Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
File: MY2rcPRKfrixz8E3Qz_NTXigOwU.mft (raw, json)
Hash identifier: 70TGVQ8c8QKS/66yTSvQfRtqd4wqczRt4oEdWek+6hE=
Subject key identifier: 5A:DF:8C:47:76:21:15:36:F0:15:CB:21:98:98:E8:CC:5B:C8:DF:C2
Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
Certificate issuer: /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Certificate serial: 01A0238D2B79CBB7569F4202798D9D96EA9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
Manifest number: 0514
Signing time: Fri 21 Aug 2026 09:00:49 +0000
Manifest this update: Fri 21 Aug 2026 09:00:49 +0000
Manifest next update: Sat 22 Aug 2026 09:00:49 +0000
Files and hashes: 1: 7l-sgrIhavro2SpPOFtgONrk5QA.roa (hash: X9fi/U55KuWyLJlSIBJLR9VeaEuygBRKeTfxzhD0sdk=)
2: DdYO6EDbuF7yR9RfMqyedlbBQxc.asa (hash: hjp0IFDf+5qRTfcTPb3MLWP9dI2krI8ag1FOvrQ6wJE=)
3: MY2rcPRKfrixz8E3Qz_NTXigOwU.crl (hash: JS8YjLlyrpWfVU0RD1puLCtqyn6q4UiY9ZdJiV9d4mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:8d:2b:79:cb:b7:56:9f:42:02:79:8d:9d:96:ea:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Validity
Not Before: Aug 21 09:00:49 2026 GMT
Not After : Aug 22 09:00:49 2026 GMT
Subject: CN=5adf8c4776211536f015cb219898e8cc5bc8dfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:9f:c6:23:92:33:cd:34:c7:ff:62:c5:85:
6e:44:5a:ce:ca:59:ab:b8:ef:0d:34:a8:71:09:c8:
55:92:28:9e:64:7c:8e:41:17:4a:74:55:ae:9d:40:
b0:9e:0b:3c:44:d9:fc:88:14:42:f9:46:b6:39:ea:
ae:9d:3f:ad:e2:84:cc:6a:1d:6d:cd:87:c7:f2:d3:
c2:90:fd:4c:c7:b0:2f:3a:31:be:6c:2d:a6:52:56:
92:df:3a:36:7c:f6:f5:ed:7d:0b:f0:52:b9:60:b2:
78:96:59:6e:80:9f:03:8a:13:3c:96:04:4a:63:bf:
dd:25:c1:ee:b6:99:4c:23:62:39:6f:56:13:d2:70:
82:7e:65:31:6f:8b:55:68:58:0d:d8:4a:82:77:ec:
40:7c:ab:06:ee:8f:60:6c:34:19:d4:d2:b2:57:45:
ba:7b:df:a3:80:a2:36:6b:cd:76:a3:3c:ef:e6:7c:
13:49:1b:59:74:a9:3b:76:ea:03:c6:89:32:4f:0b:
61:22:8a:9c:4d:2d:91:cd:dd:bd:90:2d:2f:59:39:
bf:cf:ba:09:4b:5a:13:c7:0f:ec:82:c9:11:48:fb:
b9:91:91:8e:fa:06:ba:c5:31:9a:f9:51:ce:aa:cb:
93:6c:35:18:1e:58:e9:51:43:62:80:a3:69:c2:0d:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DF:8C:47:76:21:15:36:F0:15:CB:21:98:98:E8:CC:5B:C8:DF:C2
X509v3 Authority Key Identifier:
keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:eb:8c:00:25:7c:64:fc:24:83:98:42:f3:b8:8a:6b:19:57:
c9:7b:fe:93:27:dc:c7:54:2c:14:29:15:26:cc:e6:12:d7:be:
10:85:7c:cf:65:fc:f5:2b:bd:ff:91:20:2f:b9:da:e7:25:3c:
5a:a6:ec:1c:ac:dd:3c:97:1d:e3:54:1f:bb:bb:4c:ce:92:ba:
5f:a2:57:6d:bd:d3:47:e9:59:fa:9a:07:43:2c:19:e8:9c:b5:
74:69:29:0c:57:54:39:fe:65:b0:74:02:a5:bc:d9:c4:d0:a1:
2c:9f:b4:d2:40:1a:70:c4:8b:3e:51:e1:44:68:12:7e:4d:9e:
7b:5b:b4:4a:7a:3e:cd:a5:21:bc:5f:d8:f2:6d:ee:dd:e0:83:
c4:7f:a0:4e:8c:89:9e:e5:6f:a4:6b:fd:b3:a2:f7:08:56:31:
79:4c:e0:f1:ec:1d:42:ec:a4:8a:2e:e6:b0:79:72:1d:1d:06:
83:2b:6c:05:7b:7b:29:6b:ac:49:d0:6d:ac:34:26:1b:f8:22:
3d:03:a4:d5:8d:08:71:01:93:49:66:00:68:d8:00:b4:cd:8c:
75:ad:cb:f4:3e:ce:b4:b9:cb:59:27:d3:e6:e7:53:9e:37:a6:
36:d9:72:9d:bd:8b:17:0f:a6:98:58:92:13:16:cc:fa:86:84:
d4:eb:23:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 18:33:44 2026 by rpki-client