Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
File: MY2rcPRKfrixz8E3Qz_NTXigOwU.mft (raw, json)
Hash identifier: 8v8uvTcojdqsqmYHCJfhMva2XS54eA1rqirBZjMM5aI=
Subject key identifier: 6A:9B:86:11:49:15:55:24:97:59:CC:97:CE:14:F7:65:1C:C4:C5:E1
Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
Certificate issuer: /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Certificate serial: 01A0CB9072E7CB6031815427B91FA774D17B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
Manifest number: 056B
Signing time: Wed 23 Sep 2026 00:00:36 +0000
Manifest this update: Wed 23 Sep 2026 00:00:36 +0000
Manifest next update: Thu 24 Sep 2026 00:00:36 +0000
Files and hashes: 1: 7l-sgrIhavro2SpPOFtgONrk5QA.roa (hash: X9fi/U55KuWyLJlSIBJLR9VeaEuygBRKeTfxzhD0sdk=)
2: DdYO6EDbuF7yR9RfMqyedlbBQxc.asa (hash: hjp0IFDf+5qRTfcTPb3MLWP9dI2krI8ag1FOvrQ6wJE=)
3: MY2rcPRKfrixz8E3Qz_NTXigOwU.crl (hash: 2TyPk8W2WbcTUwM6jQvEpf5LhTuHTU4iUQHpFKjnLvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:72:e7:cb:60:31:81:54:27:b9:1f:a7:74:d1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Validity
Not Before: Sep 23 00:00:36 2026 GMT
Not After : Sep 24 00:00:36 2026 GMT
Subject: CN=6a9b8611491555249759cc97ce14f7651cc4c5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:15:12:46:80:21:be:ba:28:a7:75:dd:ac:ac:
23:db:af:7f:70:96:f8:bc:99:df:10:88:9e:95:a2:
2e:98:91:5e:86:ac:f3:73:6d:27:1d:be:0e:e8:ea:
8c:33:70:0b:69:e5:d4:81:54:05:b7:a7:e3:d3:4a:
7b:98:c5:e5:55:b7:65:b7:6e:b7:e4:6b:bb:a8:4b:
a1:cb:6d:ad:f9:e1:a1:53:b6:23:b9:1c:81:6b:d9:
aa:da:10:71:3b:55:a3:3c:6e:08:7b:10:e5:2b:f9:
30:6a:38:28:98:98:ca:59:11:fc:05:af:46:b2:8b:
1c:fa:b7:ac:99:de:9c:c1:c1:73:61:35:df:7c:b5:
b1:8c:c3:5c:f2:39:1a:e9:f4:32:16:be:58:3e:47:
76:a0:4a:97:19:5e:81:d8:35:59:50:66:02:af:1a:
91:84:9c:e2:c2:05:59:0b:7a:8b:96:7d:59:e0:dd:
ce:f2:01:f3:3e:90:16:2f:fa:b4:19:1a:25:4e:16:
c9:e7:97:b8:b0:ca:c2:04:b2:8b:59:af:5a:92:d6:
f2:b0:13:43:28:b5:82:0e:1e:06:51:c8:56:87:42:
5f:2b:89:68:e6:66:6a:84:20:6f:32:41:6d:03:51:
63:ce:be:0a:28:ef:28:fc:ee:e1:0f:1e:59:00:57:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9B:86:11:49:15:55:24:97:59:CC:97:CE:14:F7:65:1C:C4:C5:E1
X509v3 Authority Key Identifier:
keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:09:d9:3f:81:11:50:2f:95:9f:49:6d:ce:db:5b:03:6e:8d:
2b:3f:64:d0:28:e6:66:fb:8e:ea:98:0b:8d:63:c8:0d:8e:00:
ba:53:8e:f9:78:ae:f7:02:0b:60:e8:75:69:c2:43:02:00:84:
80:30:c4:32:8b:74:26:a0:d2:4f:d8:43:ec:bf:17:c9:8f:2c:
47:42:ea:83:93:08:11:23:a3:35:6a:d8:48:0a:26:34:eb:da:
b8:d1:36:ca:2e:21:bb:85:34:4a:2c:97:cf:7c:83:3a:cb:99:
70:e6:cc:0e:a9:09:2a:29:a3:0d:12:ec:bb:ed:be:09:21:93:
04:8a:b7:b3:5c:03:29:09:ed:06:53:0f:51:a1:41:b5:3c:4b:
a1:59:29:b8:86:49:e2:5f:59:7c:19:a7:d8:6b:d0:b0:b9:14:
e3:71:88:d1:c8:03:a7:5d:01:67:75:45:e2:8f:66:e7:10:b3:
d9:70:bb:44:54:39:af:ca:00:dc:1e:6e:d5:26:15:17:32:38:
2c:ff:1c:bd:5f:a5:9a:fe:a9:da:40:6c:e7:ef:b5:32:e2:85:
4f:32:bc:64:23:cc:c3:1c:1c:97:ea:ce:eb:12:9c:60:68:c1:
80:19:04:37:b5:52:51:5c:c0:40:ef:dd:7e:83:ad:0e:39:4e:
52:ce:53:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:28:06 2026 by rpki-client