Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
File: mdy98GMqEBYTqPbJRJsp7UXBqHI.mft (raw, json)
Hash identifier: VDFeARqO6ET23bLRumnsOq97Fdx7JQLCWhyGvgRzDRo=
Subject key identifier: 34:8D:D7:24:19:C6:0B:A4:46:E2:7B:3F:A6:EA:D2:72:1E:DA:05:94
Authority key identifier: 99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
Certificate issuer: /CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Certificate serial: 019D29CE999CBF3CDD3FBA94CDC7F2ED840C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
Manifest number: 1235
Signing time: Thu 26 Mar 2026 11:01:38 +0000
Manifest this update: Thu 26 Mar 2026 11:01:38 +0000
Manifest next update: Fri 27 Mar 2026 11:01:38 +0000
Files and hashes: 1: FJy0GIfk9vV1h7loWKolSJZXo6Y.roa (hash: IuQnK7CmGBa5gJ1tL38YDwQ/LuHmRuUUuO8hQ4PDMgU=)
2: ZkvlusQxR0eilq71QTIX3lmLXIA.roa (hash: XZW+wXA4kuyVy7bOsoQa1YVo6hUxFESln/r1+ImNbEc=)
3: gl6TR5lqCe0eF2sxfbOEh2xV2Ys.roa (hash: UP0movw74FgBnc/2Abquw52G3rsl7ENPcm+vDD+jqRQ=)
4: mdy98GMqEBYTqPbJRJsp7UXBqHI.crl (hash: IGwTjQT1Fo/jGt54mHZrE95mtLcrrTIR610G+hmV638=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:99:9c:bf:3c:dd:3f:ba:94:cd:c7:f2:ed:84:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Validity
Not Before: Mar 26 11:01:38 2026 GMT
Not After : Mar 27 11:01:38 2026 GMT
Subject: CN=348dd72419c60ba446e27b3fa6ead2721eda0594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:53:f2:92:1d:6e:77:dd:2e:6c:4d:5b:c9:0b:
3e:84:eb:3c:a8:12:e1:c9:d4:2f:0e:55:12:bd:0f:
80:a1:8c:33:1a:2a:03:cf:00:20:9f:04:03:49:67:
9b:9b:36:d2:ff:49:73:7a:1f:83:69:8b:de:60:de:
49:5d:c3:a4:0d:ac:24:ef:5c:97:77:d4:7c:bb:6e:
4e:3e:4c:11:6f:a6:8e:cc:f7:e8:c9:20:62:c0:c8:
6a:d7:d5:7c:22:7d:b8:4e:3f:de:5c:74:a4:dd:a6:
54:b2:87:bf:e0:e9:69:a5:0f:43:fb:81:58:3b:df:
73:55:44:fb:00:65:04:8b:7a:7e:a5:ce:70:8c:7b:
bf:b4:57:71:e6:d7:3b:9f:bd:c0:a8:04:91:06:f5:
d6:90:ea:87:4e:a7:f6:5b:67:81:29:7b:04:54:28:
6c:28:1e:1b:01:18:ba:ee:b1:72:61:a8:27:82:d9:
9c:62:8f:12:5d:75:89:7f:51:60:df:7b:b2:3d:99:
1c:64:f7:fe:18:ce:3e:04:9b:7c:88:f0:18:c1:c1:
a5:2c:d1:92:27:6a:15:31:33:b8:99:ff:f1:3b:8e:
d2:5a:09:a9:d0:94:f8:42:16:df:cd:9e:8e:e1:38:
73:72:0b:ec:c8:3d:80:e2:a3:67:69:0d:87:00:f9:
7c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8D:D7:24:19:C6:0B:A4:46:E2:7B:3F:A6:EA:D2:72:1E:DA:05:94
X509v3 Authority Key Identifier:
keyid:99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:05:d7:23:d5:54:12:5b:a9:50:86:2d:7d:21:0c:74:7f:dc:
41:35:74:14:ae:68:af:98:54:db:f3:20:8a:bc:87:24:9c:ae:
a7:85:d1:a8:08:90:6f:62:71:a9:ee:f3:1e:71:f3:42:f9:d6:
25:55:f5:90:35:ec:02:23:1b:79:65:3e:b4:c4:a7:f1:9b:df:
ac:7f:a6:37:7b:0e:d7:c3:a9:e7:1d:19:26:0a:fd:8d:ad:6c:
6c:5f:f3:e6:64:0c:94:36:e1:fe:51:68:0f:13:47:6b:bc:b2:
1b:d9:83:35:43:0d:fb:dc:c6:ef:e3:e5:95:c4:07:13:32:da:
67:45:ca:c2:75:99:b6:8e:98:09:0a:c6:b5:de:13:49:2a:f0:
2f:e0:52:11:4a:38:d3:e5:90:45:ac:b9:06:6b:b5:48:23:e4:
d8:86:bb:c5:14:26:b6:61:38:73:62:76:f3:5b:99:5c:49:89:
ae:35:5d:7e:80:f3:c2:9e:1d:9a:20:f8:e7:b6:89:e8:67:e2:
a5:27:39:fe:6f:6f:c7:d7:b2:8f:e4:7c:18:2e:4e:8d:4c:88:
8c:e5:09:6d:76:6e:37:b4:3c:1e:ea:5a:0c:21:50:b8:0e:04:
1e:94:1c:70:68:79:f8:d2:0d:ee:99:6d:80:00:8b:4f:09:35:
f3:38:2c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:09:10 2026 by rpki-client