Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
File: maykAWr4XVlpVITNYTzxiW39WaE.mft (raw, json)
Hash identifier: IMkfLL/TouIKdrzKy40pgj1C54JSoB0RJqjUlKZqUFA=
Subject key identifier: 9D:B6:0A:49:11:95:61:49:5F:81:AA:57:7F:B7:9E:3F:90:5E:36:C5
Authority key identifier: 99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
Certificate issuer: /CN=99aca4016af85d59695484cd613cf1896dfd59a1
Certificate serial: 019CAB33DAA49F3E38F1897A6A1D395CC4E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
Manifest number: 065B
Signing time: Sun 01 Mar 2026 21:00:28 +0000
Manifest this update: Sun 01 Mar 2026 21:00:28 +0000
Manifest next update: Mon 02 Mar 2026 21:00:28 +0000
Files and hashes: 1: WXXJ5075ZAff04RmS5smR110RVw.roa (hash: uErB5MACpy/J873DH0P3yHm3DQt+fz1WVOuw3Q44104=)
2: maykAWr4XVlpVITNYTzxiW39WaE.crl (hash: 5NX/mCkfYGIM9i4YE+C8L0zzCNd0UQpOxwae3iilnuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:da:a4:9f:3e:38:f1:89:7a:6a:1d:39:5c:c4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99aca4016af85d59695484cd613cf1896dfd59a1
Validity
Not Before: Mar 1 21:00:28 2026 GMT
Not After : Mar 2 21:00:28 2026 GMT
Subject: CN=9db60a49119561495f81aa577fb79e3f905e36c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e3:e2:03:ff:7a:00:73:ea:50:96:e7:66:a0:
3f:e2:79:82:6d:aa:ae:33:af:7f:e8:f6:62:8e:6c:
95:33:55:f0:dd:42:5c:96:59:86:3b:a6:8e:2c:0f:
08:cf:62:41:6f:4f:23:1b:02:87:50:fc:21:ca:6d:
a1:29:2a:93:0e:59:6b:8d:cb:80:6a:e1:fa:72:30:
bf:e8:5e:b9:51:1e:d0:b9:5e:7e:0c:2c:9d:cf:83:
4a:6b:a9:5a:93:43:49:45:a4:b7:72:2d:b1:18:47:
c2:b4:21:d3:cd:f1:0c:1b:54:bb:12:ee:a1:b6:3f:
af:41:f8:a4:a9:e8:2c:11:4e:d0:f7:82:58:1b:27:
e7:1e:63:c1:82:3a:a3:e4:72:ea:40:32:03:6f:ae:
11:22:e2:8f:50:c0:90:dd:21:95:e9:11:8a:31:62:
4e:fe:27:57:d8:35:8c:f1:b8:84:91:62:5c:10:99:
05:95:e1:4f:c6:ba:e5:84:a0:30:24:81:dc:56:f6:
4d:ba:74:1c:5c:19:9a:6b:38:df:05:d2:00:af:75:
fb:1e:61:04:6e:d7:bb:04:a0:ae:cb:fa:87:22:ee:
f9:22:21:31:5f:6a:aa:f4:46:85:59:4f:ff:31:6b:
38:bb:d0:34:e3:c6:5f:b2:ce:d2:68:d9:4e:3f:25:
b5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B6:0A:49:11:95:61:49:5F:81:AA:57:7F:B7:9E:3F:90:5E:36:C5
X509v3 Authority Key Identifier:
keyid:99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:49:85:ce:d0:05:1f:e9:ce:f1:79:11:29:e5:e6:ef:8d:62:
99:30:54:ce:24:b9:c7:6a:00:48:16:53:4a:06:44:a4:49:9a:
26:28:e6:7b:0d:0c:9b:52:26:a7:d2:35:0c:92:70:45:e2:cd:
d3:cc:a2:da:08:80:0f:67:e0:7e:bd:3b:8b:a3:b4:34:85:5d:
2d:e4:e1:38:1a:4d:47:57:32:f2:3f:c8:3d:0e:83:cd:cd:e7:
53:11:c4:1e:d0:0c:df:13:22:9f:be:c6:4e:d9:b7:69:c4:3e:
dc:36:93:e0:bf:dd:c6:a4:d1:83:d0:07:5a:7e:8b:e6:d2:09:
40:fd:90:38:7f:35:18:7e:44:b9:81:4b:61:8a:27:5c:0e:36:
cb:11:54:28:29:d2:06:d1:a0:1c:45:f3:fc:e2:c0:99:e4:6a:
4c:d3:67:e2:f9:ed:07:a9:54:15:6a:b1:5e:0d:79:e6:94:0d:
5a:d8:76:67:dc:96:8a:b4:d9:7c:7b:0f:ff:ec:19:f6:0a:ca:
04:33:84:89:dc:f8:4e:7f:a6:c6:35:2b:54:05:78:64:bc:a8:
16:a2:ea:04:5d:5c:39:1a:94:6d:46:1e:99:28:39:b7:bb:b4:
91:56:0c:98:96:72:70:80:d4:8a:ce:83:43:fa:43:62:10:13:
6e:4d:22:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:03 2026 by rpki-client