Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
File: Mya5UKRaLGusFQX80E2UDMCWj5Y.mft (raw, json)
Hash identifier: 2XSK2K0FE74n3zNjqZgo2UfW/3tkU87SPoR9jGDv0Mg=
Subject key identifier: BE:A6:0D:33:EE:CB:9A:2B:DC:A7:1C:31:DE:D4:5C:CD:56:75:07:BA
Authority key identifier: 33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
Certificate issuer: /CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Certificate serial: 01A1396DA851EDC58449FDE6E0857B5B5877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
Manifest number: 098B
Signing time: Wed 14 Oct 2026 08:00:50 +0000
Manifest this update: Wed 14 Oct 2026 08:00:50 +0000
Manifest next update: Thu 15 Oct 2026 08:00:50 +0000
Files and hashes: 1: Mya5UKRaLGusFQX80E2UDMCWj5Y.crl (hash: xWmwOpYlG+XAw4ysLKIEtLneTJEV4dfbP3axmUetev0=)
2: YZYDQXVhkyQEU7FXMxc6oaYUT_4.asa (hash: eA77gr7KIuI04ACTqilmeBAOd+qmU/Ry9/nDfmBIbL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:6d:a8:51:ed:c5:84:49:fd:e6:e0:85:7b:5b:58:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Validity
Not Before: Oct 14 08:00:50 2026 GMT
Not After : Oct 15 08:00:50 2026 GMT
Subject: CN=bea60d33eecb9a2bdca71c31ded45ccd567507ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:02:91:2a:c5:3c:3e:08:f0:de:ca:4d:b0:
b3:f6:c6:51:44:f2:86:5d:13:45:11:6c:7a:a0:55:
9e:37:7e:4b:df:40:c4:f1:5b:1b:e6:8f:22:0b:b2:
5d:cc:be:47:79:c8:7d:5e:e5:77:37:55:c4:2a:fb:
2e:eb:88:ec:6b:70:b4:b4:36:4b:f5:a0:d2:45:ec:
15:69:97:50:ef:a1:d8:9a:4e:5e:5e:4b:bf:fb:21:
42:d2:d0:f2:27:af:6c:6c:ee:18:78:af:c1:72:d3:
1d:cd:17:5b:5c:e1:a0:57:e3:38:cf:0a:fa:8b:29:
94:4d:d0:eb:e0:39:99:fc:6e:be:b3:c6:71:6d:9c:
c7:05:c8:46:39:ea:76:16:19:30:d7:e2:37:8f:bc:
5a:4a:4c:fa:3a:43:78:fd:77:5c:c3:eb:c3:50:b7:
10:c0:72:c2:9a:11:7f:af:2c:16:9e:cc:e9:0e:73:
05:ae:75:e2:ec:ca:d6:34:90:22:13:56:6b:50:02:
e4:33:19:1a:f5:4f:f7:fe:d9:df:ca:21:b3:5a:42:
65:5a:92:2d:21:67:2c:35:e4:15:3e:c6:34:cd:36:
0d:1a:e0:59:fe:ef:7d:ab:a2:44:a2:da:35:24:97:
28:91:8d:1a:00:2c:90:e1:44:f4:9f:80:61:80:87:
79:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A6:0D:33:EE:CB:9A:2B:DC:A7:1C:31:DE:D4:5C:CD:56:75:07:BA
X509v3 Authority Key Identifier:
keyid:33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c0:a1:10:f4:27:6f:7e:43:57:99:be:9e:c7:c3:0b:da:08:
db:21:26:f9:33:21:8c:55:ea:07:fc:e2:f3:bc:67:ba:ed:10:
53:de:67:3d:75:8d:bd:fc:a0:30:b8:96:96:fe:d5:0e:7c:95:
4d:df:0c:d5:e7:37:92:8a:d3:f1:21:52:5e:d4:5d:f2:5e:e8:
45:83:2e:9e:07:bb:2e:e0:04:be:7d:77:21:08:06:a5:29:d5:
a5:8e:0b:70:8a:7a:9f:8b:b5:78:52:64:6b:4e:a0:13:dd:88:
71:e5:5d:a8:b0:78:62:49:ea:6e:b9:8b:c6:eb:0c:ab:4d:39:
2a:49:e5:13:cc:4e:ca:9f:b5:24:cd:0b:c0:62:b7:a6:41:3c:
60:c2:bc:7c:98:7b:ca:cf:3f:84:a2:ef:ed:c8:47:a5:57:77:
af:7a:fe:e8:95:c3:21:02:1c:a5:e8:dc:47:2b:b0:57:bb:73:
26:6e:df:e6:4f:35:19:72:b5:89:55:e0:bd:cb:f2:9c:0c:f1:
f6:48:f5:1a:bc:8e:f4:3c:b4:9a:b8:e0:c3:01:54:6c:8a:e4:
98:6b:7c:7d:e6:e2:51:50:6b:03:59:27:93:0e:ad:0a:bc:67:
a2:2a:ea:7d:b7:3d:6e:60:fe:1f:7c:65:70:e7:ca:e5:6d:50:
ec:80:08:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 14:16:43 2026 by rpki-client