Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
File: maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json)
Hash identifier: q0eh0fIP5FxTyG5mvJolbRkyPvvMESDswcaWvCpisVE=
Subject key identifier: 44:7F:D3:42:42:CE:03:8D:01:D1:6B:43:81:AF:97:04:D2:CF:F8:B6
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial: 019D26CCA9B2B7E79E6F69DC0EED84C72E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
Manifest number: 0F9B
Signing time: Wed 25 Mar 2026 21:00:40 +0000
Manifest this update: Wed 25 Mar 2026 21:00:40 +0000
Manifest next update: Thu 26 Mar 2026 21:00:40 +0000
Files and hashes: 1: 6fDAz4UFcIjJUNJfBauQnIUtFJQ.roa (hash: 32SPWBtR5ifRYzi3R6/09Z2DiSWDuRPZa68/1wX0JGw=)
2: J1QSbtTALXp3LDlVSmUk6MBKTwk.roa (hash: S+0rrf1JmQadx56tQAp4cXgjdXzHGEHs/KEObwAzQdw=)
3: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: c36Gayyk3khP3Et9F9JSVYwj97Cm14J2lICjpbYmTGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:a9:b2:b7:e7:9e:6f:69:dc:0e:ed:84:c7:2e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Validity
Not Before: Mar 25 21:00:40 2026 GMT
Not After : Mar 26 21:00:40 2026 GMT
Subject: CN=447fd34242ce038d01d16b4381af9704d2cff8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:0f:6c:ee:a7:75:e5:f4:82:e4:ed:55:a7:
9e:2f:80:4f:4b:77:82:1e:3b:2c:f8:89:2b:d9:ab:
f3:a5:97:a7:d6:3a:c4:76:77:3f:10:26:a2:92:32:
70:c5:4b:d2:dd:4c:9b:08:76:e4:25:41:d2:de:d5:
e1:24:4e:b7:f8:28:e2:d4:84:f6:31:f5:44:5a:54:
48:c4:17:f0:ff:4a:d6:ad:d0:44:6c:a2:00:7e:51:
14:c4:77:dd:66:5e:a3:d3:1e:39:b4:11:02:3b:0c:
1b:39:1b:41:7d:07:4c:ee:e5:34:a4:8b:02:b9:37:
4e:e1:0f:51:61:d9:1b:58:fc:83:fb:36:4a:b4:5b:
08:9e:e3:b1:43:4a:5e:20:69:5e:92:49:3e:aa:e9:
19:ec:bd:b3:f3:51:4d:9b:4f:b0:fd:c1:87:aa:15:
6f:b6:dc:01:a6:c2:68:aa:31:9f:52:a0:3b:55:2b:
8c:80:a5:4b:5e:24:53:f6:28:f9:58:ba:1b:74:44:
b3:c1:6c:eb:d4:36:32:92:2e:0c:77:34:40:f1:a0:
5e:38:3f:17:42:0f:04:e3:d3:bc:ca:87:22:35:2c:
ea:8e:a6:c4:e9:93:72:ef:a8:6d:ce:ac:30:31:a6:
26:d7:b9:d8:9c:65:c0:37:90:63:be:7a:5b:b8:20:
e9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7F:D3:42:42:CE:03:8D:01:D1:6B:43:81:AF:97:04:D2:CF:F8:B6
X509v3 Authority Key Identifier:
keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:78:03:2e:ca:bd:d1:76:4c:51:5e:66:87:35:38:48:cf:88:
65:10:e3:6a:6a:c7:16:56:44:14:3f:42:ea:71:f7:95:93:87:
85:03:92:c9:28:91:6d:d0:82:03:1c:7c:88:53:b1:c6:2d:16:
e2:bc:38:9f:e3:db:30:e6:b6:58:68:c8:22:1d:1c:f8:11:4c:
4f:98:cf:56:a8:fb:ea:51:ff:c6:eb:a6:44:ae:e6:30:70:14:
c0:a8:ed:9e:31:d8:1d:af:8a:7c:17:40:bd:4c:75:b2:61:de:
ff:b6:58:ea:aa:54:a2:ea:dc:e8:39:e9:50:30:79:a3:9b:cf:
4d:ee:b9:1f:e6:da:47:7b:9f:3b:0e:48:57:d2:1e:3f:59:d6:
23:f7:b0:84:51:e5:93:5c:45:fe:22:2b:46:0c:22:bf:27:fd:
15:b1:56:b4:22:4b:32:c5:82:94:e5:16:cd:e1:83:58:33:98:
d9:a7:ca:d4:52:66:58:d0:48:d7:ef:2f:78:7f:58:9e:7c:8c:
49:37:a9:bc:21:9c:7a:52:af:dc:44:b2:17:f3:e5:3f:ef:de:
aa:fd:0b:cf:f8:b7:47:25:9e:d2:7a:a0:b8:2f:aa:30:c3:fa:
b2:e7:ec:05:27:07:c1:fb:e6:95:71:60:5a:3e:ae:ab:c5:1d:
5d:6e:c6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:42:18 2026 by rpki-client