Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
File: MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft (raw, json)
Hash identifier: kTQWzd/LZh5YwzKq30gOUEZ/fC2KBMiZtRy88cppvV0=
Subject key identifier: BE:20:22:BD:38:A8:08:3A:AC:0D:AE:33:3D:A7:81:A9:77:B0:20:C7
Authority key identifier: 33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
Certificate issuer: /CN=332293d0399160788b31e438760dc3bd1ed882eb
Certificate serial: 019D3752C24F8F5B3656AE4A0BFB718C57D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
Manifest number: 06E3
Signing time: Sun 29 Mar 2026 02:01:03 +0000
Manifest this update: Sun 29 Mar 2026 02:01:03 +0000
Manifest next update: Mon 30 Mar 2026 02:01:03 +0000
Files and hashes: 1: MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl (hash: 6KYQf2rfmcyN/4PvhLdzlz61i9PL/fNaFRC9sHdYBrA=)
2: oc9NNjLJP5bHNwRtvggK5853u0I.roa (hash: QEJX9V+tmmHO1oVM4U0QVK2GYXHC+jd9Iu69/qnNN24=)
3: smnidOYe69oO55xZTobcKWGygYI.roa (hash: q2tFDWQKOHaPKe1BkVdfE8mFZF9krJjfYfAHh+hfLLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:c2:4f:8f:5b:36:56:ae:4a:0b:fb:71:8c:57:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=332293d0399160788b31e438760dc3bd1ed882eb
Validity
Not Before: Mar 29 02:01:03 2026 GMT
Not After : Mar 30 02:01:03 2026 GMT
Subject: CN=be2022bd38a8083aac0dae333da781a977b020c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:ad:fe:98:ad:df:10:1a:57:cd:d3:92:cd:
66:45:fa:13:86:4d:93:d4:d5:1d:b2:24:db:61:2d:
50:ec:89:f6:61:88:15:52:05:ed:62:aa:7e:da:86:
b1:e5:24:10:a2:95:98:bb:18:07:36:8b:5d:88:8d:
06:bc:05:de:59:29:8e:91:0f:02:4b:32:1b:72:a8:
ab:ef:8b:ff:f6:74:95:5a:be:a4:df:f5:0e:d6:64:
a5:ca:17:d9:b2:2c:50:d7:be:50:41:ed:a2:fd:ac:
57:47:04:57:38:a3:88:c4:58:ec:cf:b2:18:36:f5:
45:35:e5:d9:bc:83:3f:a6:e0:70:c9:9b:38:6a:fc:
c9:6b:7c:f3:9d:a3:b7:5a:44:b9:10:aa:b5:09:e7:
ff:47:97:6a:b0:7f:03:d3:e9:9b:7f:00:e5:7c:b7:
07:50:5a:85:71:16:45:8e:60:ef:3b:84:1f:2d:a5:
69:24:28:67:b9:c3:ed:3f:55:7f:04:95:91:76:ca:
5c:35:fa:04:62:56:87:80:7e:a6:d1:e8:5e:cd:f6:
93:e1:f5:a9:08:72:43:08:7c:fa:4b:c9:9c:1f:e0:
08:59:53:9c:3f:dc:2d:6f:62:30:6d:3a:41:3a:04:
8c:99:b7:ce:b4:06:2e:50:10:83:4b:4e:a8:18:68:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:20:22:BD:38:A8:08:3A:AC:0D:AE:33:3D:A7:81:A9:77:B0:20:C7
X509v3 Authority Key Identifier:
keyid:33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7c:a6:5b:da:90:19:31:5a:41:0a:6c:86:c6:b3:88:07:66:
a6:47:85:db:89:61:2d:72:e0:40:6a:4e:06:9b:f1:b4:64:e9:
bf:4c:fc:e5:0e:3e:dd:54:4b:a1:df:60:b8:91:db:70:95:59:
23:02:dd:97:f1:8e:c5:74:27:4d:bb:89:b0:27:7a:dd:c1:b4:
d2:d6:7b:cd:91:b8:dc:1c:70:d0:ed:cb:56:f1:62:d1:02:fa:
03:da:86:5e:d6:43:d6:22:9a:2a:46:88:e3:3c:b1:9a:56:63:
02:0d:75:fb:3d:05:c8:af:6f:02:10:13:c6:3c:9e:ad:16:b1:
6b:4e:b5:62:0e:53:26:87:8a:a7:8f:0e:ce:7b:37:c2:8d:ed:
d7:0c:b5:28:39:de:b4:d5:85:90:d7:f8:70:1e:12:86:1a:2b:
e4:bc:32:65:ed:d3:bb:4b:b8:49:3c:3b:71:91:7f:5b:d3:16:
5b:33:c1:c3:3f:20:99:f8:b4:2e:62:ba:e7:6a:03:21:b1:5b:
3a:c1:57:2c:02:68:9d:18:02:51:27:94:c9:bf:c2:ee:a7:27:
30:f4:c4:43:2b:7c:ff:ce:b6:b7:0c:1e:30:f6:5d:ed:1d:f6:
5d:ff:2f:7f:97:07:fd:28:7f:62:6c:eb:ad:a3:e5:93:67:9d:
19:49:f1:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UsJPj1s2Vq5KC/txjFfXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMjI5M2QwMzk5MTYwNzg4YjMxZTQzODc2MGRjM2JkMWVk
ODgyZWIwHhcNMjYwMzI5MDIwMTAzWhcNMjYwMzMwMDIwMTAzWjAzMTEwLwYDVQQD
EyhiZTIwMjJiZDM4YTgwODNhYWMwZGFlMzMzZGE3ODFhOTc3YjAyMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUOt/pit3xAaV83Tks1mRfoThk2T
1NUdsiTbYS1Q7In2YYgVUgXtYqp+2oax5SQQopWYuxgHNotdiI0GvAXeWSmOkQ8C
SzIbcqir74v/9nSVWr6k3/UO1mSlyhfZsixQ175QQe2i/axXRwRXOKOIxFjsz7IY
NvVFNeXZvIM/puBwyZs4avzJa3zznaO3WkS5EKq1Cef/R5dqsH8D0+mbfwDlfLcH
UFqFcRZFjmDvO4QfLaVpJChnucPtP1V/BJWRdspcNfoEYlaHgH6m0ehezfaT4fWp
CHJDCHz6S8mcH+AIWVOcP9wtb2IwbTpBOgSMmbfOtAYuUBCDS06oGGi45QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4gIr04qAg6rA2uMz2ngal3sCDHMB8GA1UdIwQY
MBaAFDMik9A5kWB4izHkOHYNw70e2ILrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXlLVDBEbVJZSGlMTWVRNGRnM0R2UjdZZ3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jOGIxZTUtN2I5NS00Y2E3LWIyYmEt
MjIyZmUzNDgyNjhhLzEvTXlLVDBEbVJZSGlMTWVRNGRnM0R2UjdZZ3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9jOGIxZTUtN2I5NS00Y2E3LWIyYmEtMjIyZmUzNDgyNjhh
LzEvTXlLVDBEbVJZSGlMTWVRNGRnM0R2UjdZZ3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHymW9qQ
GTFaQQpshsaziAdmpkeF24lhLXLgQGpOBpvxtGTpv0z85Q4+3VRLod9guJHbcJVZ
IwLdl/GOxXQnTbuJsCd63cG00tZ7zZG43Bxw0O3LVvFi0QL6A9qGXtZD1iKaKkaI
4zyxmlZjAg11+z0FyK9vAhATxjyerRaxa061Yg5TJoeKp48Ozns3wo3t1wy1KDne
tNWFkNf4cB4Shhor5LwyZe3Tu0u4STw7cZF/W9MWWzPBwz8gmfi0LmK652oDIbFb
OsFXLAJonRgCUSeUyb/C7qcnMPTEQyt8/862twweMPZd7R32Xf8vf5cH/Sh/Ymzr
raPlk2edGUnxJw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:06 2026 by rpki-client