Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
File: maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json)
Hash identifier: G/En73UdHycjBVdZSGRPcG2RBpnfGxJTQVIculqoz4g=
Subject key identifier: 1C:D1:35:5E:6D:D2:E8:FC:35:F2:68:4E:1C:F0:BC:A0:04:64:13:AE
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial: 019F92B6798FAAB49A55C5023B5F19982689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
Manifest number: 10DC
Signing time: Fri 24 Jul 2026 06:00:59 +0000
Manifest this update: Fri 24 Jul 2026 06:00:59 +0000
Manifest next update: Sat 25 Jul 2026 06:00:59 +0000
Files and hashes: 1: 6fDAz4UFcIjJUNJfBauQnIUtFJQ.roa (hash: 32SPWBtR5ifRYzi3R6/09Z2DiSWDuRPZa68/1wX0JGw=)
2: J1QSbtTALXp3LDlVSmUk6MBKTwk.roa (hash: S+0rrf1JmQadx56tQAp4cXgjdXzHGEHs/KEObwAzQdw=)
3: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: c/U+Ej/urTgSymho3lGYB3ujfPVKx8Lx6RaXhTtKg2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:79:8f:aa:b4:9a:55:c5:02:3b:5f:19:98:26:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Validity
Not Before: Jul 24 06:00:59 2026 GMT
Not After : Jul 25 06:00:59 2026 GMT
Subject: CN=1cd1355e6dd2e8fc35f2684e1cf0bca0046413ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3c:4a:9a:95:d3:fc:9e:74:c6:65:8e:fe:4a:
cb:c4:51:06:be:45:c2:f7:79:de:09:0c:0f:b0:4c:
b4:8e:60:0f:73:25:dc:a1:90:2e:17:6e:ba:b3:74:
22:0f:8c:d9:1c:e7:b1:86:7a:a5:88:97:d8:95:77:
c2:b2:c3:a0:4d:67:7b:02:3f:99:49:b5:56:83:4d:
51:80:98:f7:89:b8:06:40:71:9e:9a:8f:cb:e9:9a:
da:7c:47:c4:54:31:78:18:12:78:71:22:e6:87:6e:
b8:6b:44:07:ca:aa:ef:02:73:77:65:21:65:0a:95:
1f:d7:74:87:bf:38:d7:09:bc:d1:95:f3:fe:a6:a7:
5a:96:0c:ca:8b:3e:0c:56:a2:2b:bb:4c:fe:a8:1a:
c2:52:d6:f7:6f:90:2c:38:08:ab:15:cc:78:5b:a3:
31:50:b9:55:a0:4a:13:10:a6:14:cb:d1:1d:aa:d4:
47:44:42:c7:e6:fd:0e:f6:58:08:ed:95:e5:28:2d:
01:3a:51:9b:05:9d:d4:68:42:90:9c:65:bf:af:d3:
f3:d1:31:4d:34:c5:5d:7c:e5:d5:ad:0d:28:d6:96:
e9:35:ed:aa:8d:77:57:6d:d9:bc:28:64:19:82:53:
27:e7:c1:2b:27:07:bd:55:ed:94:e2:d4:92:b5:0c:
70:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D1:35:5E:6D:D2:E8:FC:35:F2:68:4E:1C:F0:BC:A0:04:64:13:AE
X509v3 Authority Key Identifier:
keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1b:07:92:96:4c:fb:d1:52:73:2e:6a:d9:5d:2c:14:1d:d6:
b7:41:a0:a4:9d:df:42:6f:a4:1f:c9:72:de:e4:eb:ff:4e:99:
60:b0:7d:01:04:da:ef:7a:44:0d:a5:e4:be:b3:1a:b0:42:be:
d0:88:f1:ce:5e:dd:32:81:59:f8:ef:d8:1e:01:4a:6d:55:7c:
09:a7:f7:3c:59:f7:35:62:0e:9b:73:fc:f9:3b:b2:a1:75:bc:
2a:52:61:68:62:83:3c:7e:6e:5f:c0:66:5e:db:7d:14:16:4f:
81:c7:7b:6e:65:7d:bc:a5:25:df:64:cc:44:99:92:6f:aa:ab:
0d:a7:5b:fe:fc:81:ff:46:eb:73:76:79:d4:96:9c:4f:a4:51:
ad:73:ab:f4:ab:55:6d:7f:93:7f:75:b3:74:b2:d8:d9:7a:35:
89:8a:bf:1c:ef:16:dd:b7:4f:67:49:6c:42:4e:43:f7:45:81:
b9:45:8f:10:89:f9:6c:74:27:fa:7f:77:b2:66:d0:34:e0:bd:
15:58:51:6c:ed:cd:3b:31:0c:72:ea:01:43:d5:d7:5d:5c:d7:
dc:7e:8a:ac:f4:7f:b5:00:78:af:5b:7f:5f:2d:b6:9d:ad:33:
58:c2:d5:97:1b:54:3f:e2:4a:05:be:23:17:1e:d3:9b:1d:db:
e6:53:36:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:18:33 2026 by rpki-client