Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
File: mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft (raw, json)
Hash identifier: S5UXZ/YfXmz9lbe5vby6tfIsA3fHEYAHMY+Wl5xtOdE=
Subject key identifier: EB:54:C2:FD:BF:D1:10:67:D9:C4:D0:4F:D6:A1:06:FD:69:69:E2:D9
Authority key identifier: 99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
Certificate issuer: /CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Certificate serial: 019D371B794DD021BB3643C493023C32802A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
Manifest number: 0F70
Signing time: Sun 29 Mar 2026 01:00:40 +0000
Manifest this update: Sun 29 Mar 2026 01:00:40 +0000
Manifest next update: Mon 30 Mar 2026 01:00:40 +0000
Files and hashes: 1: mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl (hash: 1mL8X0R38kjvPCZ0h8Ze/CACRgRI5/H0p+wnbGKH0oM=)
2: wBSqoLFJ8ghdrJRBL3vMWYtDQ7Y.roa (hash: NXyL8CpxXnA8Of0Eq4HRkrn4hYLRn+YBP9JG8zmPi+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:79:4d:d0:21:bb:36:43:c4:93:02:3c:32:80:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Validity
Not Before: Mar 29 01:00:40 2026 GMT
Not After : Mar 30 01:00:40 2026 GMT
Subject: CN=eb54c2fdbfd11067d9c4d04fd6a106fd6969e2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:69:ab:a4:a5:57:88:e0:eb:1f:02:7d:e7:
a9:d6:45:77:8a:09:db:78:04:76:4a:12:e9:1f:5d:
74:c5:ad:40:76:d8:35:31:c4:e5:10:65:81:80:23:
3f:98:b4:f2:3d:7a:f6:9a:c6:a6:ff:9c:a4:04:4a:
49:07:21:fb:fb:54:3c:3f:14:b9:15:54:6e:b5:02:
c1:ef:cf:7e:da:1f:cc:a1:da:04:35:41:ea:eb:2e:
c7:fc:0c:f1:81:90:51:5c:79:6f:3c:3a:df:aa:9b:
f5:68:9e:90:eb:97:c0:08:7d:20:f4:3f:72:24:ca:
7e:af:fa:c9:76:1d:3c:aa:ca:57:ba:67:db:97:e5:
7b:98:db:cb:79:3f:a5:43:b9:0f:ae:81:e3:b0:e3:
d6:6b:35:c6:4d:73:bd:30:70:90:1b:0c:d1:b2:76:
41:7d:9b:a5:c4:e3:80:c0:2b:db:c8:3f:2a:6e:4d:
96:18:fd:c3:7b:7d:c3:04:af:4f:c2:56:52:2b:61:
d2:a6:cd:60:64:a9:17:77:dd:5a:5b:58:a9:b8:af:
30:e4:50:c3:bf:7e:2e:e6:e8:49:c8:a8:68:36:ef:
8c:7c:ff:73:73:0c:bd:e1:e2:0f:29:70:33:bf:8f:
dd:1e:c3:5f:9f:1c:39:83:43:bc:c3:ab:42:e6:0a:
94:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:54:C2:FD:BF:D1:10:67:D9:C4:D0:4F:D6:A1:06:FD:69:69:E2:D9
X509v3 Authority Key Identifier:
keyid:99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6a:3e:39:90:de:b5:0a:08:01:b5:cc:6e:0a:e9:bf:ce:d7:
c1:97:23:6a:c0:91:4b:2d:82:73:fb:a6:06:06:47:e0:9a:75:
ce:3b:3e:47:46:bd:ab:b3:68:38:b7:ee:f4:a9:6e:7c:9f:ef:
46:ba:e3:a4:ac:27:4b:20:f2:91:9b:52:fd:dd:c5:b6:b6:03:
35:52:c7:d9:d9:56:82:a5:7a:7f:d7:97:df:9c:88:23:2c:b4:
de:3b:78:da:60:d6:59:2f:04:e7:2d:e9:2f:20:3b:c7:48:c4:
99:d7:6b:3c:e0:14:1d:2f:c1:f9:4b:ae:a9:6b:24:af:64:96:
5e:e3:76:f9:8e:fd:5c:c4:db:3d:b4:51:ab:18:15:9b:60:28:
d5:68:9b:f6:d3:64:44:c9:fb:d9:f7:01:cd:ff:2a:65:9d:bb:
9d:2a:78:4c:95:7b:00:08:1a:53:1f:7f:2e:89:81:c9:25:f7:
f0:84:86:0a:0f:63:e6:ea:23:21:be:5b:f7:f0:4a:2e:93:2e:
4e:b3:a1:54:98:5b:b7:9a:17:46:54:be:32:e4:fa:eb:48:7f:
e5:d6:80:20:be:23:df:83:7e:47:c1:1a:18:17:ab:b5:d2:4a:
65:87:2b:da:04:07:c0:6f:2e:e0:99:87:57:1e:4e:51:86:26:
cb:d9:a7:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G3lN0CG7NkPEkwI8MoAqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ODBjNzBmNzZmMGI1ZjVjODQ1N2EwMzM3YWQ1ZDYzMTIy
Y2Y3ZTYwHhcNMjYwMzI5MDEwMDQwWhcNMjYwMzMwMDEwMDQwWjAzMTEwLwYDVQQD
EyhlYjU0YzJmZGJmZDExMDY3ZDljNGQwNGZkNmExMDZmZDY5NjllMmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIdpq6SlV4jg6x8Cfeep1kV3ignb
eAR2ShLpH110xa1Adtg1McTlEGWBgCM/mLTyPXr2msam/5ykBEpJByH7+1Q8PxS5
FVRutQLB789+2h/ModoENUHq6y7H/AzxgZBRXHlvPDrfqpv1aJ6Q65fACH0g9D9y
JMp+r/rJdh08qspXumfbl+V7mNvLeT+lQ7kProHjsOPWazXGTXO9MHCQGwzRsnZB
fZulxOOAwCvbyD8qbk2WGP3De33DBK9PwlZSK2HSps1gZKkXd91aW1ipuK8w5FDD
v34u5uhJyKhoNu+MfP9zcwy94eIPKXAzv4/dHsNfnxw5g0O8w6tC5gqUcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtUwv2/0RBn2cTQT9ahBv1paeLZMB8GA1UdIwQY
MBaAFJmAxw928LX1yEV6AzetXWMSLPfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVlESEQzYnd0ZlhJUlhvRE42MWRZeElzOS1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80MmVjNjgtZDQzMy00MDAwLTkwNmMt
YzNlYWU2YjBmYjljLzEvbVlESEQzYnd0ZlhJUlhvRE42MWRZeElzOS1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC80MmVjNjgtZDQzMy00MDAwLTkwNmMtYzNlYWU2YjBmYjlj
LzEvbVlESEQzYnd0ZlhJUlhvRE42MWRZeElzOS1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWo+OZDe
tQoIAbXMbgrpv87XwZcjasCRSy2Cc/umBgZH4Jp1zjs+R0a9q7NoOLfu9KlufJ/v
RrrjpKwnSyDykZtS/d3FtrYDNVLH2dlWgqV6f9eX35yIIyy03jt42mDWWS8E5y3p
LyA7x0jEmddrPOAUHS/B+UuuqWskr2SWXuN2+Y79XMTbPbRRqxgVm2Ao1Wib9tNk
RMn72fcBzf8qZZ27nSp4TJV7AAgaUx9/LomBySX38ISGCg9j5uojIb5b9/BKLpMu
TrOhVJhbt5oXRlS+MuT660h/5daAIL4j34N+R8EaGBertdJKZYcr2gQHwG8u4JmH
Vx5OUYYmy9mnUA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:11 2026 by rpki-client