:32 2026 by rpki-client