Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
File: mY3mCoZ7SdsppifG99IjomajIqk.mft (raw, json)
Hash identifier: 46kYTewZq3uVcuUA2lrmoHzX3ZiCmRtI7NUYWT+PnxM=
Subject key identifier: BC:E4:C4:06:57:96:40:FB:2E:45:42:19:03:7A:72:57:42:8B:81:0B
Authority key identifier: 99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9
Certificate issuer: /CN=998de60a867b49db29a627c6f7d223a266a322a9
Certificate serial: 01A0D80433AC9E37F54806C37D26F1630DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
Manifest number: 032A
Signing time: Fri 25 Sep 2026 10:02:29 +0000
Manifest this update: Fri 25 Sep 2026 10:02:29 +0000
Manifest next update: Sat 26 Sep 2026 10:02:29 +0000
Files and hashes: 1: GhN1yKMoFu8y6eUgkMzzqDeEy_w.roa (hash: zyNIiHMxPOjGUgXy6RCPzfPzuqWlzRBZzmEpfhP+cR4=)
2: UXW4TwBbqAg2KVwromTqDGJrE20.roa (hash: iC2l8xQ6yq60AZmCDOxhtpG1B+XfVb2gALUB/AI2BAQ=)
3: mY3mCoZ7SdsppifG99IjomajIqk.crl (hash: joIOjReJY1zRpLLIO63xpVl8Ocx/cNtbYL1Te3d1uX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 10:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:33:ac:9e:37:f5:48:06:c3:7d:26:f1:63:0d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998de60a867b49db29a627c6f7d223a266a322a9
Validity
Not Before: Sep 25 10:02:29 2026 GMT
Not After : Sep 26 10:02:29 2026 GMT
Subject: CN=bce4c406579640fb2e454219037a7257428b810b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:e5:26:3c:d4:5f:53:1a:f5:a0:a2:5f:c7:
9c:d4:fc:5d:08:84:f0:93:e6:70:61:e7:e0:66:ce:
f7:a3:dd:c1:e3:5a:29:c6:c8:60:15:ae:48:95:34:
cd:f4:f4:f2:6c:cc:8e:59:cc:5a:41:d8:b3:54:85:
58:88:16:09:1b:99:60:c8:34:74:83:3d:44:58:95:
1b:04:93:f3:e0:ae:14:cc:0a:2e:13:a1:a7:92:e2:
40:da:2e:5e:57:50:ec:75:ea:80:a6:66:a1:05:18:
79:b8:cf:8a:17:a4:1d:5d:74:c5:27:2a:cd:25:d7:
cc:50:c1:05:9d:a5:b5:2c:6f:ad:8b:51:b9:d0:16:
38:99:fd:63:b3:e9:3b:bf:91:e3:41:27:0b:a9:50:
d8:c6:0f:86:60:2f:05:e4:27:7c:bf:4a:5c:c5:96:
4e:68:bb:b3:ca:11:a4:aa:a2:5c:6e:95:75:fb:0b:
14:dc:c9:2b:10:4b:9e:32:61:e0:5e:7b:59:5a:6c:
26:43:ee:2c:98:9e:5a:90:fd:69:91:29:ac:86:55:
91:bd:02:5b:d5:53:17:ba:46:f9:62:f6:13:de:bc:
ed:6a:05:d7:7c:d2:16:ee:b1:ba:82:ff:e6:46:73:
50:82:07:1f:bc:65:b7:23:d4:1c:94:00:84:1d:04:
7f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E4:C4:06:57:96:40:FB:2E:45:42:19:03:7A:72:57:42:8B:81:0B
X509v3 Authority Key Identifier:
keyid:99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:79:af:9d:8f:db:0c:3f:0e:10:39:78:fc:05:c9:9c:86:fd:
eb:6a:96:3a:2e:ba:d8:db:dc:a7:b4:26:45:3d:f4:b2:e7:7a:
80:bd:c6:f0:b3:d3:ea:36:aa:24:07:67:4d:ac:c7:22:4d:b2:
9d:de:6e:24:30:a4:dd:e5:69:c8:27:e3:65:77:0b:2a:0f:8d:
4a:bc:00:6f:0a:2a:4d:95:b5:81:cd:57:56:58:d2:c5:9e:a7:
e1:f3:ab:e1:4d:5f:ba:e1:a7:33:75:0e:47:77:93:d6:5d:ee:
b3:8d:4a:31:74:19:7c:d5:9c:f3:59:26:fb:7e:56:11:46:c4:
07:89:ef:a4:dc:8a:e5:6b:35:8f:d3:a9:14:ca:e2:1a:27:d3:
6c:8d:47:a0:4c:3b:75:36:bd:be:97:e0:6e:9e:91:82:08:65:
c1:ea:64:bc:6f:34:2a:46:ef:5d:ff:99:c8:97:f7:36:b2:4a:
c0:d2:b8:c7:9e:96:00:b4:b3:66:3f:e4:cd:50:7d:eb:4b:b3:
c8:d7:aa:c9:70:95:db:80:34:0b:22:6e:c9:73:3b:f7:e6:5b:
b6:3f:73:ff:d7:7a:43:c6:0c:a1:c0:1e:e6:33:be:d5:a8:1e:
7c:f9:67:eb:ae:52:04:79:65:2e:fc:44:0c:55:57:23:32:8a:
d0:03:18:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:47:47 2026 by rpki-client