Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
File: MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft (raw, json)
Hash identifier: ZZBShawtZ4tuultmeIk6xOxL2AG/BEINr5tcLDnOCnI=
Subject key identifier: B4:C1:B7:1A:C1:60:BA:F5:05:AC:A8:A9:AE:D0:8B:2F:D7:E3:88:B8
Authority key identifier: 31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59
Certificate issuer: /CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59
Certificate serial: 01A1765E26CAB66B9593D1402EDFAD83BC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
Manifest number: 0D16
Signing time: Mon 26 Oct 2026 04:00:44 +0000
Manifest this update: Mon 26 Oct 2026 04:00:44 +0000
Manifest next update: Tue 27 Oct 2026 04:00:44 +0000
Files and hashes: 1: MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl (hash: BbwK9bYpvVWzdFtVhpyWuiRUOX+4lF28KbwWksyR3+8=)
2: dg_wP3exQr99siZMe2HJIj5cuEE.roa (hash: 6QFunw3gR5dCtdoUx0ipbh76Y60LWX9z3LOMdv6vVro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:5e:26:ca:b6:6b:95:93:d1:40:2e:df:ad:83:bc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59
Validity
Not Before: Oct 26 04:00:44 2026 GMT
Not After : Oct 27 04:00:44 2026 GMT
Subject: CN=b4c1b71ac160baf505aca8a9aed08b2fd7e388b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:24:cb:6b:37:ed:37:c4:5b:a3:7b:7f:48:
67:e6:08:61:fc:d3:7c:9f:0b:80:e5:00:f1:a5:66:
a1:9a:e5:0c:e7:29:23:0d:18:30:1c:39:71:ab:c3:
8c:69:a0:e2:41:9e:30:9b:f0:7a:bb:c1:92:37:fa:
d3:4d:21:e5:fb:35:d1:e9:0f:83:52:b2:98:f1:d1:
67:57:e4:8c:d2:fd:94:5c:d1:79:ca:79:3e:58:bb:
14:c0:c8:bd:f8:2e:ac:3f:5a:70:ab:cc:d1:12:0f:
88:99:a0:6d:fc:b4:98:2b:08:f4:57:93:4f:2f:ae:
04:df:fd:7f:73:24:31:8d:1e:7c:05:fc:3d:b7:91:
d0:62:a3:e6:f0:ef:3e:d3:cf:71:85:d2:96:c8:3d:
33:c5:17:88:92:35:92:47:0a:b8:bf:76:7b:2b:41:
60:54:c5:eb:98:2a:7d:cc:be:9e:04:ee:34:ea:27:
a5:80:48:22:33:7f:90:a7:8e:f9:e2:ff:51:1e:fa:
f6:45:8f:77:89:7a:98:34:fe:4e:16:04:53:d7:b1:
67:94:b2:85:51:83:31:39:cc:61:a8:01:01:4f:bf:
76:7b:c6:d1:74:93:a9:e8:4e:fd:78:af:00:23:35:
11:84:cd:9f:0a:ed:b8:2d:d9:14:d6:ac:62:f0:df:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C1:B7:1A:C1:60:BA:F5:05:AC:A8:A9:AE:D0:8B:2F:D7:E3:88:B8
X509v3 Authority Key Identifier:
keyid:31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:27:1e:62:f8:32:e6:5c:c2:9e:13:e1:83:a5:db:a2:a1:af:
00:aa:bb:22:5b:7f:9e:4b:29:77:33:e8:78:dd:73:0e:9c:d0:
87:b0:b3:e6:5a:5c:4b:2b:d1:46:be:42:c1:c6:85:a0:ca:5c:
e0:a4:59:e7:f2:64:fa:44:04:c2:a8:bc:c0:24:9d:8b:4c:b8:
86:8e:2c:b7:5a:9b:82:88:ca:1c:22:22:6e:78:9c:e1:9d:3b:
e1:d0:52:28:47:be:54:49:5c:84:c8:f5:74:e0:7b:d8:9b:47:
1e:c4:b1:a2:e8:a0:5a:4a:ab:b8:46:3a:71:2c:27:ce:d8:89:
4a:27:2b:cc:76:be:38:6f:6c:c6:e3:48:81:c0:59:de:54:62:
50:bf:32:4c:5e:a6:0a:bd:fa:b9:f4:9a:63:7a:f3:ae:32:b3:
0a:a1:20:bd:dd:cf:04:0c:c8:d7:42:62:1c:cb:8e:f6:51:eb:
dc:dc:8c:a6:24:37:1f:3d:ad:c0:2c:3c:dd:61:9f:2a:30:21:
ac:e9:a1:d7:2c:3d:59:f1:fe:b5:7a:20:52:35:2b:27:e7:e2:
a1:cb:ef:02:c6:dc:52:3b:3f:f6:99:ed:ae:95:86:a1:8b:71:
e1:03:f2:dc:e6:4a:74:fb:31:ba:0b:ba:60:fb:11:e0:6a:75:
52:05:7f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:29:26 2026 by rpki-client