Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
File: MY2rcPRKfrixz8E3Qz_NTXigOwU.mft (raw, json)
Hash identifier: RCRHFy5SAG/KBD91zQpQD5f0UYjIoO9qdCxjPCembEc=
Subject key identifier: 44:57:33:D8:1D:A0:5D:D7:7C:C8:E0:15:5B:AA:C7:B5:6E:CD:C3:94
Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
Certificate issuer: /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Certificate serial: 019D386603E42373DC0520BF2E8C401F2261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
Manifest number: 038F
Signing time: Sun 29 Mar 2026 07:01:42 +0000
Manifest this update: Sun 29 Mar 2026 07:01:42 +0000
Manifest next update: Mon 30 Mar 2026 07:01:42 +0000
Files and hashes: 1: 0E0G_V7Qww5gf7roh6v7vgAuxXI.roa (hash: /cBoP5h3k8tG8K+/XM4vhzPv5C3M0myfV5uPfAajNmA=)
2: HJdicrhK0X58hHeVpTRveQPzgSA.asa (hash: GnsE5zVVUGgOlqc4oqkgxYqYyAJUdLN6bxMsAfebi24=)
3: MY2rcPRKfrixz8E3Qz_NTXigOwU.crl (hash: wB0Nl0Xtq5i27vgOJf4ZZFi5Zh95E1bRpvLQeTRb+U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:03:e4:23:73:dc:05:20:bf:2e:8c:40:1f:22:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Validity
Not Before: Mar 29 07:01:42 2026 GMT
Not After : Mar 30 07:01:42 2026 GMT
Subject: CN=445733d81da05dd77cc8e0155baac7b56ecdc394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7f:23:59:c7:e9:29:1c:fa:72:45:d3:11:5c:
b2:d1:85:61:f8:b6:31:c6:f5:0e:a2:1e:b2:43:f2:
f2:2b:17:16:fb:50:91:8b:a1:52:73:e2:26:62:c4:
42:7b:c3:65:01:ef:4f:40:2d:0b:45:77:19:e5:e8:
87:27:5f:46:c4:3a:d0:2d:e2:82:18:a1:89:29:86:
aa:65:bf:55:57:76:8c:d9:ef:38:e2:63:90:7e:39:
34:6e:e3:73:4b:9a:ed:d0:96:8e:88:c2:af:0b:7f:
a5:01:0b:44:d7:43:fa:86:47:90:f8:2e:d0:63:df:
5c:17:f3:86:90:d0:f9:e4:49:5b:ee:10:b3:2a:13:
26:31:81:01:1a:69:ba:7d:51:57:d6:d4:45:25:68:
89:dc:e0:76:40:2b:96:b5:80:1f:f8:57:8d:79:49:
12:d8:58:d9:9f:03:32:d6:e5:2f:f5:bf:24:39:34:
fd:20:b8:a3:d7:aa:ba:0e:0c:04:15:ea:4a:f5:dc:
71:d6:15:fd:ac:41:83:34:0d:f4:f8:cc:27:18:dc:
33:70:1a:0c:c0:37:2b:41:8a:5a:84:65:44:e1:c0:
e5:ba:c5:13:94:fa:85:40:14:c0:8d:68:5d:3d:b1:
d1:40:cd:6e:cb:fe:6b:fa:56:fd:54:71:0a:70:5b:
aa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:57:33:D8:1D:A0:5D:D7:7C:C8:E0:15:5B:AA:C7:B5:6E:CD:C3:94
X509v3 Authority Key Identifier:
keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5d:b2:1a:2f:21:91:52:49:c8:98:38:39:db:58:c2:60:83:
b3:32:5d:fc:98:9d:ea:3e:26:1e:59:2c:49:05:b6:22:3f:ef:
0c:18:45:db:5d:45:5a:9a:94:96:07:0f:d4:06:4c:66:74:76:
d8:0e:74:2f:23:a7:b4:de:cc:cf:0b:37:2f:a7:c5:37:7d:21:
4d:05:d9:df:aa:a0:56:fc:91:9e:3c:48:80:61:4f:88:d4:9c:
7d:ab:8b:fe:e2:7c:c6:f6:97:57:a5:cd:83:f1:41:98:21:88:
c6:18:8e:37:24:fe:72:20:92:86:e0:22:6a:e9:b1:5c:f6:67:
6e:36:f8:c3:a7:64:8b:6a:f5:78:3f:2c:f8:ed:7b:da:34:20:
bf:48:d6:ea:63:5a:65:46:5d:1a:cc:8d:38:8e:49:10:56:bb:
71:8b:d0:fe:48:bf:f6:4d:17:ce:6f:28:2e:ef:f4:98:78:a2:
6b:bf:17:68:5e:d3:a3:b4:68:c4:be:75:fc:f3:5b:32:c8:17:
af:2b:31:2d:a3:bd:a2:5c:64:08:e9:30:2c:c3:89:91:3b:c5:
f6:c8:8b:97:0d:99:4f:4d:be:03:37:13:9b:d9:b2:c2:b0:96:
d6:91:8d:c1:22:d0:ac:e4:d6:f5:38:fb:11:88:70:8e:55:eb:
13:a5:76:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:26 2026 by rpki-client