Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
File: mYkvB5PMiUvypMdIda8Iqi0dHJk.mft (raw, json)
Hash identifier: H2cISWhy5WPQs/l2q0bUEnRPaCRwNuqkieeitUu9/ro=
Subject key identifier: 3A:3B:1B:80:45:A6:29:7F:99:35:FF:1E:29:C9:30:9F:59:D8:9A:54
Authority key identifier: 99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
Certificate issuer: /CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Certificate serial: 019D25BAD0DCC67D39B882F364238EFF0CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
Manifest number: 1029
Signing time: Wed 25 Mar 2026 16:01:33 +0000
Manifest this update: Wed 25 Mar 2026 16:01:33 +0000
Manifest next update: Thu 26 Mar 2026 16:01:33 +0000
Files and hashes: 1: 8d01Xvs_aaIVSfahCINvVoz5qZs.asa (hash: hdcUHQVv+Z/OXdZkuAsmuPgKWFluiU3e3EejuVlqoak=)
2: mYkvB5PMiUvypMdIda8Iqi0dHJk.crl (hash: a55Z7YD4OqkvwNSzXehtJdA0E/DwMbEo/4uGtjTXHKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:d0:dc:c6:7d:39:b8:82:f3:64:23:8e:ff:0c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Validity
Not Before: Mar 25 16:01:33 2026 GMT
Not After : Mar 26 16:01:33 2026 GMT
Subject: CN=3a3b1b8045a6297f9935ff1e29c9309f59d89a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:b0:52:1a:9f:14:56:5d:db:e6:a0:8e:e1:
14:ca:eb:6a:73:a2:de:25:3a:1e:9f:ba:d7:ab:dc:
25:b5:1f:e8:09:ae:0d:38:e0:02:3c:25:2a:e4:fa:
5c:f3:9e:e8:9d:a4:67:a1:b9:e4:c4:c7:a4:34:7f:
82:da:76:b1:1e:c3:f5:6b:82:15:08:b6:83:9d:13:
08:7f:05:72:32:40:37:cc:f6:fd:9b:90:35:0b:4a:
3a:2c:d5:8f:ba:b8:e0:2f:1f:e2:92:23:68:4a:d8:
ea:96:b9:26:5e:89:3a:99:32:0d:05:71:91:69:c9:
23:7e:42:db:63:d0:c9:59:bf:25:d8:63:b2:34:54:
6d:31:41:bc:9f:89:f6:3a:e9:09:28:3a:c1:39:cd:
f3:86:e0:25:a7:02:7e:3c:1f:e0:51:90:d4:2a:77:
bb:03:5f:37:f2:81:52:74:db:51:24:70:64:18:98:
3a:82:c8:d4:ee:59:9b:b8:39:6f:0e:ed:de:ef:d7:
1a:1d:f7:01:30:6a:40:f0:2a:ff:12:56:f9:cc:c1:
95:c8:cb:09:42:bb:a7:56:17:d9:fa:d9:50:12:99:
4b:56:ee:e8:ea:75:b5:ea:a8:d8:38:71:18:70:65:
c9:77:67:ed:eb:1a:12:18:f2:43:8a:60:bf:ed:a3:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3B:1B:80:45:A6:29:7F:99:35:FF:1E:29:C9:30:9F:59:D8:9A:54
X509v3 Authority Key Identifier:
keyid:99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:16:3e:fb:ec:a4:89:76:70:dc:46:62:11:af:9c:0e:04:f6:
c1:67:96:3d:20:a1:dd:e3:fa:b7:90:22:e9:72:85:f2:0a:98:
d9:5f:ce:17:64:10:e1:5b:ad:20:a4:ff:6a:b8:ea:2f:48:d1:
c5:65:c8:9c:06:95:18:3a:cf:8c:bc:58:1d:39:a2:c9:01:11:
ca:cf:80:df:d2:1f:2a:9b:67:dd:d4:b1:c7:84:44:3f:b7:35:
d4:8a:7c:d6:83:e0:46:57:f7:61:4e:d1:ee:b5:4b:14:bd:66:
21:e9:59:9c:45:5b:38:f6:81:79:c5:6c:f7:5b:3e:e6:4c:e3:
b8:3f:57:73:cb:06:92:ef:2c:ed:92:88:7c:fa:3b:56:3a:a7:
28:d3:5f:fb:cc:52:96:92:a7:03:cc:5a:a1:97:33:b9:6a:7f:
51:3f:52:fc:8f:73:8a:74:81:3e:1d:4c:53:6e:ff:10:23:dc:
93:86:65:65:cd:37:7a:24:a1:b2:8b:04:a9:0f:a6:1a:86:86:
3c:75:8b:38:e3:c5:13:b8:4e:12:f6:c2:79:06:25:77:f4:f1:
77:06:df:eb:aa:d4:ae:c2:44:52:cb:fc:49:b4:91:58:23:bb:
f0:4d:22:83:c8:9c:38:05:71:4f:63:be:7c:82:1f:51:3b:88:
5d:6e:75:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:18:56 2026 by rpki-client