Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
File: Mya5UKRaLGusFQX80E2UDMCWj5Y.mft (raw, json)
Hash identifier: YBQH10KNL2FIkxsWdqNYHV3EsnDDqZE7g0r2bINl4/g=
Subject key identifier: 67:70:E1:01:06:58:34:61:5C:7C:8E:BF:CC:42:13:28:04:40:D1:A8
Authority key identifier: 33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
Certificate issuer: /CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Certificate serial: 01A17D05B556217EC4CA984E02525322CDDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
Manifest number: 09AE
Signing time: Tue 27 Oct 2026 11:01:28 +0000
Manifest this update: Tue 27 Oct 2026 11:01:28 +0000
Manifest next update: Wed 28 Oct 2026 11:01:28 +0000
Files and hashes: 1: Mya5UKRaLGusFQX80E2UDMCWj5Y.crl (hash: wn0tn7C4zuKrEZ/5nOHqbWABbB7fO2gt2b4gKBE9ndU=)
2: YZYDQXVhkyQEU7FXMxc6oaYUT_4.asa (hash: eA77gr7KIuI04ACTqilmeBAOd+qmU/Ry9/nDfmBIbL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:b5:56:21:7e:c4:ca:98:4e:02:52:53:22:cd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Validity
Not Before: Oct 27 11:01:28 2026 GMT
Not After : Oct 28 11:01:28 2026 GMT
Subject: CN=6770e101065834615c7c8ebfcc4213280440d1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:70:d0:8c:34:10:88:96:09:32:8d:a3:72:
c2:9b:b6:b6:38:e0:53:1f:83:40:1f:33:95:83:4d:
31:c2:dd:7b:d3:0d:5b:4d:8b:d8:d5:0f:d2:9f:b7:
a8:de:b2:87:01:71:4d:9d:ea:e8:65:93:2a:b1:35:
87:89:ef:02:df:80:e0:a4:b7:20:df:8c:38:4c:da:
53:15:f9:83:bb:3a:40:90:01:a9:b4:98:0c:26:b6:
b1:77:54:71:da:0a:b3:7f:b7:d2:cb:08:ba:40:01:
39:5b:18:d8:37:ea:79:5d:7b:85:d3:01:c0:f0:c8:
59:52:52:df:16:ff:02:a9:b6:51:34:52:10:f2:74:
df:07:f1:86:f0:ce:fd:d3:e1:2e:9a:84:88:4f:6a:
fb:59:19:3b:9a:1d:35:28:5c:12:2e:99:dd:d0:7a:
9f:98:af:ae:b1:94:53:95:99:2f:17:c0:ff:fc:72:
75:9d:c8:a0:de:f5:6e:e9:f2:92:ea:a0:22:9f:cc:
31:76:78:02:04:f4:3a:d2:11:3f:5b:21:6e:a0:24:
f4:e1:fb:78:1c:da:0e:aa:0d:7e:05:62:72:a2:53:
66:be:9f:48:7b:a0:18:62:78:c5:d4:06:6f:a9:2c:
5d:4f:86:18:3d:38:1f:02:db:19:57:dc:12:4c:e2:
e7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:70:E1:01:06:58:34:61:5C:7C:8E:BF:CC:42:13:28:04:40:D1:A8
X509v3 Authority Key Identifier:
keyid:33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:61:e1:f7:76:87:55:df:1d:0a:13:5e:46:d1:d5:30:28:50:
e6:85:82:34:5a:21:16:58:af:48:f0:78:4b:1a:38:b4:f8:4c:
89:6d:f7:a4:69:86:3b:59:d9:c1:3d:18:7d:29:43:c7:ac:25:
bd:2b:c9:e5:cd:21:ef:c0:8f:c1:9c:82:1f:2e:69:32:fe:9c:
76:83:66:ea:03:74:0a:6d:42:87:a2:b7:61:3c:39:83:0d:83:
1e:18:93:50:ec:99:62:e1:c3:c6:87:68:dc:85:02:99:fb:25:
77:ff:35:16:74:30:5d:3a:07:20:c1:8e:03:f7:6d:d0:40:a1:
31:a4:bf:37:1d:a8:02:29:71:ec:f6:63:14:79:0e:48:09:9c:
58:f1:de:fc:65:ee:58:a1:15:c0:4f:6c:25:c4:0b:62:e7:cf:
41:05:f0:39:2e:9a:e2:e6:eb:b2:22:dd:ed:15:10:ce:06:a4:
c2:68:4b:98:4e:22:21:64:3a:38:80:8f:f8:ef:f6:47:9d:a5:
90:bf:05:c4:f0:6b:50:7d:93:80:d1:43:7f:5d:b5:2c:d4:e7:
7b:31:c0:a6:39:6b:d2:26:b0:b9:67:f7:4d:3e:c3:b1:ac:ce:
d4:a5:fa:4b:a9:ae:74:78:c1:bc:48:c2:fc:56:23:a5:d9:da:
03:cf:17:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9BbVWIX7EyphOAlJTIs3eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMjZiOTUwYTQ1YTJjNmJhYzE1MDVmY2QwNGQ5NDBjYzA5
NjhmOTYwHhcNMjYxMDI3MTEwMTI4WhcNMjYxMDI4MTEwMTI4WjAzMTEwLwYDVQQD
Eyg2NzcwZTEwMTA2NTgzNDYxNWM3YzhlYmZjYzQyMTMyODA0NDBkMWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvdw0Iw0EIiWCTKNo3LCm7a2OOBT
H4NAHzOVg00xwt170w1bTYvY1Q/Sn7eo3rKHAXFNneroZZMqsTWHie8C34DgpLcg
34w4TNpTFfmDuzpAkAGptJgMJraxd1Rx2gqzf7fSywi6QAE5WxjYN+p5XXuF0wHA
8MhZUlLfFv8CqbZRNFIQ8nTfB/GG8M790+EumoSIT2r7WRk7mh01KFwSLpnd0Hqf
mK+usZRTlZkvF8D//HJ1ncig3vVu6fKS6qAin8wxdngCBPQ60hE/WyFuoCT04ft4
HNoOqg1+BWJyolNmvp9Ie6AYYnjF1AZvqSxdT4YYPTgfAtsZV9wSTOLnFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdw4QEGWDRhXHyOv8xCEygEQNGoMB8GA1UdIwQY
MBaAFDMmuVCkWixrrBUF/NBNlAzAlo+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXlhNVVLUmFMR3VzRlFYODBFMlVETUNXajVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yOGI3MzAtZjViYi00NjA2LTgzNjUt
MDhlMTA2MzgyMjVlLzEvTXlhNVVLUmFMR3VzRlFYODBFMlVETUNXajVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yOGI3MzAtZjViYi00NjA2LTgzNjUtMDhlMTA2MzgyMjVl
LzEvTXlhNVVLUmFMR3VzRlFYODBFMlVETUNXajVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2Hh93aH
Vd8dChNeRtHVMChQ5oWCNFohFlivSPB4Sxo4tPhMiW33pGmGO1nZwT0YfSlDx6wl
vSvJ5c0h78CPwZyCHy5pMv6cdoNm6gN0Cm1Ch6K3YTw5gw2DHhiTUOyZYuHDxodo
3IUCmfsld/81FnQwXToHIMGOA/dt0EChMaS/Nx2oAilx7PZjFHkOSAmcWPHe/GXu
WKEVwE9sJcQLYufPQQXwOS6a4ubrsiLd7RUQzgakwmhLmE4iIWQ6OICP+O/2R52l
kL8FxPBrUH2TgNFDf121LNTnezHApjlr0iawuWf3TT7DsazO1KX6S6mudHjBvEjC
/FYjpdnaA88XVw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 20:33:56 2026 by rpki-client