Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
File: maykAWr4XVlpVITNYTzxiW39WaE.mft (raw, json)
Hash identifier: iE/SjSouCJtKbTPP96l5C4febhJMDGg7GlMABRj8bjE=
Subject key identifier: 6E:3C:B1:F8:4E:04:E9:7D:FF:1A:AF:4A:68:4F:EA:A2:ED:12:6F:9B
Authority key identifier: 99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
Certificate issuer: /CN=99aca4016af85d59695484cd613cf1896dfd59a1
Certificate serial: 019D98BD8D3ED907C8819F50A9F3EBB4FB24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
Manifest number: 06D6
Signing time: Fri 17 Apr 2026 00:00:52 +0000
Manifest this update: Fri 17 Apr 2026 00:00:52 +0000
Manifest next update: Sat 18 Apr 2026 00:00:52 +0000
Files and hashes: 1: WXXJ5075ZAff04RmS5smR110RVw.roa (hash: uErB5MACpy/J873DH0P3yHm3DQt+fz1WVOuw3Q44104=)
2: maykAWr4XVlpVITNYTzxiW39WaE.crl (hash: rzeB+nCZyqUedkxrYC20ZLjXetXO3inBVN+X0vlsYeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:8d:3e:d9:07:c8:81:9f:50:a9:f3:eb:b4:fb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99aca4016af85d59695484cd613cf1896dfd59a1
Validity
Not Before: Apr 17 00:00:52 2026 GMT
Not After : Apr 18 00:00:52 2026 GMT
Subject: CN=6e3cb1f84e04e97dff1aaf4a684feaa2ed126f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:49:cd:43:de:47:15:b0:8d:64:14:ac:90:91:
d8:df:c2:46:40:15:3a:44:de:76:56:e0:c9:8c:86:
5c:9e:27:45:8a:b5:3e:02:24:37:a7:a9:87:b8:ac:
67:bc:f4:e0:59:45:da:8a:11:2a:cf:75:45:8a:28:
53:01:1f:7b:d6:d6:a4:76:e2:dc:e0:4b:b4:5b:1c:
2b:5a:71:5b:91:ba:54:17:6d:59:b3:5f:28:0f:6a:
c8:71:3b:0b:84:3f:5e:74:5a:5c:25:f7:44:64:bb:
a9:6b:c8:ce:ac:85:b8:b3:2d:f8:f0:af:31:39:90:
bf:59:9c:4b:7b:d6:ae:f2:62:0d:9b:2e:b6:2a:20:
fd:de:84:87:78:fa:a0:e7:ad:06:d0:7d:80:9c:54:
a8:6f:40:9f:fc:b9:56:7a:d4:09:3b:aa:9e:c8:ef:
33:1f:f8:87:2b:bd:0f:c1:32:e0:95:aa:b7:9e:bf:
36:af:55:a1:75:c1:ae:4c:df:c1:49:fe:16:f7:67:
0b:58:84:69:31:c9:8c:07:02:44:c7:df:e3:c7:d0:
7d:33:0a:2e:b4:46:0d:66:07:8b:44:fb:25:1a:14:
e1:e1:af:7a:f1:de:6c:35:2a:cb:73:06:30:4e:98:
e4:cd:2a:16:22:94:a2:d7:c9:90:37:ae:f9:34:c8:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3C:B1:F8:4E:04:E9:7D:FF:1A:AF:4A:68:4F:EA:A2:ED:12:6F:9B
X509v3 Authority Key Identifier:
keyid:99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:81:d5:e9:5f:42:de:dc:7a:36:05:30:00:f8:9a:ae:db:a0:
c3:bf:da:aa:15:ab:09:64:20:0e:37:07:d0:df:07:71:3b:f2:
2c:4f:a6:61:ea:c7:fc:29:6b:15:b2:37:a1:b6:d4:f5:2d:86:
8f:f3:46:f0:a1:bf:01:02:e8:c6:32:b5:0e:d6:2f:cc:1a:3e:
75:65:60:64:8d:c7:4d:a8:26:aa:30:55:4a:87:6e:57:44:33:
99:f3:fa:96:1d:95:c0:38:fb:fa:9e:07:98:c1:8f:21:bd:cd:
dc:b5:e3:5e:28:ac:e9:6a:b5:a5:10:5f:53:d7:b2:04:21:93:
cc:7d:1e:b7:80:a6:e4:07:04:51:e0:0b:0a:1f:59:2b:ed:dd:
bc:e7:be:ac:07:01:28:d8:13:8e:da:e0:d2:5b:3e:cb:02:49:
f9:1c:74:01:a8:17:0c:22:f1:99:03:87:15:e2:d8:ba:af:e9:
1d:97:8e:7d:dc:70:b8:98:8a:f2:2a:70:71:ee:91:f2:b3:6a:
de:df:12:d1:93:dc:f9:60:4e:ab:3c:71:da:c0:4e:b7:6a:11:
11:a2:e9:62:ea:de:cd:cc:9b:98:f2:03:a4:f4:e9:f1:83:c2:
51:29:84:16:a7:ae:10:51:d3:b9:a0:87:c1:80:66:e3:18:61:
c8:9d:88:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvY0+2QfIgZ9QqfPrtPskMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YWNhNDAxNmFmODVkNTk2OTU0ODRjZDYxM2NmMTg5NmRm
ZDU5YTEwHhcNMjYwNDE3MDAwMDUyWhcNMjYwNDE4MDAwMDUyWjAzMTEwLwYDVQQD
Eyg2ZTNjYjFmODRlMDRlOTdkZmYxYWFmNGE2ODRmZWFhMmVkMTI2ZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlknNQ95HFbCNZBSskJHY38JGQBU6
RN52VuDJjIZcnidFirU+AiQ3p6mHuKxnvPTgWUXaihEqz3VFiihTAR971takduLc
4Eu0WxwrWnFbkbpUF21Zs18oD2rIcTsLhD9edFpcJfdEZLupa8jOrIW4sy348K8x
OZC/WZxLe9au8mINmy62KiD93oSHePqg560G0H2AnFSob0Cf/LlWetQJO6qeyO8z
H/iHK70PwTLglaq3nr82r1WhdcGuTN/BSf4W92cLWIRpMcmMBwJEx9/jx9B9Mwou
tEYNZgeLRPslGhTh4a968d5sNSrLcwYwTpjkzSoWIpSi18mQN675NMj+RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG48sfhOBOl9/xqvSmhP6qLtEm+bMB8GA1UdIwQY
MBaAFJmspAFq+F1ZaVSEzWE88Ylt/VmhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWF5a0FXcjRYVmxwVklUTllUenhpVzM5V2FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lMGMxZDQtOGIzMy00MzYwLTlmNTAt
Y2JiYWM2ZTRhZDcxLzEvbWF5a0FXcjRYVmxwVklUTllUenhpVzM5V2FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9lMGMxZDQtOGIzMy00MzYwLTlmNTAtY2JiYWM2ZTRhZDcx
LzEvbWF5a0FXcjRYVmxwVklUTllUenhpVzM5V2FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4HV6V9C
3tx6NgUwAPiartugw7/aqhWrCWQgDjcH0N8HcTvyLE+mYerH/ClrFbI3obbU9S2G
j/NG8KG/AQLoxjK1DtYvzBo+dWVgZI3HTagmqjBVSoduV0QzmfP6lh2VwDj7+p4H
mMGPIb3N3LXjXiis6Wq1pRBfU9eyBCGTzH0et4Cm5AcEUeALCh9ZK+3dvOe+rAcB
KNgTjtrg0ls+ywJJ+Rx0AagXDCLxmQOHFeLYuq/pHZeOfdxwuJiK8ipwce6R8rNq
3t8S0ZPc+WBOqzxx2sBOt2oREaLpYurezcybmPIDpPTp8YPCUSmEFqeuEFHTuaCH
wYBm4xhhyJ2I3w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:50:23 2026 by rpki-client