Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
File: mYkvB5PMiUvypMdIda8Iqi0dHJk.mft (raw, json)
Hash identifier: SkmfPoy4jmEckrj+i3A3nOsDPXzNtNWI3uElLIQ+szg=
Subject key identifier: 02:40:DC:A9:16:DD:A8:B8:C3:D1:90:C1:FC:D9:31:E8:9D:30:C5:C7
Authority key identifier: 99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
Certificate issuer: /CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Certificate serial: 019D39099A58893ABA81407227DE886B310D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
Manifest number: 1033
Signing time: Sun 29 Mar 2026 10:00:23 +0000
Manifest this update: Sun 29 Mar 2026 10:00:23 +0000
Manifest next update: Mon 30 Mar 2026 10:00:23 +0000
Files and hashes: 1: 8d01Xvs_aaIVSfahCINvVoz5qZs.asa (hash: hdcUHQVv+Z/OXdZkuAsmuPgKWFluiU3e3EejuVlqoak=)
2: mYkvB5PMiUvypMdIda8Iqi0dHJk.crl (hash: gtmoHEHcZsO6OlPsDeEgdyVBxa/JBMolh/qbRwugSGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:9a:58:89:3a:ba:81:40:72:27:de:88:6b:31:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Validity
Not Before: Mar 29 10:00:23 2026 GMT
Not After : Mar 30 10:00:23 2026 GMT
Subject: CN=0240dca916dda8b8c3d190c1fcd931e89d30c5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a7:97:44:7f:f2:a2:a3:ae:f0:e6:6f:12:b3:
66:8b:bc:d0:28:23:f2:f1:fd:26:d3:40:31:06:80:
4c:7a:75:b4:5b:a2:58:40:68:f5:57:e8:47:95:1f:
bf:09:32:ac:33:f2:75:0e:f9:a9:15:01:a8:af:35:
14:05:0d:2f:3b:74:b1:50:5e:8a:72:f0:c3:2d:1d:
54:dc:c7:4b:f7:4e:72:be:72:ba:4a:7a:8a:d7:20:
fa:56:d2:49:30:f9:09:1a:84:f4:a5:e6:89:2f:c3:
0c:67:ad:2c:da:5a:43:f4:23:9e:5f:bd:6e:60:b2:
a9:67:18:b1:8d:ad:18:da:52:4d:47:a0:47:a2:40:
98:ec:f9:61:72:d0:29:54:bd:9a:92:b5:12:a4:3f:
8b:fa:05:e8:51:98:e4:65:5b:63:ac:1a:b2:25:86:
5a:12:0c:89:25:2d:18:01:c0:37:4e:e4:8b:ca:03:
2e:46:6b:99:94:c8:ad:69:eb:99:58:e6:3b:a5:a3:
4b:b6:cb:82:7f:32:e6:12:10:9e:91:97:59:2f:38:
df:eb:89:3c:e0:b0:5b:41:27:fe:dd:36:01:cc:a0:
da:48:f4:6f:39:a9:84:14:72:9a:60:13:d5:a7:cc:
ed:f8:d3:ff:4a:8b:5b:e5:11:90:50:8b:b3:92:b8:
66:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:40:DC:A9:16:DD:A8:B8:C3:D1:90:C1:FC:D9:31:E8:9D:30:C5:C7
X509v3 Authority Key Identifier:
keyid:99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:dd:77:ee:da:d7:6d:52:73:60:44:84:ee:ed:b2:6e:d9:76:
fc:17:c5:21:e1:ab:fe:47:54:50:c6:1c:6f:f7:97:c0:e6:5e:
0b:43:21:c9:3c:65:b8:3c:db:82:bc:84:6f:1d:03:d4:3b:3d:
90:6d:4d:0b:4e:99:cc:e8:46:0a:cc:52:5e:ac:82:0d:d9:7e:
51:8e:55:66:0e:7f:0d:30:7e:a2:51:8c:31:ac:f4:f4:56:5a:
ba:54:a6:cf:5d:33:82:01:28:04:29:2b:66:95:cd:ee:84:13:
98:66:97:62:a6:db:3c:9e:b4:1a:f8:5b:e2:60:9b:7e:7a:6a:
6d:d0:e1:eb:76:44:05:1a:5c:8a:67:01:ad:dd:74:81:76:51:
b7:9b:04:08:62:d4:39:d0:19:44:c3:81:b8:5e:3e:22:59:47:
66:2d:3b:3f:46:8d:ab:d0:9e:ad:06:33:9f:94:82:c1:bf:63:
20:bd:5a:7b:0c:b7:ca:2d:81:16:d4:84:e8:b7:18:09:aa:96:
04:20:a3:19:b9:57:59:51:23:50:ef:7e:1b:c7:0e:d4:20:7b:
93:bd:2e:e4:50:0b:03:54:0b:c1:d2:a4:38:37:32:ab:43:46:
c3:3c:f4:ab:7e:94:b1:12:60:b6:91:e3:8a:24:97:3d:e7:8a:
f5:c1:9a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:55 2026 by rpki-client