Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
File: maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json)
Hash identifier: WstWM8qy82e20vwF69kWIWWiSSrErNiY2HG3RPB8hns=
Subject key identifier: BB:68:11:97:2A:0F:61:F3:64:17:76:67:91:6C:0E:B8:03:E4:8F:64
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial: 01A0E0CF6FB3756B84982D8A8FC5F75166C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
Manifest number: 1189
Signing time: Sun 27 Sep 2026 03:01:25 +0000
Manifest this update: Sun 27 Sep 2026 03:01:25 +0000
Manifest next update: Mon 28 Sep 2026 03:01:25 +0000
Files and hashes: 1: 6fDAz4UFcIjJUNJfBauQnIUtFJQ.roa (hash: 32SPWBtR5ifRYzi3R6/09Z2DiSWDuRPZa68/1wX0JGw=)
2: J1QSbtTALXp3LDlVSmUk6MBKTwk.roa (hash: S+0rrf1JmQadx56tQAp4cXgjdXzHGEHs/KEObwAzQdw=)
3: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: jQqFD+UYmBJd8Y1wNCMUtngyfHMX0DShho92WXIRlj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:6f:b3:75:6b:84:98:2d:8a:8f:c5:f7:51:66:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Validity
Not Before: Sep 27 03:01:25 2026 GMT
Not After : Sep 28 03:01:25 2026 GMT
Subject: CN=bb6811972a0f61f364177667916c0eb803e48f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:90:37:34:27:77:c4:8f:2d:56:94:a9:09:
05:8c:9e:f9:07:02:a6:82:8d:96:4f:35:c1:a3:f7:
a2:a1:76:dc:f1:a0:21:f0:f9:46:7e:a1:06:39:f3:
60:8d:29:4c:a8:56:14:8f:fb:87:f6:a3:a1:1f:30:
57:04:7c:46:bd:ff:e1:30:c2:a5:ac:25:66:48:f6:
bf:f3:cd:6c:d2:e8:f6:e2:0a:41:1e:57:4f:27:1d:
3f:d8:87:0f:b3:42:6a:3d:2d:3e:6a:89:e7:24:5a:
f7:c5:6e:a0:d8:89:bd:cb:8f:63:2b:80:c6:35:60:
63:02:da:00:a8:3e:1f:61:61:98:a7:7b:eb:b5:a0:
82:fc:ba:01:01:3d:5c:0c:5b:be:a8:44:ea:67:70:
36:0b:c1:62:eb:3e:40:9f:92:b1:b2:ea:03:02:50:
84:7a:df:d6:48:71:8d:97:68:8e:02:4c:69:b0:bc:
5c:8c:80:aa:30:8d:e7:9b:90:95:88:49:2a:e1:07:
be:c2:51:cb:79:1b:e3:3b:2c:90:0f:59:4b:02:34:
aa:3e:83:1a:4f:c5:29:73:c4:b7:40:b4:0d:b0:f7:
8c:62:e0:a8:6c:dd:1c:f9:d7:48:13:32:ba:5e:15:
62:88:96:50:9e:95:54:28:ca:9a:3f:c4:7e:bd:a7:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:68:11:97:2A:0F:61:F3:64:17:76:67:91:6C:0E:B8:03:E4:8F:64
X509v3 Authority Key Identifier:
keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:54:8d:26:4c:a2:d9:65:ed:7e:2c:38:ad:ca:56:90:7e:79:
7f:68:e9:f5:38:0e:9f:5f:16:99:12:77:70:80:1c:0e:c5:32:
9e:b2:82:97:60:a8:af:c8:2f:d7:02:d9:38:18:ee:3c:31:5c:
1a:4a:9e:5c:11:b7:61:97:97:24:d8:0e:c3:b5:27:8d:1f:aa:
99:71:39:c7:6b:5e:3e:59:ed:cd:76:a1:51:8a:1b:f5:3d:87:
6f:be:fd:cd:bf:a1:a1:96:aa:1d:04:0f:ad:77:d9:0d:b9:ce:
75:32:c5:bf:32:9c:49:e7:d4:47:c3:10:09:46:7b:22:c0:e3:
34:72:d9:d9:13:b0:7f:9b:89:5c:8d:3b:82:0c:ba:78:a4:75:
94:85:0f:b5:60:1a:b8:a2:b0:f4:1a:c2:16:a6:9b:33:7b:5c:
71:ba:28:f3:85:47:3a:e1:87:b1:85:c8:f5:9f:69:fd:94:2f:
2c:d2:52:9d:eb:13:d6:1f:3c:0b:ab:e6:72:d6:1a:a1:2e:90:
c9:63:3f:73:91:e1:0c:a5:2d:3e:78:43:16:2c:2f:40:a0:02:
0d:e3:69:57:d9:77:1d:4c:b6:6c:8c:4b:f5:50:19:23:89:26:
07:42:9b:cd:72:d4:d5:03:a9:b3:2d:fa:7d:7d:bc:21:d9:82:
46:df:e4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:30:12 2026 by rpki-client