Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
File: Mya5UKRaLGusFQX80E2UDMCWj5Y.mft (raw, json)
Hash identifier: 5411g56mZB3H22m9d0rNdJd1FWbNNFwra2f4NkKytac=
Subject key identifier: 7F:B1:8F:21:CC:B3:CB:26:B7:20:38:2C:CB:0D:A7:F6:8D:31:98:37
Authority key identifier: 33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
Certificate issuer: /CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Certificate serial: 019E1C100FFAF17F7C4C4046C93E9887CB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
Manifest number: 07EE
Signing time: Tue 12 May 2026 12:01:14 +0000
Manifest this update: Tue 12 May 2026 12:01:14 +0000
Manifest next update: Wed 13 May 2026 12:01:14 +0000
Files and hashes: 1: Mya5UKRaLGusFQX80E2UDMCWj5Y.crl (hash: id+S/A6N6UtkcQH4LLA822OjdgdfX3WXMb7TLkXWw4A=)
2: YZYDQXVhkyQEU7FXMxc6oaYUT_4.asa (hash: eA77gr7KIuI04ACTqilmeBAOd+qmU/Ry9/nDfmBIbL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:0f:fa:f1:7f:7c:4c:40:46:c9:3e:98:87:cb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Validity
Not Before: May 12 12:01:14 2026 GMT
Not After : May 13 12:01:14 2026 GMT
Subject: CN=7fb18f21ccb3cb26b720382ccb0da7f68d319837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ca:71:87:b3:f3:cb:a5:f7:01:50:3b:52:3e:
53:e4:f9:6d:19:5c:e8:62:84:a0:88:d4:b3:6f:10:
fd:24:a4:44:07:8a:15:58:2a:1a:90:a7:f5:6f:18:
52:2b:03:cc:84:93:a9:19:55:30:31:58:c8:ab:85:
33:87:62:bd:ed:dc:86:1c:5a:a1:31:ad:49:bb:03:
d2:4c:5e:01:76:26:e7:2d:3a:06:d3:b7:e0:94:aa:
ed:2b:f8:d9:47:12:10:d3:5a:c1:f2:da:8e:58:0e:
8a:fd:76:52:69:8b:3d:2e:1d:cf:0a:03:7b:55:a9:
0c:39:da:07:64:7a:4a:0f:9b:e7:b9:e6:d3:09:4d:
6e:52:91:c0:75:d3:66:a7:22:60:f8:81:96:1c:04:
5a:ab:cb:fb:fd:84:f1:26:b0:ca:2e:55:53:ae:07:
38:bc:f0:12:d8:be:b5:f5:3a:8a:35:52:27:15:a1:
f6:c4:3f:8d:13:5c:84:22:08:d8:93:fc:ee:4b:3c:
15:cf:0f:eb:2e:3a:7c:d1:9d:46:35:89:7b:c3:e1:
09:20:9e:ad:7a:c5:25:65:f7:ad:4b:b1:ee:46:b4:
bc:f9:7c:22:02:74:e0:30:1b:f9:9f:85:37:18:07:
01:f6:59:e9:82:18:68:f1:44:6d:ca:8f:61:2b:7e:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B1:8F:21:CC:B3:CB:26:B7:20:38:2C:CB:0D:A7:F6:8D:31:98:37
X509v3 Authority Key Identifier:
keyid:33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:38:68:3f:f7:64:ab:d9:60:d1:f2:a3:7e:c3:d3:46:6a:2c:
e7:ea:ac:1a:dd:d4:2a:d2:fd:88:14:fd:b5:7f:d5:b5:ba:c7:
38:ac:ef:20:5c:5a:e4:4d:7c:2c:ac:27:3f:24:8a:ff:2d:a5:
5b:66:9d:7c:9a:f7:ec:ca:3e:fb:f1:ae:0c:4a:fc:69:40:79:
28:d5:e8:7a:be:c9:cf:53:7c:05:a4:70:1e:29:23:65:df:42:
ff:55:92:21:08:f9:80:d2:01:47:3a:e7:b2:3c:80:55:09:61:
55:91:6b:ec:9f:15:fa:45:65:a7:be:f9:07:b3:b7:2f:5c:e0:
27:2c:8f:88:d9:dc:06:13:5b:ee:bf:7a:35:16:38:f3:d3:b7:
84:33:87:25:cf:82:d2:c7:6b:d9:4a:c4:93:fb:42:ae:cd:ae:
b7:24:12:08:6c:9c:8b:73:ed:76:c6:2e:d1:d7:b0:9c:0f:26:
ff:bc:e2:7b:06:26:0f:5c:36:d2:0f:61:d4:e3:11:a7:f2:4a:
d7:55:f2:1f:25:74:79:ea:cf:4e:93:9c:40:55:f2:7d:ee:68:
9a:dd:b9:b0:fe:2d:63:f1:a7:1e:80:ce:b2:d2:fd:00:f9:17:
06:1f:1f:a2:b3:57:03:f3:c7:fd:b7:9b:25:a5:5e:bd:55:79:
e1:f8:26:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:55 2026 by rpki-client