Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
File: MY2rcPRKfrixz8E3Qz_NTXigOwU.mft (raw, json)
Hash identifier: vEHpotSZE+1sfN2klyuon0b2tAFHz9Un9OUiTu0lcEw=
Subject key identifier: 44:64:97:BD:12:2F:29:78:72:67:CA:FC:E9:64:05:B2:35:A1:63:74
Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
Certificate issuer: /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Certificate serial: 019FA7F4FBB720F8CD4875BA5F5D28BBB8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
Manifest number: 04D3
Signing time: Tue 28 Jul 2026 09:01:17 +0000
Manifest this update: Tue 28 Jul 2026 09:01:17 +0000
Manifest next update: Wed 29 Jul 2026 09:01:17 +0000
Files and hashes: 1: 7l-sgrIhavro2SpPOFtgONrk5QA.roa (hash: X9fi/U55KuWyLJlSIBJLR9VeaEuygBRKeTfxzhD0sdk=)
2: MY2rcPRKfrixz8E3Qz_NTXigOwU.crl (hash: qODbbkPQjNW+cfqxQCSDrEuXWK/p44b6isPgqtx976Q=)
3: N_-aUt6Z-T1T47bLQeiZqj46aAY.asa (hash: uJrA5ZxEbMX+r8ykiQ1wfuqw5vOenNUNMGEM9RjYuwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:fb:b7:20:f8:cd:48:75:ba:5f:5d:28:bb:b8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Validity
Not Before: Jul 28 09:01:17 2026 GMT
Not After : Jul 29 09:01:17 2026 GMT
Subject: CN=446497bd122f29787267cafce96405b235a16374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:05:73:23:5d:3a:47:db:a1:56:2b:25:9d:24:
d9:4d:34:11:1d:61:5d:bc:21:7f:ef:ca:1a:52:ac:
22:cc:2a:c2:5e:0d:ae:21:71:b1:3e:e1:3c:00:f2:
1a:0f:76:3b:43:c4:6c:ac:25:ac:ea:2b:33:13:32:
62:df:5e:4b:c6:d7:4b:ea:c2:c3:a4:4b:4c:f3:47:
0a:c0:61:54:d1:1d:53:ed:38:d0:17:2c:41:d5:ef:
61:66:cc:14:68:d2:61:09:e5:50:64:0b:fc:49:d1:
bd:1f:46:1b:90:4c:1b:29:1c:d4:45:73:e3:d3:48:
1e:bc:73:60:69:c1:c4:68:da:96:3b:b5:2e:50:f3:
b8:14:36:80:e5:e1:0d:45:6a:25:39:80:58:c1:de:
cf:c4:db:44:36:8f:8c:88:de:97:b8:b4:f3:34:c5:
7c:1f:15:c9:ef:69:04:34:7c:09:79:2c:18:a7:30:
08:92:55:dc:80:32:32:e0:6f:02:34:d6:75:84:d0:
1c:69:3c:c6:23:01:ca:03:47:78:c9:86:fc:8b:2a:
9c:00:60:66:b1:68:55:1b:4b:03:80:9e:a7:41:30:
88:83:d4:cb:da:eb:65:e6:48:09:28:6d:04:9f:ae:
28:f9:96:49:87:6f:94:a2:57:3e:a0:50:bf:9b:dd:
6c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:64:97:BD:12:2F:29:78:72:67:CA:FC:E9:64:05:B2:35:A1:63:74
X509v3 Authority Key Identifier:
keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6c:92:18:08:12:43:99:51:f7:63:ee:a7:9b:58:dd:c4:3b:
d5:4f:da:af:dc:80:09:58:a5:b5:d7:c7:7e:9d:62:ff:47:a9:
2a:e9:6c:55:b6:2e:14:25:5f:aa:cb:06:80:ae:d4:b1:47:df:
fa:2e:7a:19:6b:20:74:85:00:ee:35:aa:26:bd:a9:f2:df:b5:
50:30:c8:69:78:f8:a1:f7:0f:c2:67:4c:16:32:11:dc:12:96:
06:1f:fc:ad:fb:21:62:86:75:b9:3d:73:b5:8a:59:ba:71:7c:
16:95:3b:c9:60:ca:bf:f0:10:6e:16:b5:25:f6:bf:56:8d:ca:
80:b4:23:38:67:b3:09:8e:ca:75:c6:43:09:20:c3:f6:03:73:
bd:af:f0:c5:87:21:4a:70:45:93:f9:70:a6:59:cc:34:6d:7b:
d3:4d:a3:64:e5:a3:52:0e:f3:71:98:ac:1c:e9:32:76:1e:e1:
cc:cf:7a:0e:cf:9c:a6:a9:b1:39:56:31:66:21:0f:34:d3:ca:
13:f8:21:e9:1c:62:4d:d1:1f:0a:5f:43:ed:d9:c1:e0:ca:59:
6e:ca:7e:bf:c0:39:d4:d9:c8:e0:8a:5a:d4:f4:82:45:eb:96:
37:c6:36:55:c5:83:62:7d:82:66:cd:de:ca:99:0c:6e:28:27:
fb:41:a5:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+n9Pu3IPjNSHW6X10ou7iiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxOGRhYjcwZjQ0YTdlYjhiMWNmYzEzNzQzM2ZjZDRkNzhh
MDNiMDUwHhcNMjYwNzI4MDkwMTE3WhcNMjYwNzI5MDkwMTE3WjAzMTEwLwYDVQQD
Eyg0NDY0OTdiZDEyMmYyOTc4NzI2N2NhZmNlOTY0MDViMjM1YTE2Mzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQVzI106R9uhVislnSTZTTQRHWFd
vCF/78oaUqwizCrCXg2uIXGxPuE8APIaD3Y7Q8RsrCWs6iszEzJi315LxtdL6sLD
pEtM80cKwGFU0R1T7TjQFyxB1e9hZswUaNJhCeVQZAv8SdG9H0YbkEwbKRzURXPj
00gevHNgacHEaNqWO7UuUPO4FDaA5eENRWolOYBYwd7PxNtENo+MiN6XuLTzNMV8
HxXJ72kENHwJeSwYpzAIklXcgDIy4G8CNNZ1hNAcaTzGIwHKA0d4yYb8iyqcAGBm
sWhVG0sDgJ6nQTCIg9TL2utl5kgJKG0En64o+ZZJh2+Uolc+oFC/m91sCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERkl70SLyl4cmfK/OlkBbI1oWN0MB8GA1UdIwQY
MBaAFDGNq3D0Sn64sc/BN0M/zU14oDsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVkycmNQUktmcml4ejhFM1F6X05UWGlnT3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NGY4NzQtNDQ2Yy00NjQ2LThkYjAt
ZDk5ZjY2ZWY2MDZjLzEvTVkycmNQUktmcml4ejhFM1F6X05UWGlnT3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NGY4NzQtNDQ2Yy00NjQ2LThkYjAtZDk5ZjY2ZWY2MDZj
LzEvTVkycmNQUktmcml4ejhFM1F6X05UWGlnT3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmySGAgS
Q5lR92Pup5tY3cQ71U/ar9yACViltdfHfp1i/0epKulsVbYuFCVfqssGgK7UsUff
+i56GWsgdIUA7jWqJr2p8t+1UDDIaXj4ofcPwmdMFjIR3BKWBh/8rfshYoZ1uT1z
tYpZunF8FpU7yWDKv/AQbha1Jfa/Vo3KgLQjOGezCY7KdcZDCSDD9gNzva/wxYch
SnBFk/lwplnMNG17002jZOWjUg7zcZisHOkydh7hzM96Ds+cpqmxOVYxZiEPNNPK
E/gh6RxiTdEfCl9D7dnB4MpZbsp+v8A51NnI4Ipa1PSCReuWN8Y2VcWDYn2CZs3e
ypkMbign+0GlaA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:46:58 2026 by rpki-client