Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
File: mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json)
Hash identifier: WPXtaHfeEL/nyOuuGhVMGkuFffA/v4qdCrempDdEI2U=
Subject key identifier: 3B:C4:D2:E1:CB:1B:CE:B9:19:9F:C9:C4:04:CF:07:2A:E9:AF:74:2A
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 019FA0E0211DE252134E37DFCE54B8505109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
Manifest number: 19D4
Signing time: Mon 27 Jul 2026 00:01:10 +0000
Manifest this update: Mon 27 Jul 2026 00:01:10 +0000
Manifest next update: Tue 28 Jul 2026 00:01:10 +0000
Files and hashes: 1: 1-M17FsedROaF_Kne-5Hqf60_ZF0.roa (hash: dEdEroRDmqUptgIx5X9EfWXuPhIB2SKqFgAL57TKHAs=)
2: WMPpPZf121FGb5nB2wRyHO8v-RI.asa (hash: mKLFbSlwYIzmMfnFA89CJdrlniFC0Y+HVLJcXPAW800=)
3: iOPKRCMcUAyvxDbxa94mSh4aVLQ.roa (hash: 853t8WhJ4kw5HbkYp7EUF9CdroSNYLBypKw+/lvJndw=)
4: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: j1fSGb5Rt0lKCI1IWWe8ndJksEIalLLUy0Deqprf5YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:21:1d:e2:52:13:4e:37:df:ce:54:b8:50:51:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Jul 27 00:01:10 2026 GMT
Not After : Jul 28 00:01:10 2026 GMT
Subject: CN=3bc4d2e1cb1bceb9199fc9c404cf072ae9af742a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a9:ce:b6:61:4e:2c:02:06:ab:34:e3:a8:e8:
c6:6b:5e:10:09:34:8e:aa:8d:32:99:a3:47:31:55:
62:9b:02:cc:73:6a:57:11:45:1f:b3:bd:a6:6d:39:
70:da:a7:59:61:e1:99:3c:73:41:71:77:9c:ce:e3:
a1:4a:0b:6c:49:8e:4d:7a:c6:72:3f:d9:96:0f:75:
4d:0c:18:e6:61:43:7c:54:c9:52:21:c6:6c:60:8c:
9f:7b:e5:b0:72:0f:c4:70:5f:3e:14:c2:a4:46:25:
ca:2e:7a:72:cd:bb:df:3c:32:c7:bb:da:f6:50:9c:
1d:a9:5d:d7:9f:86:05:6e:18:73:8a:49:fe:8f:37:
1b:62:22:70:1b:f8:54:cd:2f:f7:6b:1b:18:e0:4c:
84:d9:94:ea:50:c0:b8:a7:d7:a3:25:55:53:57:1d:
5b:5f:9d:81:4d:8a:1e:a1:fd:98:d2:94:6f:22:a5:
dd:12:4a:2e:ad:8f:f2:03:2e:56:4a:f5:d5:c2:c0:
8d:56:c4:17:03:46:7d:72:ad:f1:62:62:f9:f5:81:
ea:80:84:5e:64:45:1a:03:63:5d:cf:a0:ec:f2:72:
fb:84:a8:fc:8d:60:08:d1:95:30:33:9c:7d:00:b2:
3c:60:ba:70:f0:ed:5a:76:52:19:c5:a4:0f:3d:e9:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C4:D2:E1:CB:1B:CE:B9:19:9F:C9:C4:04:CF:07:2A:E9:AF:74:2A
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3e:be:da:62:b5:92:ff:e6:eb:1b:de:5d:ad:21:f6:26:14:
94:f8:42:99:8b:ef:b2:05:14:f1:9a:66:6c:04:f7:6d:db:94:
03:9f:d6:64:98:92:b5:6c:24:8f:38:95:8d:7a:14:d7:dc:98:
94:01:b8:aa:72:5b:e6:d0:13:90:cf:3a:d7:f6:9c:ed:c1:af:
ae:3a:6f:52:4b:f6:fc:b0:77:12:ae:9c:66:28:63:54:11:62:
5c:da:29:df:d2:7f:89:22:a6:c6:0b:c2:d5:44:22:36:6e:34:
16:bc:d3:e9:52:59:58:1e:a1:fc:68:3a:c2:54:1a:06:ad:fa:
3a:14:d3:50:ec:39:c8:3d:74:df:7e:b2:63:9a:70:ac:9b:60:
75:90:36:96:b2:d8:2e:aa:47:59:d2:ca:b0:73:8c:9e:0f:00:
74:6b:d9:29:14:00:0a:81:9a:57:a1:89:25:f1:a1:67:50:75:
07:fa:35:81:ef:3c:4d:26:6b:4f:f6:81:f9:6f:1c:5a:a2:60:
d2:82:eb:be:b7:5f:89:e8:3e:69:5b:f4:73:eb:69:93:93:67:
d6:41:e4:d1:1a:fe:04:ca:a5:45:c8:b8:c4:03:0e:db:67:f2:
96:22:d6:5f:12:30:14:2c:39:04:e5:54:21:27:9c:bc:fc:9b:
dd:84:40:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:40:08 2026 by rpki-client