
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
File: mYkvB5PMiUvypMdIda8Iqi0dHJk.mft (raw, json)
Hash identifier: /Ohk3zidPDwZMALoyT3tSWnfvh1OZfnw8W2CC0eXekE=
Subject key identifier: F2:A3:9C:6C:46:85:40:AF:62:54:00:C1:AD:EE:C2:8D:B3:D4:B5:6A
Authority key identifier: 99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
Certificate issuer: /CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Certificate serial: 01A112CE49DC74D28192BA322B2151DFECCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
Manifest number: 1232
Signing time: Tue 06 Oct 2026 20:01:11 +0000
Manifest this update: Tue 06 Oct 2026 20:01:11 +0000
Manifest next update: Wed 07 Oct 2026 20:01:11 +0000
Files and hashes: 1: mYkvB5PMiUvypMdIda8Iqi0dHJk.crl (hash: K3w/VoO0v/g5FaD0c7d777kkrddy1YZfTeE0j4ChnKU=)
2: uXYt53s80GrtJ11qwwGsB2KKZTM.asa (hash: 5TjpX7oY6EMRShqcBM3plh4XQkpf2Obj3teuMkVUkHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:ce:49:dc:74:d2:81:92:ba:32:2b:21:51:df:ec:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Validity
Not Before: Oct 6 20:01:11 2026 GMT
Not After : Oct 7 20:01:11 2026 GMT
Subject: CN=f2a39c6c468540af625400c1adeec28db3d4b56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:be:a0:04:6d:b3:e9:40:26:9c:83:9d:d6:
83:4b:8c:32:37:61:15:5f:db:5a:07:62:31:6d:ff:
21:36:17:4c:68:ac:36:63:2a:c9:13:df:73:4d:7d:
2d:27:d7:e8:55:f3:d6:2f:b3:6d:bd:8e:33:3f:75:
29:54:8a:ba:70:63:0f:a4:1a:1a:bc:2a:da:7f:ed:
98:63:33:e3:09:90:eb:1e:48:ae:9d:f6:3d:14:3a:
f9:c7:a3:91:43:f4:3b:b0:55:33:a1:38:cf:0c:40:
02:6d:8f:08:23:7e:4a:e4:e7:7d:61:0a:0e:9a:4d:
b7:0e:f2:7c:52:33:2b:1f:f3:24:96:7d:a8:d3:59:
6b:b7:2e:10:01:fd:58:9a:03:ff:7a:27:3e:98:8c:
2b:6d:32:47:e4:66:c8:57:a3:31:f7:9e:77:ff:8e:
11:98:29:e1:32:d4:9d:72:68:c1:5d:41:2d:5c:c3:
3b:e7:26:0b:57:b6:c5:93:c6:77:13:08:88:fe:63:
fa:db:52:a0:3a:b9:80:41:66:20:f7:8f:3e:9b:3d:
1c:3a:f2:9f:8e:8a:fa:4f:42:da:1c:96:7f:be:7b:
01:7f:5c:0b:dc:1b:de:b6:6f:cd:93:ed:7b:46:a4:
c8:a4:93:a1:b6:d7:9d:67:8e:8b:4d:1e:a3:52:82:
fb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A3:9C:6C:46:85:40:AF:62:54:00:C1:AD:EE:C2:8D:B3:D4:B5:6A
X509v3 Authority Key Identifier:
keyid:99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9b:af:ad:4d:1a:01:39:40:bb:83:58:7f:95:20:8b:72:8f:
00:a1:f0:59:2c:74:1a:6e:4a:25:b9:d1:23:00:06:91:b9:71:
aa:44:37:4c:fd:63:73:6e:4a:3d:83:db:d4:b3:9c:7b:ef:68:
5a:eb:0c:3f:8a:01:3d:6f:35:d4:f0:e9:e8:19:c7:74:5d:1f:
3c:14:09:8f:d0:32:13:92:c8:4b:05:64:4f:65:42:f5:e7:32:
5a:91:15:6d:72:26:6c:23:3a:4b:de:da:76:ea:98:e6:cf:07:
8c:59:b6:fe:e3:a6:d1:22:2f:65:bc:bb:72:ea:be:d1:e8:b9:
03:9a:cc:ab:41:d8:8d:1f:ba:d8:7c:d8:fe:57:4d:cc:4c:51:
ba:ae:cb:1a:d0:d7:4b:2d:d5:38:99:76:e2:4d:b9:f0:97:5d:
35:f4:3c:95:11:84:a1:38:dd:82:12:4b:45:b9:24:8f:19:f6:
df:a5:9a:b5:11:70:c3:92:52:71:25:b0:89:57:e9:aa:40:f6:
f4:2e:d3:bd:2b:60:23:90:7f:56:57:47:47:a7:de:a0:7c:3f:
01:19:2a:97:c2:2d:40:aa:78:6f:ea:13:b5:bd:83:bd:63:91:
79:cd:b0:e8:3b:ed:12:0e:0e:9e:45:20:d0:07:5f:5e:a0:ed:
fd:fe:f0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:32:04 2026 by rpki-client