Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft
File: mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft (raw, json)
Hash identifier: hTGIuRxr50OM8/hIPjI/rTkp1/LdKMvEVTp7ehWGcI0=
Subject key identifier: 43:20:8A:AF:D8:1E:C3:F1:0F:BE:46:6E:51:3E:69:D1:E8:83:1A:C2
Authority key identifier: 98:CC:B1:84:D1:28:38:4E:4F:76:7D:85:25:8E:0D:EA:73:F1:8E:43
Certificate issuer: /CN=98ccb184d128384e4f767d85258e0dea73f18e43
Certificate serial: 019D26CD51FC016FE00E49F7AC2BD8DC9846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft
Manifest number: 0F96
Signing time: Wed 25 Mar 2026 21:01:23 +0000
Manifest this update: Wed 25 Mar 2026 21:01:23 +0000
Manifest next update: Thu 26 Mar 2026 21:01:23 +0000
Files and hashes: 1: N38diFMaV_i5hOP_4a67WmRtrIU.roa (hash: 19VwrhP7hE1gb5tfUqrl4XziM0lkIjbVr+V/P6vC97Y=)
2: mMyxhNEoOE5Pdn2FJY4N6nPxjkM.crl (hash: m3S+IAtr+Bjq29VwV7CcwB1cufjg08RrYDctbYfnWIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:51:fc:01:6f:e0:0e:49:f7:ac:2b:d8:dc:98:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98ccb184d128384e4f767d85258e0dea73f18e43
Validity
Not Before: Mar 25 21:01:23 2026 GMT
Not After : Mar 26 21:01:23 2026 GMT
Subject: CN=43208aafd81ec3f10fbe466e513e69d1e8831ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ec:a1:c9:bd:5b:b0:b8:50:7e:7d:55:2a:de:
34:f3:4f:dd:fb:d2:22:d4:f8:e7:c9:06:d8:16:e1:
02:84:42:f7:cb:6a:23:bb:de:a7:13:42:40:27:98:
bc:ba:56:0e:39:52:50:04:cd:c2:d8:89:40:3c:91:
37:24:f9:75:3a:e6:ad:02:eb:94:d1:c4:e6:be:bc:
f7:cb:7c:11:c3:75:49:23:4a:e6:9d:81:df:11:7d:
0f:ad:27:53:7c:23:f9:25:e3:e6:74:8d:0a:6c:6d:
42:8c:cc:31:68:25:53:be:7f:10:9e:1d:9f:2c:e9:
d9:ad:5f:e8:7d:6e:d3:da:9a:97:33:ae:24:10:04:
9c:bf:36:fb:3b:4a:9f:86:f5:52:81:54:79:51:1c:
85:09:97:8a:4a:61:46:39:cc:52:12:a3:df:3a:42:
e8:c8:36:92:19:8e:bd:98:a3:bf:4b:0d:b1:88:86:
67:93:63:1d:ba:06:1e:f4:46:1c:31:40:28:ab:7f:
70:bf:3f:69:87:93:cd:97:32:ac:c9:7f:ba:ef:ee:
5a:77:54:cf:96:df:d0:b5:fd:37:1b:fc:6c:22:72:
ac:64:61:ea:41:18:1a:fc:ca:40:b3:74:c5:c1:89:
78:0d:87:d5:bf:76:9a:2a:78:2b:91:61:61:7c:8d:
f3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:20:8A:AF:D8:1E:C3:F1:0F:BE:46:6E:51:3E:69:D1:E8:83:1A:C2
X509v3 Authority Key Identifier:
keyid:98:CC:B1:84:D1:28:38:4E:4F:76:7D:85:25:8E:0D:EA:73:F1:8E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:27:8e:59:52:f8:1c:f6:b4:09:a2:25:99:71:89:42:b3:9c:
7f:e5:ce:9d:4f:89:80:da:fd:89:0c:96:e5:5d:be:8a:07:cf:
5e:a4:88:32:21:24:d7:4a:fe:e1:83:81:92:a4:c8:ae:78:90:
df:04:4d:76:02:77:d1:58:56:1d:c5:ba:4f:77:9c:71:fe:34:
7d:d1:84:39:09:97:fb:7f:04:ab:7b:10:e1:a6:a4:36:44:8f:
1d:61:03:9c:46:0f:5d:1c:60:ae:de:c3:c0:9c:5b:9f:6a:a0:
2c:8d:68:23:f7:9b:12:6c:f9:2f:5c:73:de:60:73:69:75:af:
ea:f7:39:31:8e:49:04:62:20:29:b1:b7:58:49:4c:d1:96:65:
6d:66:6f:32:bf:53:18:66:fc:ec:02:91:64:c7:83:05:73:b5:
a8:7c:22:0b:f1:88:f2:de:14:d4:24:1d:00:80:92:52:90:7a:
9b:0c:b9:5c:1c:77:6c:8a:4c:3e:68:74:f7:97:46:85:28:9a:
27:d6:8a:83:a6:78:73:cb:58:f8:24:87:91:86:72:9d:6f:47:
07:ea:60:3b:ef:2e:a9:78:30:6a:23:62:4e:f0:ab:ed:bf:f5:
db:0a:e7:e1:6e:31:06:79:75:48:d2:8b:38:fc:b1:c3:aa:5b:
b5:0c:b4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:27 2026 by rpki-client