Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
File: mYkvB5PMiUvypMdIda8Iqi0dHJk.mft (raw, json)
Hash identifier: 5xBX2HCNJN+hXzZ6lWUvHr2I2qNmW77jADLJBtwXI/I=
Subject key identifier: 05:1C:B3:CB:99:65:16:F0:D9:C4:EE:2D:62:CC:1E:AD:8C:89:74:15
Authority key identifier: 99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
Certificate issuer: /CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Certificate serial: 019F122E68626D759C37A63FFC7CA0B6C723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
Manifest number: 1128
Signing time: Mon 29 Jun 2026 07:00:59 +0000
Manifest this update: Mon 29 Jun 2026 07:00:59 +0000
Manifest next update: Tue 30 Jun 2026 07:00:59 +0000
Files and hashes: 1: 8d01Xvs_aaIVSfahCINvVoz5qZs.asa (hash: hdcUHQVv+Z/OXdZkuAsmuPgKWFluiU3e3EejuVlqoak=)
2: mYkvB5PMiUvypMdIda8Iqi0dHJk.crl (hash: KfSV2Kqj1n5+r0F2xXE90LU5sleLQzA57SpyvrkXNZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:68:62:6d:75:9c:37:a6:3f:fc:7c:a0:b6:c7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Validity
Not Before: Jun 29 07:00:59 2026 GMT
Not After : Jun 30 07:00:59 2026 GMT
Subject: CN=051cb3cb996516f0d9c4ee2d62cc1ead8c897415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:57:58:c4:b7:2b:0b:23:ce:c9:19:ad:11:
44:f4:ae:c9:de:64:1e:e3:98:cb:e7:e7:a5:40:64:
54:e6:bf:8f:97:33:3f:3a:4a:f7:17:24:59:d8:a2:
fe:fd:42:38:55:1b:79:2c:a4:a3:06:2b:f0:f9:40:
d3:44:23:9d:e4:30:6b:20:14:4e:4e:1d:90:e0:b9:
dd:92:b7:a8:58:6b:a7:59:17:de:a3:f3:cc:76:e8:
d3:de:5a:9a:be:fa:88:8b:8d:79:c2:31:5b:9c:bd:
f0:29:df:be:6c:90:ae:4c:dd:30:23:38:40:7a:28:
76:d1:66:f1:42:b5:c2:a3:fd:8e:78:58:9c:03:96:
45:25:b6:a7:bc:10:28:a0:eb:d6:aa:46:7c:29:6b:
d4:cd:d0:01:53:04:1d:bb:a2:bb:d1:75:53:bb:6d:
37:9b:24:d3:ce:89:15:41:86:b5:64:e1:7f:c5:be:
c4:de:87:72:76:e8:6d:47:0c:5f:3c:32:14:4a:28:
3d:cc:96:6a:98:d7:c4:6e:35:9b:2c:20:ef:88:6c:
5c:d3:83:d1:99:4d:24:16:f9:52:e2:5b:c5:7b:26:
3f:a6:3a:05:c6:82:12:b3:f6:ff:4e:f2:2d:64:9f:
f1:32:2f:1d:55:21:69:14:23:38:9c:52:ac:33:20:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1C:B3:CB:99:65:16:F0:D9:C4:EE:2D:62:CC:1E:AD:8C:89:74:15
X509v3 Authority Key Identifier:
keyid:99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1d:f3:75:93:17:0f:9c:94:34:43:98:72:e8:fe:3a:12:eb:
4e:2b:b5:35:02:b2:c9:5a:1f:4e:bd:2b:90:90:93:9b:5e:d6:
d1:95:01:86:67:a9:6f:cc:d6:26:29:d4:42:b5:3d:83:95:e9:
77:8e:7f:a7:b9:fe:5c:44:c5:2a:3a:cd:b3:2a:76:59:56:aa:
89:28:60:24:29:78:d4:fb:e1:dc:c6:8c:8e:43:85:42:22:e7:
45:1a:84:02:d2:15:3f:0f:39:25:e8:6a:8b:62:8a:70:91:a8:
0b:de:a8:7d:17:36:e1:88:ca:95:f6:a9:7f:98:f9:16:d7:1e:
2d:22:e5:26:5c:2b:15:dc:29:93:b8:29:51:90:57:ef:93:42:
ec:cc:be:11:fd:2c:18:e6:92:23:81:3b:5b:cc:f0:9a:04:d1:
94:f6:a4:29:bc:10:7d:2f:84:4c:7d:da:59:78:59:32:e9:07:
87:5e:d7:17:b5:38:4e:18:25:79:0c:8d:33:18:94:a9:c1:04:
45:63:d4:55:45:ae:9c:7d:4b:54:a8:af:19:5b:90:34:94:90:
bb:3f:cc:7a:00:03:1d:79:39:e8:cf:e0:c3:f8:8d:e0:49:77:
f1:55:6f:a4:f8:4b:f3:b4:ce:88:b4:2c:7f:ce:30:ae:fa:0e:
5e:a3:ad:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:40:47 2026 by rpki-client