Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
File: mY3mCoZ7SdsppifG99IjomajIqk.mft (raw, json)
Hash identifier: 2ajoRP1p3z+JXQvlEiwmp3GEDDnn31ESP/G5O6J/MGc=
Subject key identifier: 4D:A2:D4:E6:D0:7D:AE:6E:EE:FB:AF:CC:E0:4A:0A:D8:A9:51:32:52
Authority key identifier: 99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9
Certificate issuer: /CN=998de60a867b49db29a627c6f7d223a266a322a9
Certificate serial: 019E1CEB860806BF5FBFA6F2500F8AA27EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
Manifest number: 01C0
Signing time: Tue 12 May 2026 16:00:57 +0000
Manifest this update: Tue 12 May 2026 16:00:57 +0000
Manifest next update: Wed 13 May 2026 16:00:57 +0000
Files and hashes: 1: GhN1yKMoFu8y6eUgkMzzqDeEy_w.roa (hash: zyNIiHMxPOjGUgXy6RCPzfPzuqWlzRBZzmEpfhP+cR4=)
2: UXW4TwBbqAg2KVwromTqDGJrE20.roa (hash: iC2l8xQ6yq60AZmCDOxhtpG1B+XfVb2gALUB/AI2BAQ=)
3: mY3mCoZ7SdsppifG99IjomajIqk.crl (hash: wTeLM8aRj/RvZtTN090oYitjFUbKtSsQoQKsLXfxaJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:86:08:06:bf:5f:bf:a6:f2:50:0f:8a:a2:7e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998de60a867b49db29a627c6f7d223a266a322a9
Validity
Not Before: May 12 16:00:57 2026 GMT
Not After : May 13 16:00:57 2026 GMT
Subject: CN=4da2d4e6d07dae6eeefbafcce04a0ad8a9513252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8e:4c:ec:bb:70:82:8e:50:f4:f9:b7:17:c4:
a1:3b:58:61:37:4f:a1:b3:8b:10:0a:c2:67:63:f9:
a2:1c:30:26:27:79:d8:37:7c:9d:e2:48:34:a4:78:
1d:99:21:a1:2c:4c:be:a9:8f:7d:b2:a8:0a:41:38:
6e:b2:18:d5:aa:22:72:6b:9b:2b:6e:fb:bc:42:13:
06:32:8c:fc:66:51:1d:ca:9d:84:14:98:8b:f5:59:
26:d2:59:ba:77:c7:49:a2:a4:83:b9:33:7a:4b:b3:
dd:97:9b:2d:a7:c8:b0:67:12:f1:5a:c8:59:f1:a4:
ba:c9:81:61:3e:e6:7e:19:b2:94:1c:2a:96:3c:c3:
f3:50:5b:19:c7:c0:f8:ea:a4:86:aa:35:4d:8a:8f:
21:64:39:6c:99:fa:2b:2e:51:e1:07:74:90:9b:49:
12:c1:d2:00:1a:f4:f1:e1:ea:ca:8e:9a:25:ef:74:
37:6e:41:0c:df:82:b8:bf:d9:1b:e2:33:be:88:24:
15:2b:46:fe:4d:8d:2f:29:09:04:8e:06:90:dc:ec:
e0:53:f7:f5:1c:3e:78:20:47:11:40:6d:f4:78:d3:
a4:44:c0:a0:05:cf:aa:de:dd:f9:49:d1:a3:fa:06:
0c:7b:de:97:c9:a7:2a:8c:2b:aa:f3:9b:03:05:80:
a9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A2:D4:E6:D0:7D:AE:6E:EE:FB:AF:CC:E0:4A:0A:D8:A9:51:32:52
X509v3 Authority Key Identifier:
keyid:99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0d:d5:d2:a0:73:ea:81:0b:9f:e6:b0:a4:d7:8d:e0:ae:cd:
bd:e2:99:7d:38:31:c9:0e:82:37:dc:a7:88:9b:38:45:9b:72:
78:df:6b:5b:be:86:06:48:59:db:bc:3d:13:e5:6b:12:57:ca:
c6:8b:22:d9:b2:ef:8e:62:0d:24:26:99:14:e9:49:7a:50:c6:
57:22:80:98:fb:74:50:65:42:a6:63:bb:57:1f:c3:a5:a3:5d:
ca:91:2e:79:46:02:b9:e8:d7:86:80:87:0a:bd:f3:1e:b7:6a:
b4:57:da:5c:6a:23:af:d9:8a:3c:86:a5:7c:20:01:0f:d8:b5:
78:10:40:a9:0a:f8:d0:54:be:6c:50:84:50:6a:ea:e6:d9:4b:
5b:bc:e5:1c:84:30:c0:72:1f:61:5c:de:cc:d6:95:8d:a6:a7:
d9:62:b2:24:26:93:81:4e:c4:f0:20:25:87:0f:48:e2:24:89:
69:d4:3f:d0:0e:94:c9:7d:53:8b:74:9d:cd:61:7a:6a:82:3e:
3e:00:2e:43:a2:4f:d8:70:9f:f3:89:8a:b7:3c:50:74:47:8b:
8e:66:c7:41:5d:b0:0f:01:52:0e:98:e6:b2:1b:25:7e:cf:b8:
dc:be:46:ef:78:c5:30:5f:60:f4:c7:64:55:ff:9d:1e:d3:78:
6a:ef:ca:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:04:50 2026 by rpki-client