Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
File: Mya5UKRaLGusFQX80E2UDMCWj5Y.mft (raw, json)
Hash identifier: WlBoxPs1IPTGEnb0Js0gVgihuxIDtF5+sYFZ8E+6YfM=
Subject key identifier: D4:32:68:5A:AC:ED:89:33:C2:ED:D1:35:02:55:E5:09:E8:58:E4:F7
Authority key identifier: 33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
Certificate issuer: /CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Certificate serial: 019CABD9B07401BE5C725C900B5D8C15C549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
Manifest number: 072F
Signing time: Mon 02 Mar 2026 00:01:36 +0000
Manifest this update: Mon 02 Mar 2026 00:01:36 +0000
Manifest next update: Tue 03 Mar 2026 00:01:36 +0000
Files and hashes: 1: Mya5UKRaLGusFQX80E2UDMCWj5Y.crl (hash: U+zJ7pVx+hwUwFnK+0MkGdEDYY7s5w50636tMMF1p90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b0:74:01:be:5c:72:5c:90:0b:5d:8c:15:c5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Validity
Not Before: Mar 2 00:01:36 2026 GMT
Not After : Mar 3 00:01:36 2026 GMT
Subject: CN=d432685aaced8933c2edd1350255e509e858e4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:1e:3e:3e:26:e6:f5:e9:43:e3:82:7d:61:
db:9c:c4:32:98:8d:68:e5:c0:2b:ca:56:60:31:c3:
25:60:f4:d9:ea:10:bd:50:15:da:21:09:9f:b3:2a:
5a:b6:6e:a0:b0:f5:b7:b9:3b:fc:46:df:95:b8:ea:
3a:da:17:bc:ee:ea:29:09:d1:28:10:8b:91:e2:eb:
f9:bc:1d:d5:56:1a:63:32:23:11:77:45:ca:9d:aa:
cd:df:80:2f:6b:0c:1d:80:3d:ce:8d:f7:7b:41:65:
88:ae:b3:5b:ce:c1:6c:33:3b:43:81:fc:8b:08:36:
df:d8:f6:fd:b3:9f:ce:30:b1:5c:75:81:fc:21:93:
44:4d:ed:f1:81:4b:29:30:09:a7:d9:81:48:46:09:
72:1e:1e:8f:df:74:00:86:2b:bc:85:3d:ac:c7:7a:
91:26:16:3d:b4:e7:56:4e:9a:0d:ec:ce:97:6c:98:
0a:73:e1:9f:55:07:47:62:24:6b:be:ad:60:79:d3:
2f:73:ee:aa:52:74:20:80:1d:62:52:14:3c:3e:68:
57:bc:0f:71:ed:62:ea:6a:9b:3d:f9:65:c3:d5:af:
0d:2f:13:13:f8:b9:73:da:9d:6a:76:90:3b:07:44:
3b:53:91:d9:e4:e4:47:aa:87:fb:6d:8d:4d:0e:08:
f9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:32:68:5A:AC:ED:89:33:C2:ED:D1:35:02:55:E5:09:E8:58:E4:F7
X509v3 Authority Key Identifier:
keyid:33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:30:dc:29:42:7d:d3:ab:e4:aa:2d:c8:2f:a0:20:68:d9:cb:
99:be:ec:e3:29:95:d6:fc:ec:00:0a:6a:0c:9c:b0:bb:d3:ad:
db:3a:8b:dd:9b:3a:75:0c:14:06:11:1f:8b:37:17:39:6f:69:
0e:45:05:ea:3b:f4:64:3a:d2:02:3a:71:9f:19:80:ff:9d:8f:
85:5d:9f:8a:93:a1:40:a5:72:e8:e2:18:f0:3f:63:f9:3e:bf:
64:1e:63:89:53:11:a1:0b:80:c0:6e:df:93:62:33:c9:a8:e2:
ad:8c:58:b7:33:b4:01:67:16:96:a4:d9:84:3e:51:cd:56:3d:
7e:68:23:85:90:39:e9:f4:d8:3c:2d:a0:f5:f8:f8:e9:d8:b8:
b7:8c:46:c6:e9:9b:02:3a:ae:a8:c6:73:80:21:ef:b7:5c:24:
45:c4:a9:c5:6d:54:d0:ed:70:75:a4:a2:d6:78:f3:97:73:a7:
04:53:9c:ab:a2:ba:b5:91:57:6d:36:6f:a7:58:9a:c7:36:23:
97:ac:57:bc:bd:be:6e:11:79:79:2a:89:c7:7f:ac:40:73:5c:
b8:98:21:e4:95:ac:7a:48:28:fb:75:e0:9a:4e:62:75:f1:70:
34:f0:6a:e5:c4:aa:4f:28:19:5f:94:f9:27:f5:5f:9c:9a:62:
2b:96:5e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:07 2026 by rpki-client