Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
File: MY2rcPRKfrixz8E3Qz_NTXigOwU.mft (raw, json)
Hash identifier: BujE/Bz827dxQ5FLsbgLdH8pLPRFn2rjZfSCEXZTf60=
Subject key identifier: 3A:0C:CF:17:5A:4F:0A:48:88:9C:8D:42:A5:B5:06:AE:80:7D:09:D3
Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
Certificate issuer: /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Certificate serial: 019E1C478CB9DFBC29CD0ABBECE140EA8D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
Manifest number: 0405
Signing time: Tue 12 May 2026 13:01:51 +0000
Manifest this update: Tue 12 May 2026 13:01:51 +0000
Manifest next update: Wed 13 May 2026 13:01:51 +0000
Files and hashes: 1: 0E0G_V7Qww5gf7roh6v7vgAuxXI.roa (hash: /cBoP5h3k8tG8K+/XM4vhzPv5C3M0myfV5uPfAajNmA=)
2: HJdicrhK0X58hHeVpTRveQPzgSA.asa (hash: GnsE5zVVUGgOlqc4oqkgxYqYyAJUdLN6bxMsAfebi24=)
3: MY2rcPRKfrixz8E3Qz_NTXigOwU.crl (hash: oHJDWs1OrGKXHj0eJ76A9HMblpOXguzTKu99uJ4r1CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:8c:b9:df:bc:29:cd:0a:bb:ec:e1:40:ea:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Validity
Not Before: May 12 13:01:51 2026 GMT
Not After : May 13 13:01:51 2026 GMT
Subject: CN=3a0ccf175a4f0a48889c8d42a5b506ae807d09d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8f:a0:52:1a:46:e9:89:7a:ed:e8:c3:31:92:
e9:db:01:87:b0:f8:a7:a7:9c:97:de:d7:e4:4e:73:
51:22:8d:cd:0f:66:38:9a:34:f1:13:36:ba:99:95:
4b:20:07:22:59:f1:11:0d:90:55:db:93:92:7c:95:
b8:aa:8e:3f:ea:56:0a:7f:6c:88:04:a4:be:4d:d0:
e9:0f:8d:fb:2c:73:72:45:e9:ba:a3:f5:54:99:6c:
30:07:52:3b:32:49:03:df:72:67:48:f7:07:1f:88:
80:f8:55:de:1a:8c:81:65:05:e7:99:94:0d:86:aa:
22:a8:68:11:26:dd:5d:25:74:fe:a3:5f:b1:71:bb:
89:c7:a3:4d:86:e7:e4:31:38:ab:aa:fc:64:cc:8d:
8e:78:1b:26:69:17:d8:d4:b8:dc:9b:56:24:31:cf:
dc:28:bc:c6:9d:46:40:49:73:7b:36:8c:28:16:c2:
64:01:4e:15:09:e5:c3:79:35:60:e2:85:c6:4d:98:
db:6f:c5:64:43:4c:b0:58:83:e2:dd:6a:dd:8e:89:
8c:e5:15:d8:7e:18:ef:fb:af:a8:f0:cf:8d:ab:7c:
a5:a0:42:92:92:b0:d3:7a:dd:b5:79:c1:32:f6:49:
50:c2:e9:5b:f5:2b:b3:77:69:82:02:8a:b1:29:ce:
4e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0C:CF:17:5A:4F:0A:48:88:9C:8D:42:A5:B5:06:AE:80:7D:09:D3
X509v3 Authority Key Identifier:
keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:51:57:cd:8a:18:31:3c:18:28:af:99:dc:d6:d3:61:35:2e:
4a:2e:be:96:7a:5f:5f:49:ec:86:1d:15:86:c0:e1:ff:af:ff:
87:71:5b:ca:a7:94:0d:5d:64:b8:4a:c6:32:c8:6a:a2:3d:5f:
c0:d2:6b:17:9c:2f:66:95:57:68:ca:70:db:20:46:5d:df:bb:
88:6d:45:11:67:52:9d:ad:14:cd:61:73:76:a8:cc:1f:f7:9b:
c2:1f:0f:64:06:fd:58:fb:04:9d:ff:97:73:46:87:40:93:e0:
01:4b:16:63:56:d3:55:b9:04:ea:a4:96:bf:49:56:28:eb:15:
eb:3b:7b:f9:5a:05:5f:91:0a:f0:c3:96:0b:0a:fb:89:78:37:
19:51:45:7d:ee:7a:53:e4:4d:aa:87:f6:90:61:bd:4f:bf:85:
53:46:b9:f4:6f:77:97:6a:f8:3f:03:50:2e:c1:26:cb:ed:88:
87:5f:73:d1:d6:33:83:58:88:03:07:bc:fd:23:bc:e3:7e:23:
93:ba:1a:9e:c4:09:ef:17:23:87:1f:15:04:8d:38:43:8d:e7:
47:07:39:25:35:55:60:11:2c:be:fd:48:1f:d6:0a:c5:df:22:
d8:30:05:62:b0:32:92:59:13:ce:8c:8e:17:09:aa:05:72:c6:
a6:e4:0a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:59 2026 by rpki-client