Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
File: MY2rcPRKfrixz8E3Qz_NTXigOwU.mft (raw, json)
Hash identifier: QE2npZ7TiytB5zGWMCl1gm/g7priLFjw3HXzvabGC+Q=
Subject key identifier: DB:1E:23:E6:8E:4C:E5:46:68:04:3A:A3:81:8E:B6:AC:04:F0:2C:83
Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
Certificate issuer: /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Certificate serial: 019DA48B333453919027DAE4901CE87A553B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
Manifest number: 03C7
Signing time: Sun 19 Apr 2026 07:01:19 +0000
Manifest this update: Sun 19 Apr 2026 07:01:19 +0000
Manifest next update: Mon 20 Apr 2026 07:01:19 +0000
Files and hashes: 1: 0E0G_V7Qww5gf7roh6v7vgAuxXI.roa (hash: /cBoP5h3k8tG8K+/XM4vhzPv5C3M0myfV5uPfAajNmA=)
2: HJdicrhK0X58hHeVpTRveQPzgSA.asa (hash: GnsE5zVVUGgOlqc4oqkgxYqYyAJUdLN6bxMsAfebi24=)
3: MY2rcPRKfrixz8E3Qz_NTXigOwU.crl (hash: busPStIYG68zONJmsuJF5os5tnmhznD6X3859ghg/1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:33:34:53:91:90:27:da:e4:90:1c:e8:7a:55:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Validity
Not Before: Apr 19 07:01:19 2026 GMT
Not After : Apr 20 07:01:19 2026 GMT
Subject: CN=db1e23e68e4ce54668043aa3818eb6ac04f02c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:58:93:6e:0c:1b:e1:32:97:30:e1:b4:76:92:
b3:de:5a:4f:f3:96:a4:55:d4:4b:31:e8:10:d8:b2:
af:35:06:a3:f0:a9:fe:fd:be:0c:1a:08:fe:66:a2:
01:f0:ac:4f:f1:69:46:7d:bb:98:04:ab:98:38:66:
1d:bb:5d:75:11:48:2e:6e:6e:a7:ad:1c:2f:b5:13:
50:e5:2e:cf:44:db:65:34:cb:9d:45:3f:3d:b2:06:
e6:6c:f1:5d:f8:d4:5a:47:87:7e:ce:b9:95:aa:31:
19:1c:31:04:79:8d:3a:fc:16:ed:66:46:d7:14:e1:
ea:62:2e:3f:79:3b:a1:8c:b7:f7:77:51:ec:3b:57:
13:04:76:01:a8:58:25:e2:e5:c9:33:75:d7:e8:29:
cb:c2:96:3a:0c:19:ed:5d:52:a1:de:03:fe:81:b1:
c1:4d:2e:3f:c3:3e:2f:55:e0:04:51:36:6b:26:9c:
b6:7f:54:2c:28:50:22:bc:90:ea:51:06:7b:c9:06:
a7:d0:e6:59:8a:30:14:d3:e1:68:d5:48:3a:d4:f8:
34:6c:b8:6a:3f:90:82:e0:2e:5b:3c:88:a4:6e:f0:
26:df:3a:b7:86:a4:66:22:74:4a:55:1b:c9:7d:84:
32:6c:40:5a:27:bd:13:a2:4c:5c:fc:30:fb:ab:a6:
b6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1E:23:E6:8E:4C:E5:46:68:04:3A:A3:81:8E:B6:AC:04:F0:2C:83
X509v3 Authority Key Identifier:
keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:91:bc:7f:16:37:62:d8:fb:74:aa:4d:f4:7b:10:13:55:73:
ec:ff:07:38:f9:e0:28:5a:2c:c9:4d:e8:22:77:a8:0d:65:64:
bb:6f:3c:71:1c:50:da:20:6f:29:d1:10:6f:f6:30:d3:37:af:
de:81:e4:42:e1:7f:e2:a0:53:36:db:19:19:cb:ab:f0:36:be:
cf:24:72:6b:47:bd:75:6b:3d:2b:57:95:44:b9:29:9b:d8:9c:
8c:c8:b6:d6:5a:60:29:38:98:50:b8:48:ec:89:61:37:00:33:
35:bc:fd:a2:9c:cc:53:f3:fd:e3:ff:e0:3f:fd:6b:3f:8d:ee:
07:c9:f2:57:1d:25:61:65:a3:32:6d:86:6d:e8:be:07:27:5f:
bc:1a:3c:4c:7d:4f:33:a1:cc:1e:16:79:17:8a:92:c6:88:49:
86:0a:8b:bc:53:19:6e:e1:59:20:52:48:95:78:8e:c1:50:b2:
0f:69:ee:b5:8f:ad:8b:0c:5b:8b:21:af:ea:8b:ba:40:57:64:
53:3f:10:56:16:2f:70:c6:25:ee:af:9a:9f:73:78:b5:53:4e:
9c:f4:1f:86:c7:d3:2a:6c:74:f7:bd:f6:14:a0:6c:dd:da:5e:
f1:13:e1:32:b8:00:19:de:f2:6a:7b:f5:c8:fc:03:fa:35:46:
f2:60:af:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:31 2026 by rpki-client