Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
File: mdy98GMqEBYTqPbJRJsp7UXBqHI.mft (raw, json)
Hash identifier: LbPdM6+JHRQ2deU/tNtX1cBJjrJ0u2tRATs35NgwGRw=
Subject key identifier: B4:7B:F7:4B:18:0C:AB:0A:03:18:58:9B:22:50:F1:BC:2D:2C:D1:82
Authority key identifier: 99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
Certificate issuer: /CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Certificate serial: 019D3940BCBF8B771D0EBD6F8F4957D827CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
Manifest number: 123D
Signing time: Sun 29 Mar 2026 11:00:37 +0000
Manifest this update: Sun 29 Mar 2026 11:00:37 +0000
Manifest next update: Mon 30 Mar 2026 11:00:37 +0000
Files and hashes: 1: FJy0GIfk9vV1h7loWKolSJZXo6Y.roa (hash: IuQnK7CmGBa5gJ1tL38YDwQ/LuHmRuUUuO8hQ4PDMgU=)
2: ZkvlusQxR0eilq71QTIX3lmLXIA.roa (hash: XZW+wXA4kuyVy7bOsoQa1YVo6hUxFESln/r1+ImNbEc=)
3: gl6TR5lqCe0eF2sxfbOEh2xV2Ys.roa (hash: UP0movw74FgBnc/2Abquw52G3rsl7ENPcm+vDD+jqRQ=)
4: mdy98GMqEBYTqPbJRJsp7UXBqHI.crl (hash: bTehsZTpfY67w76O0lu3i/xjeCZnu4LlmpLrN/KW2ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:bc:bf:8b:77:1d:0e:bd:6f:8f:49:57:d8:27:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Validity
Not Before: Mar 29 11:00:37 2026 GMT
Not After : Mar 30 11:00:37 2026 GMT
Subject: CN=b47bf74b180cab0a0318589b2250f1bc2d2cd182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:66:68:42:de:f0:a3:c9:43:07:4c:bf:c1:5b:
d0:c8:d1:83:b9:e2:ab:26:a9:e7:ee:75:e7:9d:57:
8d:25:1b:a0:49:a6:30:82:ac:3f:87:c1:b3:33:38:
1d:ef:a7:88:8f:c9:a3:50:64:47:60:74:c0:aa:d3:
14:0a:76:d4:95:54:b3:49:2a:3d:ee:39:76:da:26:
6b:0b:1f:cb:5c:4a:cc:06:6e:f1:b8:8d:ba:5a:97:
74:2d:39:84:9c:f0:c8:c4:08:cc:8a:0e:5f:ba:bd:
be:17:0c:26:87:43:e6:9a:78:5a:ec:75:6e:7f:b7:
4a:25:4d:2b:ce:4d:cc:1b:3a:4f:9a:9f:dd:9a:d2:
4e:81:73:91:86:6e:b6:c6:a1:b5:43:f9:c4:15:48:
74:d4:79:a8:17:b8:d4:f9:c5:84:4d:88:70:28:1e:
7f:06:97:65:8e:86:03:90:a4:64:56:9e:20:79:2d:
c1:bc:57:a5:8c:34:cd:7b:61:11:df:f0:77:47:19:
61:f3:72:d1:7e:53:32:bc:b2:f8:31:0d:42:37:3a:
cf:20:b9:1d:d3:16:66:99:bb:6b:26:71:42:3a:35:
70:bb:81:be:ab:07:00:3f:f8:71:d9:41:f2:cd:9f:
a6:3c:13:47:ea:1d:e2:01:20:55:7e:4f:9a:9f:e9:
bb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7B:F7:4B:18:0C:AB:0A:03:18:58:9B:22:50:F1:BC:2D:2C:D1:82
X509v3 Authority Key Identifier:
keyid:99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:bb:4f:bf:f7:bf:0b:c6:bb:62:e1:12:49:ef:f4:cd:20:2f:
dc:44:fd:13:41:2a:e5:61:5e:ec:a5:d9:75:34:95:93:ee:76:
4a:ea:86:03:1a:62:eb:e4:d0:04:07:b5:63:ad:f1:ea:07:e2:
cf:08:27:9b:0f:7c:5b:3c:7f:22:46:23:c3:5c:3a:be:3c:e7:
d5:a1:b7:44:97:93:e8:33:bb:11:e7:34:62:9f:ef:a8:36:85:
ae:27:b8:d0:67:5d:6a:7c:1b:c4:6e:43:be:e7:ca:a6:02:00:
ce:29:54:f0:39:12:76:81:3a:6b:4e:96:b3:dc:03:26:24:a6:
52:2b:e6:a0:8f:08:ce:d0:c3:10:24:eb:f5:f6:12:f4:2c:71:
e7:8f:45:5b:96:32:32:a3:2b:0c:1f:56:f5:a7:b1:10:a9:03:
66:41:64:2b:fc:d3:57:d2:87:73:d3:0c:0b:c5:a9:be:e0:94:
c3:d3:23:a0:12:15:b3:47:72:e9:6f:5f:f3:de:7b:12:fa:4e:
5b:20:1f:1f:58:32:4b:56:bf:ce:77:90:f9:23:a7:bc:b8:0a:
91:f9:06:5f:1a:87:af:ee:58:e3:1d:78:62:e7:f7:ee:c4:6c:
e3:7c:f6:42:4c:fc:b8:a6:91:e8:96:5f:f5:72:d8:67:42:8a:
d0:d5:9a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:21 2026 by rpki-client