Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
File: MY2rcPRKfrixz8E3Qz_NTXigOwU.mft (raw, json)
Hash identifier: Wh2PSrfuAWzwCHFV1GlvkweWdiImTAM7LZ+wacx2k1E=
Subject key identifier: 76:AA:6A:42:67:A3:FD:6A:60:3C:8E:43:AC:08:AA:A6:58:F7:DA:F2
Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
Certificate issuer: /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Certificate serial: 019D3299F1A9CB7A00948F3F7C0033651A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
Manifest number: 038C
Signing time: Sat 28 Mar 2026 04:00:42 +0000
Manifest this update: Sat 28 Mar 2026 04:00:42 +0000
Manifest next update: Sun 29 Mar 2026 04:00:42 +0000
Files and hashes: 1: 0E0G_V7Qww5gf7roh6v7vgAuxXI.roa (hash: /cBoP5h3k8tG8K+/XM4vhzPv5C3M0myfV5uPfAajNmA=)
2: HJdicrhK0X58hHeVpTRveQPzgSA.asa (hash: GnsE5zVVUGgOlqc4oqkgxYqYyAJUdLN6bxMsAfebi24=)
3: MY2rcPRKfrixz8E3Qz_NTXigOwU.crl (hash: UWaQ2DK05tG84k4tp2mMS7nhjtV2ja0aVST/yL1DVTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:99:f1:a9:cb:7a:00:94:8f:3f:7c:00:33:65:1a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Validity
Not Before: Mar 28 04:00:42 2026 GMT
Not After : Mar 29 04:00:42 2026 GMT
Subject: CN=76aa6a4267a3fd6a603c8e43ac08aaa658f7daf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a3:eb:e6:5c:47:4f:34:ad:35:f1:fe:e4:92:
25:52:84:d5:27:81:a8:bb:9a:87:25:6e:6e:c9:76:
f4:58:a3:73:d5:fb:3e:57:9b:c3:42:16:0a:f6:db:
a6:5e:29:bd:97:a3:99:8c:7c:aa:93:67:d7:34:77:
aa:4b:3b:3f:cf:8e:98:a6:a2:d6:1f:c4:6c:8a:58:
8e:30:ee:ac:38:5c:8a:b1:57:ff:41:ad:df:4b:92:
fc:47:4e:61:da:3a:d8:2e:8f:74:72:0e:c3:c3:00:
94:32:2c:86:af:67:64:d3:3a:17:37:cf:d1:a8:04:
58:a9:cd:07:5c:13:11:b8:7a:83:97:4c:14:35:f6:
88:dc:0b:95:0f:91:eb:c6:ac:44:d2:f8:21:b8:69:
51:42:7a:e4:ba:88:7a:67:58:a5:f4:9f:48:af:8e:
84:f1:21:d9:ac:51:a6:47:79:a1:d5:15:87:d5:7b:
3b:d7:ce:b4:46:5f:28:a6:36:bb:a5:fe:8a:ea:cf:
75:f4:86:dd:22:dd:ad:e9:af:19:4b:c0:f0:fc:95:
7f:fe:04:36:49:2f:35:50:56:5b:ae:71:7a:ae:0a:
85:c8:d1:84:20:b0:97:33:02:f6:ea:ac:22:71:ad:
ef:8a:13:50:28:21:96:7a:5f:b8:35:28:fe:b7:b2:
49:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AA:6A:42:67:A3:FD:6A:60:3C:8E:43:AC:08:AA:A6:58:F7:DA:F2
X509v3 Authority Key Identifier:
keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:51:e5:d4:95:93:ad:bc:c8:b2:a6:15:e4:eb:5f:94:0e:8a:
df:60:a1:b2:ec:0f:ee:23:df:b0:5e:8e:9a:1a:05:8f:bd:fd:
11:20:7e:f6:42:d1:81:79:1c:4d:f0:af:53:64:a2:95:cd:1c:
68:ad:e7:68:c4:3c:2b:0f:9d:b3:23:3f:1c:f6:a8:2c:2b:33:
6b:bb:44:71:f8:d1:74:ed:11:a3:8c:e4:ad:43:f6:c9:a5:7e:
aa:e2:e5:70:0f:2c:6e:46:0b:8f:5e:db:e2:07:d2:37:55:e2:
81:96:a4:ea:00:eb:07:95:b9:7d:dd:21:38:e0:dd:b5:f2:1f:
45:cc:2d:c9:c6:86:36:d2:32:f6:0f:a5:f0:90:62:88:96:f4:
2b:9f:8c:81:e2:29:41:17:c1:95:72:3d:fe:90:15:a6:07:d9:
9b:f4:61:51:99:88:48:33:a9:46:48:a2:9a:51:22:fd:a9:05:
64:59:f6:0f:20:76:5e:0e:f1:56:1c:a5:7e:29:7c:73:6a:32:
d7:df:db:8c:96:56:11:8c:57:d7:8a:5a:ed:07:22:15:e2:47:
3b:88:fa:5a:af:21:af:07:d3:47:d1:01:5b:f8:2c:39:e0:c6:
52:7d:85:56:1d:9f:0f:f2:61:cb:e3:0a:60:1e:71:a0:f1:a6:
a0:3c:bc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:44:48 2026 by rpki-client