Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
File: mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json)
Hash identifier: 2gdT14L2C9coR7yY8REQnbXqsKcW5aT4MY1jYE+XX0A=
Subject key identifier: DF:C3:F8:97:79:50:17:4C:DE:DC:54:F8:35:A8:A1:B4:EB:9D:92:00
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial: 019DCF3E063483AF29831BF1C8BA29E1AE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
Manifest number: 0346
Signing time: Mon 27 Apr 2026 14:00:41 +0000
Manifest this update: Mon 27 Apr 2026 14:00:41 +0000
Manifest next update: Tue 28 Apr 2026 14:00:41 +0000
Files and hashes: 1: 7iabnlFmeCBBjsLFJN99I8--_-4.roa (hash: XEo4P0carZV4gE6HMO4BcJUELgS7un1lJ1bRLna274A=)
2: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: zbredlYxzmd87vCFg0TXEzYhtpIkRmx1jNwUBGwLQks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:06:34:83:af:29:83:1b:f1:c8:ba:29:e1:ae:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Validity
Not Before: Apr 27 14:00:41 2026 GMT
Not After : Apr 28 14:00:41 2026 GMT
Subject: CN=dfc3f8977950174cdedc54f835a8a1b4eb9d9200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:fa:0c:25:dd:c8:48:a2:4d:c4:2c:f8:63:
45:7e:2b:d9:67:e0:47:8a:c8:aa:05:4d:5f:07:52:
69:e3:ab:b5:f6:25:e8:8a:36:85:19:96:a7:a1:b8:
6d:9d:12:67:af:e9:14:fe:9e:f5:96:d1:2f:f8:4c:
90:4b:b5:8f:6c:83:7b:53:a4:c5:b9:07:65:bb:fd:
68:3a:08:ad:b2:11:15:98:7c:58:ed:c8:3a:b1:4b:
6b:f3:1c:b8:af:15:70:b2:6b:e6:89:fe:ed:9e:4c:
22:54:ae:8d:09:53:76:6f:fe:b7:64:e4:de:1d:61:
e0:b1:4b:cc:fd:f2:2a:8d:64:f9:09:df:3f:32:47:
8d:cf:8b:71:83:40:af:c5:00:c1:68:50:94:7e:04:
04:6b:36:cd:72:95:8a:e7:3e:ba:92:e9:ff:3c:cc:
57:94:05:9a:fc:19:5e:19:c2:c6:79:06:ea:f4:76:
dd:a6:1b:c0:2c:08:78:9e:cc:12:92:88:98:1f:0f:
2b:c8:19:1c:2e:dd:6e:cf:10:81:42:35:a2:1c:09:
f9:76:26:f2:b2:e6:50:7f:11:bd:0e:d4:fd:13:d2:
b2:f2:0f:fb:8a:e6:5d:ac:52:c0:2d:5d:f7:be:82:
54:9f:72:be:54:5c:f8:ae:d6:a4:c9:f9:1b:97:c3:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C3:F8:97:79:50:17:4C:DE:DC:54:F8:35:A8:A1:B4:EB:9D:92:00
X509v3 Authority Key Identifier:
keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:04:6a:b4:b1:a8:f7:6b:6f:67:ca:0a:29:5b:8a:8d:a8:22:
fe:c7:80:d0:68:98:f5:00:07:b3:66:fb:2b:53:56:33:c8:12:
29:34:af:8f:bf:59:79:f9:82:7b:eb:fe:f0:b3:c5:b5:f2:48:
f7:b2:54:69:ff:df:ea:48:8b:03:69:e9:57:90:37:c9:c7:30:
3b:de:97:e4:95:55:4c:52:f3:6c:6b:74:ed:3e:99:ba:d1:76:
8c:0a:9b:73:23:9d:2b:8d:16:cf:41:97:06:64:a8:ab:9c:18:
e0:05:3f:6f:c1:cb:96:1f:25:d5:1b:fd:ad:04:91:ed:b5:2f:
61:04:38:88:ba:f1:50:cc:4b:88:fd:2c:e5:35:88:ba:ac:43:
3e:88:6d:6e:38:d9:38:95:16:49:28:bd:81:85:e6:e5:38:58:
10:95:8b:6e:b1:3b:10:38:7d:ee:35:e2:1c:9c:39:eb:4f:9d:
1e:5c:f1:ec:94:46:1a:19:75:c6:cb:f2:0c:d1:da:26:ae:c0:
c4:b1:4f:59:17:4b:34:f4:41:79:cd:77:2a:09:8a:be:69:bd:
2c:f2:f5:31:5a:9e:98:e5:15:17:04:83:bc:74:e0:c4:12:b8:
bc:d8:3b:c8:95:41:26:80:28:bb:a3:34:64:bd:04:1f:9d:f2:
8e:9a:e4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:29 2026 by rpki-client