Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
File: maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json)
Hash identifier: OfxW16acQurlmoTFvqEZFJkikQPqQoLX9YGLxVN4e/U=
Subject key identifier: 4A:43:87:A2:5B:5C:BA:FC:1A:5D:FF:5C:CB:A9:5F:30:33:93:05:3A
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial: 019EB49F841B53E6324BC57ED2B5A4FDC65D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
Manifest number: 1069
Signing time: Thu 11 Jun 2026 03:00:13 +0000
Manifest this update: Thu 11 Jun 2026 03:00:13 +0000
Manifest next update: Fri 12 Jun 2026 03:00:13 +0000
Files and hashes: 1: 6fDAz4UFcIjJUNJfBauQnIUtFJQ.roa (hash: 32SPWBtR5ifRYzi3R6/09Z2DiSWDuRPZa68/1wX0JGw=)
2: J1QSbtTALXp3LDlVSmUk6MBKTwk.roa (hash: S+0rrf1JmQadx56tQAp4cXgjdXzHGEHs/KEObwAzQdw=)
3: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: B/pd9nhbLJUwycoCSg0bhbGtWoQBDkcXesuO0Ef+dFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 03:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b4:9f:84:1b:53:e6:32:4b:c5:7e:d2:b5:a4:fd:c6:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Validity
Not Before: Jun 11 03:00:13 2026 GMT
Not After : Jun 12 03:00:13 2026 GMT
Subject: CN=4a4387a25b5cbafc1a5dff5ccba95f303393053a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:e1:e0:f3:84:e7:d6:cd:63:26:ad:67:78:
cf:3e:2c:9c:29:88:f1:c1:65:0b:ad:04:bd:22:12:
dd:30:85:b4:e0:5d:b5:fa:a4:05:90:30:a1:f5:f5:
f8:30:06:79:b4:41:07:b4:d3:d7:f5:b7:39:5a:f8:
62:a7:85:a6:44:7f:53:7d:b3:9e:3c:24:ac:79:51:
76:b0:7c:a1:16:92:ba:96:62:6e:f4:67:0b:ae:42:
4c:d2:21:bd:ae:79:7f:e2:47:ce:c9:fe:ca:b5:c4:
74:7f:82:3c:61:d4:c2:40:61:34:9f:31:3e:7c:ca:
20:14:40:1c:69:b5:35:c5:f9:92:7a:57:df:57:00:
c2:fe:10:fe:c4:37:65:8b:65:d6:bc:fc:3f:7b:2b:
f0:7a:69:91:c1:3d:2f:6d:16:b7:a0:ed:61:40:4b:
b9:3a:b6:4c:0b:83:89:86:d8:bb:6c:68:a1:09:63:
fe:83:ca:a3:c9:84:6c:53:ba:b9:df:13:b2:33:55:
45:ee:35:34:80:be:e5:c7:2d:90:d7:35:29:2e:9e:
82:d6:6f:97:2f:ac:9e:0b:05:1e:2f:1e:b6:96:0a:
58:dc:41:9e:78:d3:c1:5c:ea:38:8c:d7:af:e7:31:
10:ec:b8:61:c1:a5:95:f4:08:4a:0b:a3:e1:6b:dc:
ac:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:43:87:A2:5B:5C:BA:FC:1A:5D:FF:5C:CB:A9:5F:30:33:93:05:3A
X509v3 Authority Key Identifier:
keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a8:79:d9:ea:bb:46:0c:2f:a2:ee:8a:0d:ed:0d:ee:99:82:
a4:66:74:d1:e5:90:79:7e:5e:9b:72:1e:0b:4d:1d:1c:a9:2a:
a5:62:c8:7b:6d:86:e2:1e:a6:75:28:24:08:0c:8c:15:a2:78:
f0:46:7f:ba:77:5a:a6:f1:a1:29:41:d2:35:76:d3:ae:bc:c8:
89:4f:d1:b0:c0:25:d4:15:c5:b9:32:a5:47:0e:16:8b:8c:f1:
e3:35:a5:7b:7a:fa:10:41:54:e7:5f:c9:84:1f:db:d9:82:96:
22:df:ae:20:68:47:9c:b9:ab:d4:70:cf:9a:08:06:23:e6:53:
a9:62:04:1d:19:58:cb:66:b7:fa:96:07:38:94:60:7b:7d:f5:
6d:4f:68:74:47:f7:51:be:01:b1:a9:57:1c:a9:3e:ba:5a:fa:
13:db:1b:f1:90:b4:50:7d:d0:aa:f8:76:67:9f:b9:28:c6:d7:
7f:83:70:8a:d2:20:f5:2c:3d:ca:5c:42:b2:0c:21:ab:64:09:
a5:f5:60:bb:ae:e9:5c:12:fc:ea:6c:31:dc:26:be:4f:94:b6:
3d:06:ae:44:03:a8:56:08:c9:f8:c9:07:fd:9c:36:07:eb:27:
ec:55:49:22:38:fc:11:5c:03:0e:46:93:c7:8d:54:60:f9:4e:
fe:3d:95:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:33:04 2026 by rpki-client