Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
File: MY2rcPRKfrixz8E3Qz_NTXigOwU.mft (raw, json)
Hash identifier: V7biV2bPTuuM/66xe4XKTNxDTGtF5ywPssY5FTu++1I=
Subject key identifier: 96:99:B0:F7:7C:A8:54:F6:29:E5:1F:F4:5A:E3:2D:3A:57:4C:78:46
Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
Certificate issuer: /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Certificate serial: 01A12C1FE8FE5691EEC4A0671D47BE9128CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
Manifest number: 059D
Signing time: Sun 11 Oct 2026 18:00:51 +0000
Manifest this update: Sun 11 Oct 2026 18:00:51 +0000
Manifest next update: Mon 12 Oct 2026 18:00:51 +0000
Files and hashes: 1: 7l-sgrIhavro2SpPOFtgONrk5QA.roa (hash: X9fi/U55KuWyLJlSIBJLR9VeaEuygBRKeTfxzhD0sdk=)
2: DdYO6EDbuF7yR9RfMqyedlbBQxc.asa (hash: hjp0IFDf+5qRTfcTPb3MLWP9dI2krI8ag1FOvrQ6wJE=)
3: MY2rcPRKfrixz8E3Qz_NTXigOwU.crl (hash: 7C+DGeCiZWZi2GSqRgKTgLt5HNn5jMT556BMLE7S+9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:1f:e8:fe:56:91:ee:c4:a0:67:1d:47:be:91:28:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Validity
Not Before: Oct 11 18:00:51 2026 GMT
Not After : Oct 12 18:00:51 2026 GMT
Subject: CN=9699b0f77ca854f629e51ff45ae32d3a574c7846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:f4:39:d9:86:0f:58:8b:ee:7d:3b:4a:2b:
d2:6c:de:2e:1b:e5:29:83:f2:42:17:f9:1e:07:af:
a5:38:7d:99:21:0b:2d:fa:46:a9:38:28:fd:62:c0:
9a:b9:bf:71:8f:68:ab:e4:40:d7:ba:2c:75:01:c4:
81:f3:96:c2:ed:4c:02:27:ba:e2:e2:b0:9a:c4:6f:
3e:db:77:b5:45:9e:59:94:fe:58:36:21:4c:73:c9:
88:10:e6:99:6b:16:a3:53:ef:9b:46:b1:8a:6a:01:
fc:91:81:15:3e:7d:11:91:ff:09:57:7f:9c:2c:46:
ea:77:3b:bb:fa:df:72:8d:d1:4a:11:a2:d0:35:44:
ef:a5:de:77:32:bf:2f:97:fd:d4:58:ae:f6:8c:67:
68:26:b9:12:3b:c5:10:22:67:84:9a:1c:c8:52:30:
e4:1d:15:9f:6b:14:c0:92:4a:01:c4:2d:04:b6:e6:
c1:8f:02:f3:8d:cf:6b:08:23:76:0d:75:1b:16:a4:
9f:18:7e:c7:03:01:0e:71:78:9f:0b:99:dd:2f:68:
10:51:36:a9:fc:02:12:7e:56:61:21:e2:d0:bc:d9:
90:46:f9:4f:04:4d:4a:3a:7e:35:c2:20:fc:5c:f4:
c6:e3:45:a4:34:ad:ab:d9:a0:52:26:f1:56:dc:c3:
8d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:99:B0:F7:7C:A8:54:F6:29:E5:1F:F4:5A:E3:2D:3A:57:4C:78:46
X509v3 Authority Key Identifier:
keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:cc:57:fa:9c:eb:0a:b8:99:5e:fd:a5:3a:6a:c2:17:11:cb:
08:aa:59:ea:e9:17:3f:24:d4:6c:24:f3:09:0b:86:dd:ba:ee:
74:25:6d:a6:f5:c7:32:c2:00:11:32:a9:ef:31:1a:97:00:4d:
49:79:04:29:d3:8c:60:9f:49:70:fe:60:04:d8:7b:52:6e:37:
4f:90:74:c0:ed:c9:66:97:47:e7:25:b5:14:54:ac:4f:e5:15:
06:3a:8e:48:13:7d:01:1b:ee:55:ef:d3:de:62:7a:d9:cf:56:
6a:70:47:6e:20:0b:ab:5d:23:a7:02:f1:94:50:b3:97:5f:82:
49:e3:1a:9b:bd:99:ad:62:5d:ad:57:7a:cd:31:f6:c8:83:70:
93:2e:72:e1:25:d9:8e:59:63:87:ac:6f:c4:bc:6a:cc:d9:c7:
26:7a:5d:3b:23:56:43:99:ec:36:dc:6a:93:70:ac:e0:a8:4c:
aa:2a:b6:51:ac:a6:17:32:bf:82:e7:ab:9b:98:be:a0:38:18:
55:af:88:6c:71:34:a5:65:af:72:e5:fa:17:62:64:1a:eb:9d:
26:38:7f:de:70:7f:14:84:0e:6a:ab:b9:90:87:24:30:1d:d0:
e3:ba:6a:61:3b:98:a2:11:1f:64:c0:87:f4:b0:58:09:2c:05:
78:66:d8:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEsH+j+VpHuxKBnHUe+kSjLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxOGRhYjcwZjQ0YTdlYjhiMWNmYzEzNzQzM2ZjZDRkNzhh
MDNiMDUwHhcNMjYxMDExMTgwMDUxWhcNMjYxMDEyMTgwMDUxWjAzMTEwLwYDVQQD
Eyg5Njk5YjBmNzdjYTg1NGY2MjllNTFmZjQ1YWUzMmQzYTU3NGM3ODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzz0OdmGD1iL7n07SivSbN4uG+Up
g/JCF/keB6+lOH2ZIQst+kapOCj9YsCaub9xj2ir5EDXuix1AcSB85bC7UwCJ7ri
4rCaxG8+23e1RZ5ZlP5YNiFMc8mIEOaZaxajU++bRrGKagH8kYEVPn0Rkf8JV3+c
LEbqdzu7+t9yjdFKEaLQNUTvpd53Mr8vl/3UWK72jGdoJrkSO8UQImeEmhzIUjDk
HRWfaxTAkkoBxC0EtubBjwLzjc9rCCN2DXUbFqSfGH7HAwEOcXifC5ndL2gQUTap
/AISflZhIeLQvNmQRvlPBE1KOn41wiD8XPTG40WkNK2r2aBSJvFW3MONtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaZsPd8qFT2KeUf9FrjLTpXTHhGMB8GA1UdIwQY
MBaAFDGNq3D0Sn64sc/BN0M/zU14oDsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVkycmNQUktmcml4ejhFM1F6X05UWGlnT3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NGY4NzQtNDQ2Yy00NjQ2LThkYjAt
ZDk5ZjY2ZWY2MDZjLzEvTVkycmNQUktmcml4ejhFM1F6X05UWGlnT3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NGY4NzQtNDQ2Yy00NjQ2LThkYjAtZDk5ZjY2ZWY2MDZj
LzEvTVkycmNQUktmcml4ejhFM1F6X05UWGlnT3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMxX+pzr
CriZXv2lOmrCFxHLCKpZ6ukXPyTUbCTzCQuG3brudCVtpvXHMsIAETKp7zEalwBN
SXkEKdOMYJ9JcP5gBNh7Um43T5B0wO3JZpdH5yW1FFSsT+UVBjqOSBN9ARvuVe/T
3mJ62c9WanBHbiALq10jpwLxlFCzl1+CSeMam72ZrWJdrVd6zTH2yINwky5y4SXZ
jlljh6xvxLxqzNnHJnpdOyNWQ5nsNtxqk3Cs4KhMqiq2UaymFzK/guerm5i+oDgY
Va+IbHE0pWWvcuX6F2JkGuudJjh/3nB/FIQOaqu5kIckMB3Q47pqYTuYohEfZMCH
9LBYCSwFeGbYVA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 02:26:56 2026 by rpki-client