Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
File: maykAWr4XVlpVITNYTzxiW39WaE.mft (raw, json)
Hash identifier: b253TQcPl8utEKhHMvgMGYiDkKwm+S13x6RNWW6UtRA=
Subject key identifier: A5:06:A4:38:4B:72:8C:98:C3:8C:09:32:59:78:65:57:A2:84:A4:B4
Authority key identifier: 99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
Certificate issuer: /CN=99aca4016af85d59695484cd613cf1896dfd59a1
Certificate serial: 01A0D91775CC3DF588DDD06012A975683E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
Manifest number: 0885
Signing time: Fri 25 Sep 2026 15:03:08 +0000
Manifest this update: Fri 25 Sep 2026 15:03:08 +0000
Manifest next update: Sat 26 Sep 2026 15:03:08 +0000
Files and hashes: 1: WXXJ5075ZAff04RmS5smR110RVw.roa (hash: uErB5MACpy/J873DH0P3yHm3DQt+fz1WVOuw3Q44104=)
2: maykAWr4XVlpVITNYTzxiW39WaE.crl (hash: QM34Cyl/3WEox/uhWeY+WpiUQYL1/xAZA1eKx+5NNRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:75:cc:3d:f5:88:dd:d0:60:12:a9:75:68:3e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99aca4016af85d59695484cd613cf1896dfd59a1
Validity
Not Before: Sep 25 15:03:08 2026 GMT
Not After : Sep 26 15:03:08 2026 GMT
Subject: CN=a506a4384b728c98c38c093259786557a284a4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ea:a2:fb:5c:14:00:f2:e7:33:3b:0b:12:49:
8c:03:05:4e:09:19:e5:87:b5:79:a4:1f:dc:81:b0:
9f:49:9d:2e:99:de:c3:47:b6:2f:4c:28:4c:70:3f:
00:1b:a5:7e:b6:29:5c:5e:eb:cd:c7:f5:42:4d:8d:
20:80:88:66:2a:95:92:ef:0d:c4:32:cb:b0:aa:5e:
d8:7a:7c:b9:85:30:6f:df:f4:ad:54:3f:b2:aa:f5:
79:b3:f8:8b:78:2e:ac:b9:cd:10:54:8f:3a:b7:24:
5c:0f:a8:f0:dc:0e:7a:83:61:ee:21:16:96:0e:76:
bc:76:2b:cf:9d:a6:3f:8b:60:b1:e9:dd:b1:b7:14:
af:53:64:74:ab:71:99:83:79:dc:07:fc:45:88:9c:
77:bd:fc:ca:c1:cf:ac:fc:32:a6:95:65:21:8c:d6:
c6:ba:eb:6f:58:84:f9:29:a4:d0:1e:29:33:e5:fd:
a0:6a:20:65:94:2a:e3:6c:ca:bf:9b:84:79:2d:85:
7b:2e:67:dc:93:17:48:63:19:c1:89:5b:2d:ac:a7:
82:dc:b1:cf:49:03:f0:5e:10:b2:7a:53:ec:dd:56:
b1:82:9f:97:fa:7c:b9:d6:e7:88:ce:f6:4a:ee:e1:
43:dd:c1:d8:68:35:51:de:31:a4:5f:73:ba:65:9a:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:06:A4:38:4B:72:8C:98:C3:8C:09:32:59:78:65:57:A2:84:A4:B4
X509v3 Authority Key Identifier:
keyid:99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:40:50:3a:fe:66:fd:f0:e5:09:f3:16:95:c3:95:41:28:93:
0a:85:b1:e9:ae:6c:1d:0e:5e:47:0d:f7:cb:92:5e:6c:00:ed:
29:10:b5:73:b0:ec:aa:4c:fc:86:7a:bb:ad:e7:8b:0d:9c:db:
6c:c0:3e:4d:cc:8a:45:8b:f1:7a:56:5f:23:11:0f:fa:a6:40:
f6:a3:16:be:a7:50:08:58:1c:49:e1:29:a5:5d:54:1e:4e:fb:
d5:8c:c9:ce:4c:4f:7c:7a:08:fd:41:2a:30:5b:f5:8c:62:b6:
6d:e6:04:40:cc:21:cc:d8:9a:2c:24:76:c2:f7:57:0e:a7:65:
40:b6:8d:48:18:ef:72:89:e4:ea:c2:8d:29:28:75:6b:98:df:
4d:c7:bd:7d:80:6e:93:f5:43:81:ca:a0:7a:48:2d:92:62:46:
91:06:8c:d3:7c:dd:1b:16:aa:c8:6e:ce:ea:a2:bb:2d:9a:2d:
10:cb:21:ef:cf:75:12:27:cb:55:b4:8f:6d:a6:a4:6e:49:19:
fc:ff:40:eb:51:1a:eb:e6:39:8c:9e:88:6f:2d:c3:79:b1:66:
98:4d:ec:b2:c8:c7:24:65:2e:9b:9d:27:fe:28:6a:85:85:6a:
92:7f:41:26:56:a4:e9:7b:09:b9:41:52:60:74:c7:b2:51:3b:
0a:cb:55:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:28:28 2026 by rpki-client