Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
File: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json)
Hash identifier: MpOmOdr5GHWqbL5N+W38phNvtzhrFRday5NqLYS/JOo=
Subject key identifier: 10:D6:28:F0:98:B2:B2:C5:00:2F:BA:69:08:E4:56:72:E1:66:41:8E
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 019DCED05ED1A197B419623F6DA8E8F20932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
Manifest number: 12CF
Signing time: Mon 27 Apr 2026 12:00:55 +0000
Manifest this update: Mon 27 Apr 2026 12:00:55 +0000
Manifest next update: Tue 28 Apr 2026 12:00:55 +0000
Files and hashes: 1: 5z8L94SxohW89feZF-x7UUHOUGw.roa (hash: J9U9SwJZOAhHbw/+dwZT4u/bEO014TJ7Spfz6aawrAo=)
2: 60ZuDyr70onvZz7b_VP-SDmx33E.roa (hash: twz5MCkaRcivByRDA9QCyxItgQZO9OCdluDvL7eF7Ro=)
3: BlrqBtWblMfctvze6Z4e1h26Vg0.roa (hash: mrpfN/u4KNrOk9l0nXYVVF7vi+rRmvUj9lVXmfONvc8=)
4: NHjW7dPsyIq0Ra6kfJvb1FDPOrc.roa (hash: eNPkOFpshNdBId/GwxgDcZ/1OocRZllruwGL/l+cxaA=)
5: TmO2qs3CJ7nD3brN-Xezi1R7_Eo.roa (hash: r53OH2xwFa4qKn9FoyBvVY4gvGfnLfCBjSGuWq2Tb+U=)
6: e9W3bqM-9Cf9J8NK5NJYdPxtNqQ.roa (hash: fhBttHfpH+r5wDlnd1XHbP4VIUk5mx77G0HB40PrGrc=)
7: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: olGBhGK6UxosOlbqFiFpRRheSEi5liSKnvLktn8fpvg=)
8: vLogJj6NuTRQtmEXSY4brF-qnBY.roa (hash: zohFkXr1VCR5q6x1R2Xx5enwasHpy8O1g/gJdKkByho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:5e:d1:a1:97:b4:19:62:3f:6d:a8:e8:f2:09:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Apr 27 12:00:55 2026 GMT
Not After : Apr 28 12:00:55 2026 GMT
Subject: CN=10d628f098b2b2c5002fba6908e45672e166418e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:63:7e:ab:3b:5d:b0:4b:2c:39:8e:03:a4:b4:
0e:c9:87:fc:18:dd:2e:48:c2:e5:98:a1:fc:2d:0c:
cb:7f:9c:cc:ff:79:a0:1b:e4:e5:21:7b:05:36:18:
fd:e6:4e:d1:75:69:7a:3a:db:28:79:9d:ba:8b:dd:
9d:87:b7:44:e7:0b:9e:59:52:6e:c1:aa:89:f5:10:
a3:b5:b9:71:db:1e:2f:36:bf:53:30:73:2a:42:e3:
eb:7f:33:dd:5b:fb:a2:da:51:b3:4e:d9:00:28:1b:
a8:cc:0a:b6:23:e8:c0:93:2a:fa:08:b3:f5:35:df:
80:a3:49:cb:35:39:ec:0f:ea:7b:e5:31:33:72:7f:
9d:dc:17:a4:52:53:ce:31:4f:4a:54:70:fd:1b:3f:
25:8a:8e:6c:55:e9:88:ba:05:27:5c:8b:d1:88:dc:
4f:fa:32:df:e0:fb:f3:b0:c7:00:0b:87:02:d0:73:
6a:10:a3:aa:45:da:fd:4b:72:39:a3:c1:49:4e:a8:
4d:47:68:21:dc:7a:a3:41:6f:79:c3:ce:ff:ac:f5:
8b:b6:52:68:43:80:33:12:72:3d:91:7b:8d:29:25:
9c:d6:ea:96:cb:92:4a:78:f8:8f:ec:92:5f:8c:36:
d4:5c:03:1f:96:4e:16:af:c6:52:ab:87:30:3d:68:
7a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D6:28:F0:98:B2:B2:C5:00:2F:BA:69:08:E4:56:72:E1:66:41:8E
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:e1:c6:b3:de:78:4e:ff:7c:85:80:61:46:09:64:8d:bf:1a:
6e:ae:dc:d1:42:a8:5e:a9:a9:fc:0f:26:78:cd:8a:0f:a2:43:
a0:14:b0:eb:97:0e:b0:4a:50:f7:f9:21:da:f2:03:9a:dd:90:
56:ce:b5:b0:9f:ca:5b:43:d5:b0:ae:de:30:48:07:f2:5f:54:
40:c8:39:ec:f1:0d:62:c6:61:77:99:fd:2c:ea:4c:91:80:09:
03:8a:b0:4f:e6:9b:81:73:c3:49:47:95:17:fa:62:73:32:36:
32:88:2b:e0:6e:87:c6:d2:97:c9:72:1d:c7:58:8f:20:33:87:
2a:97:64:79:e3:94:da:73:d0:ec:ff:6c:7d:ef:e7:7b:54:9a:
a8:7c:b2:7b:d6:48:6d:9e:67:dc:8e:d8:46:6d:e8:13:ee:2f:
d5:47:c3:73:d5:f7:f2:1a:02:66:74:8e:7f:6a:5b:28:60:31:
dd:4b:cd:2e:38:1f:a8:30:1a:e7:01:27:00:30:d3:01:d3:19:
fd:72:c3:56:71:09:55:25:ae:6e:6e:1d:6a:a5:5d:f0:11:43:
41:43:e6:76:26:35:39:1b:2d:e3:ed:9c:56:b0:36:b2:11:3c:
54:34:ea:12:2f:d8:75:d1:23:82:9b:ae:03:f5:12:aa:f9:4b:
5b:72:e6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:09:46 2026 by rpki-client