Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
File: MY2rcPRKfrixz8E3Qz_NTXigOwU.mft (raw, json)
Hash identifier: Bk2Zu3CWd4KZIW3oANCEtpiX0qeLzbkSzbQw7UDa8Bw=
Subject key identifier: B1:AF:F0:02:D7:AE:62:EA:02:1E:3F:FE:E3:45:C9:88:C0:71:9D:0E
Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
Certificate issuer: /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Certificate serial: 019E29CBF45A91D4C6E2283804B63661F11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
Manifest number: 040C
Signing time: Fri 15 May 2026 04:01:32 +0000
Manifest this update: Fri 15 May 2026 04:01:32 +0000
Manifest next update: Sat 16 May 2026 04:01:32 +0000
Files and hashes: 1: 0E0G_V7Qww5gf7roh6v7vgAuxXI.roa (hash: /cBoP5h3k8tG8K+/XM4vhzPv5C3M0myfV5uPfAajNmA=)
2: HJdicrhK0X58hHeVpTRveQPzgSA.asa (hash: GnsE5zVVUGgOlqc4oqkgxYqYyAJUdLN6bxMsAfebi24=)
3: MY2rcPRKfrixz8E3Qz_NTXigOwU.crl (hash: xvpatkuWr/ULJMtjjkdcAw5WoXOibPi3RWYVOAAGmQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cb:f4:5a:91:d4:c6:e2:28:38:04:b6:36:61:f1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Validity
Not Before: May 15 04:01:32 2026 GMT
Not After : May 16 04:01:32 2026 GMT
Subject: CN=b1aff002d7ae62ea021e3ffee345c988c0719d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:1d:fc:43:9a:a6:47:14:75:2b:11:dd:51:
27:20:48:39:1d:9c:e1:55:a9:99:49:9a:84:07:28:
ca:5c:32:47:c0:44:c8:d2:43:96:22:72:36:45:57:
76:ee:05:c3:0e:38:75:bb:23:fd:12:b1:60:c9:71:
d1:90:62:a3:8d:f5:87:64:1f:1f:91:0a:a9:3d:67:
3a:b1:57:a6:3a:f7:47:01:8b:33:70:1a:8c:c3:8a:
b2:5f:94:a5:87:b4:9e:18:0a:fa:c1:51:81:c1:02:
bd:a4:02:c3:25:ce:4f:f1:f9:60:1f:8d:34:df:4e:
63:cc:25:48:7c:3d:5d:ad:b1:52:1f:e4:d9:d9:b7:
49:bc:53:ce:cf:4f:d4:4f:e4:c0:6b:36:71:a4:d7:
b7:cf:62:14:c0:fb:19:5f:0e:b1:7a:24:6d:d7:99:
13:5b:85:55:e2:5e:ca:fa:f3:fc:4f:f1:a9:6e:6a:
16:42:c6:6f:32:6d:67:b0:91:67:45:72:eb:0d:a5:
5a:72:45:d7:fd:06:21:07:88:f0:5f:11:07:5e:ea:
3c:16:fc:9b:82:84:d9:43:48:0c:a3:bc:c6:6f:3f:
f1:5b:fa:fd:92:d6:ad:87:6f:89:a0:5e:cd:5a:0c:
c7:9c:43:70:c1:96:76:e9:cf:b3:d8:78:42:a5:b7:
3c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AF:F0:02:D7:AE:62:EA:02:1E:3F:FE:E3:45:C9:88:C0:71:9D:0E
X509v3 Authority Key Identifier:
keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:12:35:0b:a3:b6:2f:43:13:3c:23:2b:f2:29:f1:22:02:ee:
e4:6a:84:dc:70:3d:f3:58:da:2b:cf:ca:25:c0:d4:3e:92:fc:
0b:f3:e8:9e:dd:90:9a:c5:39:ac:c1:42:4e:1e:d3:14:c1:27:
15:10:18:01:e3:c4:da:20:ed:79:0d:61:5d:bd:99:85:21:2d:
cc:7c:06:d1:0e:69:a2:c0:13:68:b7:a8:41:79:74:a0:7b:0e:
2d:09:01:2a:48:cc:44:f1:b4:6e:0e:b2:11:b1:71:11:bb:cf:
40:63:50:c1:13:ee:6d:84:ef:d8:e8:c2:b7:5b:df:fc:b6:b8:
ca:08:d1:58:77:35:12:3c:18:68:82:58:21:26:98:62:2e:55:
56:77:b3:59:8b:94:a3:91:7b:d1:45:fa:db:fb:16:f6:40:3f:
ef:c9:24:e7:6a:11:db:a5:c9:39:03:1f:ad:4e:90:c1:35:9f:
19:f6:72:5a:bd:07:89:53:d0:d7:e9:c4:b5:f7:22:2b:6e:9e:
24:89:47:26:6e:0a:56:7d:84:6b:06:95:60:b7:dd:b2:ab:6e:
4f:fa:93:1f:8f:7d:c5:91:56:ae:29:d4:ab:19:c9:1a:ee:52:
87:5d:51:fc:38:52:fe:55:0c:0f:6a:a1:fb:38:3b:9e:b3:3f:
be:5b:b4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:57 2026 by rpki-client