Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
File: maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json)
Hash identifier: yKGNaX5b3RCWTg4P+wwhwKE+L67AnuRzHzJwNzvR2Mg=
Subject key identifier: 1F:C7:15:05:D1:3D:97:BF:2E:CA:54:D6:61:14:50:91:A8:0E:6A:8B
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial: 019E1DFE77547BB527FE344A5D7EAB9854FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
Manifest number: 101B
Signing time: Tue 12 May 2026 21:01:16 +0000
Manifest this update: Tue 12 May 2026 21:01:16 +0000
Manifest next update: Wed 13 May 2026 21:01:16 +0000
Files and hashes: 1: 6fDAz4UFcIjJUNJfBauQnIUtFJQ.roa (hash: 32SPWBtR5ifRYzi3R6/09Z2DiSWDuRPZa68/1wX0JGw=)
2: J1QSbtTALXp3LDlVSmUk6MBKTwk.roa (hash: S+0rrf1JmQadx56tQAp4cXgjdXzHGEHs/KEObwAzQdw=)
3: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: MKI9t7RiSW20F9j2sDqOU5aTUCoFQ69NrsVJ9O8usFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:77:54:7b:b5:27:fe:34:4a:5d:7e:ab:98:54:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Validity
Not Before: May 12 21:01:16 2026 GMT
Not After : May 13 21:01:16 2026 GMT
Subject: CN=1fc71505d13d97bf2eca54d661145091a80e6a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:dc:18:8a:46:a9:8d:b1:29:99:d1:02:1e:c7:
56:d2:4d:fc:4d:1c:45:d1:a0:f5:83:8d:85:55:5a:
1a:6e:2e:0f:56:a8:1b:e2:07:87:8b:15:e1:03:12:
bc:49:6d:31:87:47:46:70:7b:13:c4:0d:42:22:10:
9a:25:a5:e6:d6:ef:eb:cc:f2:b1:5d:47:54:67:53:
71:eb:0c:86:a7:f3:c2:bb:ca:93:0b:aa:b1:af:a8:
8b:a1:bc:c0:51:fe:35:36:f4:b3:52:20:c7:19:9b:
25:42:9c:52:10:85:a3:b3:c7:7f:04:b0:9e:b1:ea:
5a:fa:4c:9a:40:59:e5:8b:71:07:29:03:02:3c:93:
64:00:c6:0f:b6:33:f3:a5:4e:7f:1f:0a:78:24:c5:
1c:3d:6d:8e:da:21:10:54:c3:d5:bf:3b:55:4c:c4:
73:5e:8c:96:64:82:63:3c:bb:34:93:98:78:f1:89:
c6:8f:a6:b0:02:21:40:2f:c1:19:41:af:32:8a:3b:
34:b6:a6:d9:38:3e:64:12:d7:17:71:11:40:e8:aa:
34:63:6b:01:f9:79:0a:6b:06:a1:3a:43:f1:bb:d3:
1d:65:0b:83:3a:06:0c:9c:3a:c7:f5:5c:0e:9e:dd:
85:d8:23:6f:03:2a:64:71:c2:7f:a6:e3:37:c3:99:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C7:15:05:D1:3D:97:BF:2E:CA:54:D6:61:14:50:91:A8:0E:6A:8B
X509v3 Authority Key Identifier:
keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:27:0e:db:7e:9c:b9:dd:df:fd:0c:46:2a:71:2a:76:20:2d:
58:97:22:9c:61:ef:16:49:89:35:b6:49:ea:e8:bd:35:b3:90:
47:4c:86:16:ea:9c:3c:ce:91:9e:d6:3c:38:b8:eb:ed:c6:7d:
94:9a:5b:3c:ba:08:04:5c:98:88:b7:c5:67:07:91:2c:62:ce:
1e:f0:d4:e9:71:ae:74:f4:3c:70:b6:50:49:ad:c6:7e:e1:bc:
7f:94:ca:a0:64:3f:e1:40:6e:27:de:ee:da:77:9c:02:a9:63:
14:07:53:87:11:28:2c:58:8b:c8:55:7e:09:b9:13:c2:e8:c8:
5c:e2:43:81:a8:ca:87:07:d2:a9:ae:55:07:a2:60:4a:1c:bb:
28:3e:9a:a6:91:46:e9:01:9f:b9:e5:ce:59:9e:57:2c:f6:ba:
ca:5f:82:a0:e5:bf:82:da:43:03:40:2b:fd:15:e1:23:67:f9:
9e:87:3f:c9:ec:70:4b:38:77:ea:24:13:f8:a0:87:30:a8:68:
6a:9e:02:b0:6b:5d:cc:e0:3d:05:6e:f2:02:ec:d2:24:43:d3:
44:24:a3:20:af:57:d9:86:ee:e2:34:fe:5a:e6:b5:ce:0f:f2:
47:5d:b8:55:3a:f8:88:dd:42:03:9c:6c:5f:41:8c:bb:e8:b7:
19:2a:3f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:36:08 2026 by rpki-client