Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
File: mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft (raw, json)
Hash identifier: d6XGfbdotlMheh0sMrKj2DQEweu8E3r6KyCKrl6NiQU=
Subject key identifier: 5C:DD:50:6E:9A:63:A8:8D:D7:F2:41:5C:37:00:36:F2:F3:0B:16:A8
Authority key identifier: 99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
Certificate issuer: /CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Certificate serial: 019D29978125F289CAD4CCC93FFF5E0E9773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
Manifest number: 0F69
Signing time: Thu 26 Mar 2026 10:01:27 +0000
Manifest this update: Thu 26 Mar 2026 10:01:27 +0000
Manifest next update: Fri 27 Mar 2026 10:01:27 +0000
Files and hashes: 1: mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl (hash: jHZWtZ0y6ArJTD+2d3L7wd97kWV7AkIfv7cMZEPJyoo=)
2: wBSqoLFJ8ghdrJRBL3vMWYtDQ7Y.roa (hash: NXyL8CpxXnA8Of0Eq4HRkrn4hYLRn+YBP9JG8zmPi+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:81:25:f2:89:ca:d4:cc:c9:3f:ff:5e:0e:97:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Validity
Not Before: Mar 26 10:01:27 2026 GMT
Not After : Mar 27 10:01:27 2026 GMT
Subject: CN=5cdd506e9a63a88dd7f2415c370036f2f30b16a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:03:f5:4a:db:a5:53:27:dc:06:2c:db:c0:7a:
3d:ef:81:b5:94:26:04:5f:59:f6:5a:ce:cf:2b:61:
41:c8:68:eb:68:da:2b:63:dd:e2:a4:39:59:db:cd:
c6:ec:52:3c:83:25:2c:5d:ab:a6:eb:a1:91:db:0c:
79:d3:e7:de:b7:ff:c1:96:61:a6:99:ed:73:93:4f:
da:43:d0:71:b4:e8:2b:c6:94:f1:77:4b:00:56:c3:
06:f6:8a:00:6d:15:72:e7:69:e3:59:f2:40:6b:59:
2a:07:a6:55:54:5d:65:8d:15:e9:bf:78:f7:e2:11:
23:f7:c9:bc:9f:b0:b9:db:55:6f:ae:7d:c3:a1:c1:
7c:2a:89:7d:97:92:8e:e5:70:ee:0e:b0:bf:ff:8d:
68:15:0b:02:a1:88:cc:45:d7:65:86:9f:5a:ba:2c:
3a:37:13:ea:cd:dd:e5:f1:99:b2:c3:2a:ab:7e:d2:
15:c0:17:1e:b5:0c:f6:66:87:3b:79:f0:97:4b:6f:
96:9a:b1:41:10:4e:cd:e5:59:ec:cc:e4:b3:2c:39:
a2:7a:02:c4:04:43:ff:75:89:a8:2f:d7:ab:85:79:
a8:79:c9:7c:d7:66:4a:9c:02:87:1f:0f:55:f2:5a:
19:f5:f1:e5:68:e4:87:2e:d2:91:f0:20:c2:16:5f:
bc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DD:50:6E:9A:63:A8:8D:D7:F2:41:5C:37:00:36:F2:F3:0B:16:A8
X509v3 Authority Key Identifier:
keyid:99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2c:7d:8c:17:67:71:89:11:e1:4d:17:67:7b:68:a8:b4:fc:
52:6d:0c:89:af:35:dc:80:19:14:e3:c0:6a:01:77:00:c2:d0:
02:8d:d1:d7:b0:b0:ee:ad:e4:af:3c:83:b0:48:56:eb:8e:00:
ab:48:0b:15:fc:27:b4:e6:74:81:63:23:c0:9c:e0:46:d3:a6:
50:e1:cf:f7:e7:07:6b:04:76:2f:8d:88:bd:d3:fc:bc:0e:1a:
07:17:51:8f:03:95:8c:ff:61:eb:0d:94:10:af:fe:48:16:05:
51:09:f3:e9:d2:6d:04:45:a3:22:1a:dd:12:dd:d8:a1:18:48:
71:7b:69:ad:62:16:2f:a0:94:c8:f2:ff:14:87:87:5e:fe:29:
c4:d1:b1:86:ab:66:e5:46:cb:f1:98:f9:cc:0a:f4:43:74:ab:
49:87:e1:1d:f7:5c:cd:11:48:6e:1f:98:be:b6:e3:30:de:76:
84:8d:fa:bf:05:13:ec:3e:15:7a:21:a6:76:12:a0:a8:ac:f5:
d4:57:39:90:51:fe:73:d6:42:b3:40:1f:7b:1b:8c:df:b7:94:
31:23:e1:29:be:55:04:66:46:bc:ac:83:5d:8e:23:e5:69:12:
20:97:e3:95:57:45:9e:a3:66:fa:22:ef:cc:84:13:2e:99:03:
cf:b4:be:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:32 2026 by rpki-client