Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
File: maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json)
Hash identifier: qKSP0+CCoph9EMCT8DPcXSbcEJrRHXofDP5g90gSbY8=
Subject key identifier: 33:A7:13:2D:8E:19:A5:7F:CA:22:83:89:65:69:4A:75:DE:08:3E:0C
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial: 019EB68DE55DB2EA7547C8716544BE64EEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
Manifest number: 106A
Signing time: Thu 11 Jun 2026 12:00:13 +0000
Manifest this update: Thu 11 Jun 2026 12:00:13 +0000
Manifest next update: Fri 12 Jun 2026 12:00:13 +0000
Files and hashes: 1: 6fDAz4UFcIjJUNJfBauQnIUtFJQ.roa (hash: 32SPWBtR5ifRYzi3R6/09Z2DiSWDuRPZa68/1wX0JGw=)
2: J1QSbtTALXp3LDlVSmUk6MBKTwk.roa (hash: S+0rrf1JmQadx56tQAp4cXgjdXzHGEHs/KEObwAzQdw=)
3: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: 3T2+CzHGFrRIx3bT76YGkDi90rTDPVVtZ+pHbeNTfNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:8d:e5:5d:b2:ea:75:47:c8:71:65:44:be:64:ee:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Validity
Not Before: Jun 11 12:00:13 2026 GMT
Not After : Jun 12 12:00:13 2026 GMT
Subject: CN=33a7132d8e19a57fca22838965694a75de083e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:27:da:06:f1:8d:27:10:2e:87:ed:74:38:
3e:75:9c:3f:fa:9d:83:1b:c1:a4:b3:bd:11:5a:a1:
b1:d4:75:a8:4f:06:d7:f2:8a:87:e1:2d:a6:96:b4:
14:da:a2:b1:d6:d3:ba:c6:65:c2:5e:fb:17:f3:44:
d4:a4:3e:11:5e:87:94:4f:08:9c:f6:06:04:d0:ca:
b4:36:1b:66:ee:25:3e:6d:95:a7:19:9b:20:af:cd:
d8:c6:ec:ac:0f:59:9d:ba:15:66:22:ae:7b:73:8b:
25:7e:a2:88:24:25:02:88:7a:21:4a:d1:af:6c:1f:
ef:a0:50:a8:7a:cb:e6:78:56:8c:98:3a:c9:e5:0c:
78:9b:cc:e1:8c:1e:0d:ce:b7:9c:8c:3f:43:22:a5:
93:83:d3:a0:91:bc:a0:61:6d:4b:b4:32:a5:bc:a8:
fb:e4:f1:74:8b:21:e0:93:73:4a:c9:48:a7:59:48:
7c:2e:d0:b7:2f:e1:b5:0c:3b:98:5f:b1:5d:4e:27:
85:4d:f8:10:09:a2:4a:7f:6b:a8:bb:c8:14:15:e7:
74:c0:50:86:05:a8:86:89:d7:68:6f:9d:76:67:90:
44:e7:54:05:7f:2c:c9:61:50:37:1a:8c:7e:bb:a9:
d6:84:19:6c:e4:5a:d1:15:21:cb:e3:ee:5d:7d:f0:
ef:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A7:13:2D:8E:19:A5:7F:CA:22:83:89:65:69:4A:75:DE:08:3E:0C
X509v3 Authority Key Identifier:
keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:05:46:71:f8:8a:73:81:58:29:bb:91:16:26:73:9f:15:4c:
be:74:12:f6:73:6d:96:84:56:98:7a:2f:f6:4b:df:fc:e9:5c:
66:2d:b2:27:00:d5:20:f5:73:c0:c3:e2:9a:94:f2:be:f6:82:
73:76:ba:e6:42:ed:69:ff:8d:89:25:a0:dc:cd:c8:4c:0d:8e:
3c:df:7c:26:ae:a0:4e:1f:ee:5c:a1:30:20:8e:12:aa:e0:fd:
1e:ba:a8:8e:a5:68:19:dc:ee:37:8b:aa:c1:5c:78:18:5a:39:
4b:73:a4:5c:36:e6:2a:0f:b6:57:97:e6:28:f8:75:18:c3:61:
71:e7:6b:44:5f:63:c4:c6:13:a2:14:64:32:f7:cc:74:4f:dc:
ac:63:6f:28:24:c8:ee:dd:13:56:08:0c:de:4d:f1:b1:9a:e1:
95:44:7b:94:4c:bb:90:c5:c3:a4:a7:95:78:83:4e:b9:25:f0:
ed:17:9a:e5:10:86:03:72:1f:cd:31:9f:1c:01:99:29:3d:49:
aa:cb:e7:e3:84:82:8f:0f:3b:15:6c:4d:32:d8:d5:73:ba:35:
84:47:ef:f5:e1:2f:ab:ec:3d:24:9e:66:4c:28:2c:36:7f:f7:
67:a7:7f:af:f1:62:c7:4e:a5:9a:f6:2a:84:a9:79:0f:e2:be:
66:6d:9f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:41:19 2026 by rpki-client