Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
File: maykAWr4XVlpVITNYTzxiW39WaE.mft (raw, json)
Hash identifier: pj7vWsPRP+9A2dYT7EHyiaQXRW4wTjWV1uP/UxwSKQc=
Subject key identifier: 41:8D:76:72:5A:A3:99:F2:E4:D3:F1:9C:BD:AF:48:67:3F:CB:82:EE
Authority key identifier: 99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
Certificate issuer: /CN=99aca4016af85d59695484cd613cf1896dfd59a1
Certificate serial: 01A0E0CFDB9F95C2A9921F3D1EAD40BBA6C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
Manifest number: 0889
Signing time: Sun 27 Sep 2026 03:01:53 +0000
Manifest this update: Sun 27 Sep 2026 03:01:53 +0000
Manifest next update: Mon 28 Sep 2026 03:01:53 +0000
Files and hashes: 1: WXXJ5075ZAff04RmS5smR110RVw.roa (hash: uErB5MACpy/J873DH0P3yHm3DQt+fz1WVOuw3Q44104=)
2: maykAWr4XVlpVITNYTzxiW39WaE.crl (hash: lxph+b51wD6JTFy+ufFyL8pvi9G1KYHvUL/OB5nT0Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:db:9f:95:c2:a9:92:1f:3d:1e:ad:40:bb:a6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99aca4016af85d59695484cd613cf1896dfd59a1
Validity
Not Before: Sep 27 03:01:53 2026 GMT
Not After : Sep 28 03:01:53 2026 GMT
Subject: CN=418d76725aa399f2e4d3f19cbdaf48673fcb82ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:04:fe:7b:39:9a:9e:5d:3d:36:ff:4e:50:
f2:87:2c:dd:a7:5c:a2:04:1b:3b:e7:49:bf:1e:c0:
61:9c:11:25:40:75:8b:36:9c:f0:54:db:f2:78:8b:
01:b7:75:da:09:2c:3b:d6:f6:26:7d:0d:c1:22:df:
48:44:32:5b:55:9c:a5:47:42:18:80:0e:29:40:e3:
d9:e6:56:c1:4c:33:26:d4:0e:25:6d:53:a5:f3:42:
6a:1f:5e:f4:5b:ed:90:8c:f8:a5:66:fe:04:b7:75:
c0:c8:96:37:61:b0:8c:8f:cd:d3:32:f7:b9:8d:77:
25:27:f3:1e:a4:99:7c:af:e9:79:fb:5c:1f:12:2c:
4c:8c:49:c0:ec:4b:e4:8d:5f:ec:e3:ae:43:d0:fd:
d6:c5:50:4e:22:9f:4e:5e:28:7b:2c:9e:d7:3e:85:
e6:bb:f0:0c:b5:3b:dc:4e:91:0a:8d:d0:d9:de:2f:
f8:6b:d9:fb:ea:b2:44:37:ed:17:29:8f:87:ff:21:
11:f0:c4:4b:7e:69:4e:ee:ec:77:c7:a8:e8:61:cd:
04:42:62:e1:ea:07:9a:09:9f:47:9a:99:a2:a6:1a:
19:80:4c:8e:e2:5e:85:f3:c8:4a:f2:a9:58:f0:72:
c3:af:5c:87:44:7a:85:be:12:5e:cb:44:50:56:ed:
59:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8D:76:72:5A:A3:99:F2:E4:D3:F1:9C:BD:AF:48:67:3F:CB:82:EE
X509v3 Authority Key Identifier:
keyid:99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:dc:45:77:1a:68:ac:ad:9d:7b:5b:49:83:9a:03:82:af:d5:
52:be:35:3e:46:6b:e3:ea:3e:6f:16:87:de:72:6e:e2:7c:fd:
c9:dd:2d:86:56:8b:81:da:67:db:69:bb:64:b5:ac:91:b6:44:
7f:20:1b:82:1a:b2:be:d8:c6:8f:b4:2a:f3:3d:76:86:1b:47:
2d:a6:75:3f:8b:19:9b:d0:83:9c:88:ec:6d:8a:14:49:d2:94:
ea:97:f5:fa:1a:87:f1:72:0b:c9:67:2f:ae:68:97:41:7a:c4:
90:44:85:82:26:23:e0:6f:8b:86:f8:91:10:34:8f:d7:a8:31:
44:e0:e7:99:6b:0a:8f:81:f8:4d:4d:05:68:20:78:e9:82:23:
4d:a0:1d:59:5d:15:be:ee:2f:e7:ec:cf:a9:8e:07:5b:0c:98:
1e:bf:26:91:65:b2:d5:e8:31:2c:9e:c9:85:84:18:56:79:02:
d4:97:d0:d5:db:3e:ee:04:50:68:26:c1:f7:f4:df:1a:7e:fb:
0d:2a:ab:87:38:4e:36:b1:a4:12:d5:01:5c:59:f6:7d:8d:29:
55:dd:d2:e6:45:27:a7:d2:63:fc:e7:91:f8:43:50:a6:16:63:
63:5f:9c:c6:bc:35:1e:f5:15:c8:bd:0c:21:54:cc:b2:4a:4d:
52:02:6b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:44:39 2026 by rpki-client