Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
File: my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft (raw, json)
Hash identifier: 77ukC9uQ/kdtoLSfNAQFqqY3O4XLBnWqxKT6D7P6ZwA=
Subject key identifier: 77:22:DA:0F:8C:31:24:BA:2F:7A:53:C7:F2:B3:3D:88:77:58:8F:97
Authority key identifier: 9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70
Certificate issuer: /CN=9b2e80a141c974f6da8f40274338fdacee42a770
Certificate serial: 019D2816BEEB9E1396218B2CC0BE089E73BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
Manifest number: 1038
Signing time: Thu 26 Mar 2026 03:01:12 +0000
Manifest this update: Thu 26 Mar 2026 03:01:12 +0000
Manifest next update: Fri 27 Mar 2026 03:01:12 +0000
Files and hashes: 1: my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl (hash: CGRnh/Czfgu57LGTgE4ajS7QC5HxRFwEDFG7SCrLihc=)
2: qMXiFIKgh3-IBGkLPjbuJwBXoRA.roa (hash: wOqBqI9F5yYnAseCjLS45C8nyhKzFjGdRi4crVjtjK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:be:eb:9e:13:96:21:8b:2c:c0:be:08:9e:73:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e80a141c974f6da8f40274338fdacee42a770
Validity
Not Before: Mar 26 03:01:12 2026 GMT
Not After : Mar 27 03:01:12 2026 GMT
Subject: CN=7722da0f8c3124ba2f7a53c7f2b33d8877588f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:84:4e:ba:37:0f:de:4d:9f:11:99:62:d9:53:
46:51:e0:ee:6f:15:6e:1e:aa:d3:38:83:eb:01:a4:
b8:e7:0c:d1:4a:42:3d:d0:16:d3:5c:99:90:5f:c8:
13:00:1a:4c:ed:76:62:1f:43:06:64:f5:96:e3:6a:
43:4b:b1:d7:f0:6c:d1:9c:ab:a5:9f:f6:4b:0e:dc:
77:af:f6:da:a4:43:b6:f5:2b:e3:80:2a:bf:7b:fb:
19:b2:32:5a:62:6c:fb:29:dd:46:6a:15:db:fc:40:
51:70:36:3b:b7:1d:1a:25:ad:63:81:c2:c7:34:58:
e8:8e:47:dc:33:08:2b:9f:55:a3:2c:34:82:62:a5:
75:01:91:db:22:6e:2f:1e:c4:bd:8e:78:aa:12:f4:
a6:5b:80:a5:b5:3d:de:31:e3:c0:e4:db:2b:fc:e2:
b8:5a:94:d4:fd:a0:3b:a1:cc:db:5c:ca:32:78:12:
86:02:75:80:9b:d3:49:98:48:17:d7:40:73:48:8d:
a3:e2:fb:01:ea:99:21:66:39:3e:27:87:19:d4:33:
dc:4e:4b:09:33:d6:91:b7:a0:46:18:33:86:78:b3:
9e:cf:a5:45:f3:e7:5b:d6:7e:db:8f:a4:0d:3b:e9:
11:5e:82:5e:28:f3:3a:c9:13:ae:7a:29:8d:ea:40:
7a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:22:DA:0F:8C:31:24:BA:2F:7A:53:C7:F2:B3:3D:88:77:58:8F:97
X509v3 Authority Key Identifier:
keyid:9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:16:30:61:b1:4d:9d:e5:36:00:1e:e6:17:ce:31:23:a8:c2:
f5:9e:3b:a4:83:0f:6d:7b:06:58:68:3b:ad:98:21:20:38:af:
c8:e7:96:82:77:d5:d0:83:a1:f5:15:51:15:8e:2f:9d:55:25:
11:33:23:ed:a6:73:97:d7:de:ec:b9:ba:39:03:5e:3e:6d:0d:
05:45:f3:2b:2f:23:7b:05:d3:1a:b7:26:3b:d9:07:68:36:42:
ce:c8:d1:95:58:74:be:12:92:b9:4e:f5:22:14:31:bf:88:13:
4f:62:d2:f7:f4:0e:97:16:34:5e:57:9b:ff:c8:69:8b:97:69:
af:dd:c1:e2:fa:82:03:73:0d:41:9a:2a:fe:8a:c6:dd:7c:b3:
7d:fe:f0:e9:49:23:4e:11:a5:fc:e0:41:74:5a:d6:44:7e:b7:
d0:b4:33:8e:72:0f:bb:a5:62:0d:fe:bd:a1:69:f8:e2:9e:b8:
4f:ec:e8:06:34:08:23:ec:2e:a6:5b:48:c5:81:e9:06:a8:a9:
0d:26:bf:6d:f8:35:ae:70:77:c7:de:e8:e2:8d:84:42:bb:27:
82:57:93:6d:ac:27:c4:2d:08:b2:f8:ad:65:15:31:b7:44:ab:
77:fd:f3:42:c3:82:3a:ac:bc:9e:cb:4e:4e:aa:0b:1d:f9:be:
29:54:83:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:58:45 2026 by rpki-client