Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
File: maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json)
Hash identifier: v6UnTsiZD+IeB/+aRLg1MSsEYOfOtvonDsjTUW1OqMQ=
Subject key identifier: 35:72:51:E6:A3:75:51:28:5B:2C:1D:C2:F5:AB:5B:06:EB:B5:37:49
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial: 01A1795F0C28C4D7E3ECE7E9173421B26A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
Manifest number: 11D8
Signing time: Mon 26 Oct 2026 18:00:34 +0000
Manifest this update: Mon 26 Oct 2026 18:00:34 +0000
Manifest next update: Tue 27 Oct 2026 18:00:34 +0000
Files and hashes: 1: 6fDAz4UFcIjJUNJfBauQnIUtFJQ.roa (hash: 32SPWBtR5ifRYzi3R6/09Z2DiSWDuRPZa68/1wX0JGw=)
2: J1QSbtTALXp3LDlVSmUk6MBKTwk.roa (hash: S+0rrf1JmQadx56tQAp4cXgjdXzHGEHs/KEObwAzQdw=)
3: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: r3NNbxQBNByAOfwrRdcr3rGW3AlVYOl9gLN3BZ47ass=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:5f:0c:28:c4:d7:e3:ec:e7:e9:17:34:21:b2:6a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Validity
Not Before: Oct 26 18:00:34 2026 GMT
Not After : Oct 27 18:00:34 2026 GMT
Subject: CN=357251e6a37551285b2c1dc2f5ab5b06ebb53749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:13:49:5a:48:9a:47:b8:f6:30:41:aa:9f:be:
74:b7:3e:d3:1c:8c:59:21:4e:fe:7d:1d:82:82:33:
c4:53:ea:e8:92:ef:db:9b:0f:c0:53:8c:4e:ec:35:
38:85:11:cc:e6:80:d5:ea:2f:ce:a8:c1:b0:8e:c9:
52:de:f7:73:5f:b3:77:73:e0:57:b2:31:0f:0f:f5:
e5:73:c7:dd:35:5e:d1:47:85:dd:21:35:ef:4b:b6:
92:a6:21:b1:69:18:92:3b:76:82:ce:3f:fe:fa:50:
b5:fb:b5:1f:cb:55:ac:cb:09:3f:f9:2b:99:4d:a7:
44:31:3e:75:a7:bf:cb:df:60:85:72:03:a3:88:a7:
e0:d7:fd:8d:83:14:66:6b:23:d8:9b:35:11:ce:4a:
c4:83:5e:8c:af:c6:c2:45:ea:73:3e:e4:56:fd:86:
89:84:c1:51:f1:ae:52:f0:bc:b8:cb:ef:c8:ec:20:
08:a4:48:e9:74:c1:dc:6a:ca:2f:c0:52:d0:88:3a:
93:a5:7a:15:8b:60:1f:a0:79:5d:d8:98:c9:3f:33:
29:73:e8:d8:86:55:8f:79:c4:d3:5a:94:ca:6e:81:
d6:85:17:9c:d6:76:78:f9:09:99:49:8b:2f:8c:6f:
c5:b5:a3:02:fb:1e:5b:46:25:69:c6:4e:c7:61:3b:
fa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:72:51:E6:A3:75:51:28:5B:2C:1D:C2:F5:AB:5B:06:EB:B5:37:49
X509v3 Authority Key Identifier:
keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b6:45:ab:e6:11:8f:f4:3e:ed:6e:31:e9:ee:52:5b:9b:0e:
de:41:a4:24:4a:91:63:e9:2c:62:bd:a8:51:e7:fd:d7:78:cb:
ac:fe:aa:d2:b6:9d:9d:0a:c0:19:63:41:e7:7c:f5:97:4b:e6:
05:c4:ab:8f:90:a8:89:4b:1f:75:d8:5d:85:53:7f:5c:fb:21:
98:ab:d3:49:6c:3c:03:de:43:a7:0a:94:0d:b6:63:06:21:78:
63:06:ca:87:9a:a8:5e:6c:fd:8d:a2:2c:50:6d:0f:ec:ed:d2:
1d:58:63:67:e5:a6:68:c2:25:22:ac:93:f3:ef:be:03:38:a5:
b0:a9:c5:cb:af:d2:52:03:be:11:1e:fe:fe:be:3b:2d:b9:52:
3b:39:a5:a6:7f:62:8f:51:4a:e7:56:06:cc:d8:4b:e0:98:ee:
6c:83:d0:9f:01:f6:ce:90:3d:c2:2b:34:34:ea:14:18:9b:74:
f3:b9:93:03:5e:01:db:ba:e2:d6:66:fe:76:d1:c7:fd:95:cd:
07:5c:2f:2a:22:a6:8e:1b:c8:cc:7d:82:21:e7:16:fb:07:bd:
df:fb:0f:92:7d:68:10:4a:a9:94:7e:a2:dc:12:d2:a1:e2:40:
fd:6d:04:0b:8d:f0:77:47:d6:c7:4a:9d:f0:76:b4:5d:c8:ed:
f1:99:94:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:46:28 2026 by rpki-client