Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.mft
File: Y19_IAVMT72i3k7Yf19kH5NbA4Y.mft (raw, json)
Hash identifier: YKCzFGURSHiFh/cXnYZGvnpPPv4/Y5eoRTUFM7KyVVk=
Subject key identifier: 3F:68:92:06:D1:FB:48:06:D4:E0:A5:5C:D7:7E:1A:AC:59:E2:4D:08
Authority key identifier: 63:5F:7F:20:05:4C:4F:BD:A2:DE:4E:D8:7F:5F:64:1F:93:5B:03:86
Certificate issuer: /CN=635f7f20054c4fbda2de4ed87f5f641f935b0386
Certificate serial: 01A0CCD9CD19942984402A7AD4978E7DAC24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y19_IAVMT72i3k7Yf19kH5NbA4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.mft
Manifest number: 0151
Signing time: Wed 23 Sep 2026 06:00:20 +0000
Manifest this update: Wed 23 Sep 2026 06:00:20 +0000
Manifest next update: Thu 24 Sep 2026 06:00:20 +0000
Files and hashes: 1: KpSiFlpQT5dMSWFR8bhyaB5lV0E.roa (hash: b+M/pWTjrzDu/kT2jGIzR1Dtt5OUtfCqD8vNrO/FXP8=)
2: Y19_IAVMT72i3k7Yf19kH5NbA4Y.crl (hash: ly9mfOhsDyPQITRbECSeRjFAiqa2VR9jGvj7YTQYx/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y19_IAVMT72i3k7Yf19kH5NbA4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:cd:19:94:29:84:40:2a:7a:d4:97:8e:7d:ac:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635f7f20054c4fbda2de4ed87f5f641f935b0386
Validity
Not Before: Sep 23 06:00:20 2026 GMT
Not After : Sep 24 06:00:20 2026 GMT
Subject: CN=3f689206d1fb4806d4e0a55cd77e1aac59e24d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:ab:1b:f9:ed:46:14:01:a4:48:2f:77:e7:
33:2e:5b:65:00:3b:ba:58:23:18:f0:ed:67:27:3f:
fa:d8:5e:24:8f:a1:59:e6:78:e3:d8:17:e4:f6:2c:
85:06:11:c0:8c:f5:da:7a:79:8d:04:b4:07:da:71:
f2:fc:00:44:d2:a3:18:9e:da:c5:50:32:8f:b9:57:
bf:75:c4:4d:39:67:ec:15:45:1a:c0:94:d5:03:17:
86:ea:ab:b0:64:99:42:f9:5f:34:46:ff:40:61:c8:
b7:21:96:e5:08:eb:57:15:be:f5:0b:4f:2e:66:82:
12:37:cd:ce:e2:38:9c:e8:c7:01:d8:72:af:f7:dd:
cc:3c:66:31:10:b7:89:08:e4:cc:e5:df:01:9c:0c:
57:ea:fd:24:f1:dc:6f:cd:8f:b6:86:06:04:ef:8d:
44:26:1b:46:ea:2b:14:33:69:f1:00:18:9e:2a:ac:
5a:9a:22:1c:73:fd:39:29:02:97:8b:c8:31:d0:7d:
c0:53:ba:b9:a0:29:4d:f1:3a:dd:83:79:11:1f:85:
a0:61:94:64:20:39:e9:e8:72:d7:7e:c6:6b:52:0a:
84:f7:53:fc:37:76:9e:65:56:57:d4:f6:7e:9e:80:
76:79:e3:54:f5:cc:9e:f3:61:d4:30:12:d1:4d:94:
dc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:68:92:06:D1:FB:48:06:D4:E0:A5:5C:D7:7E:1A:AC:59:E2:4D:08
X509v3 Authority Key Identifier:
keyid:63:5F:7F:20:05:4C:4F:BD:A2:DE:4E:D8:7F:5F:64:1F:93:5B:03:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y19_IAVMT72i3k7Yf19kH5NbA4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/2ff188-67de-42a0-8bcd-34d29bb1cd85/1/Y19_IAVMT72i3k7Yf19kH5NbA4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:03:af:f0:52:9d:01:8a:b0:a3:27:e0:cb:49:92:cd:29:92:
7b:c3:14:d8:24:ee:5f:fd:83:f9:43:92:ac:cf:6b:2e:5d:d4:
e6:ba:97:e7:b3:60:41:75:2a:f3:13:a0:98:81:48:b5:f8:05:
7b:72:0f:dc:26:24:83:1a:f4:bd:e4:81:60:ba:b6:35:37:33:
b3:c8:95:77:75:2a:b1:c4:0c:12:52:91:1e:f9:b7:48:98:7c:
c5:c5:3c:ee:1f:7a:c2:85:f3:ad:7e:ba:e9:75:9c:ae:f1:00:
35:f6:a7:d3:84:68:9c:28:e3:42:df:1a:87:a7:d9:1b:16:d9:
d7:76:ce:80:11:f3:d9:01:2c:10:4d:e6:82:02:2a:8d:8d:e9:
1f:dd:c4:67:18:67:1e:a9:75:d6:ca:bb:ea:0c:0c:f1:48:96:
03:27:9e:c6:e7:10:cc:84:19:ee:80:70:21:c4:ab:d2:03:f5:
bd:bf:46:d2:00:28:57:08:8a:e4:ef:08:bb:59:7a:93:bd:87:
93:d0:dd:a1:e5:9c:b7:bc:4a:ec:7c:17:dd:00:6d:ec:ee:0b:
1d:15:89:7d:c3:be:9c:b1:4d:a1:df:a9:e3:3d:a9:ff:13:c5:
c4:36:f3:2c:8a:7c:b5:25:8c:7f:48:e5:27:11:03:21:91:5f:
5e:9f:3c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:34:54 2026 by rpki-client