Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
File: MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft (raw, json)
Hash identifier: beAG/tR5S8bAJfcwDSQM9cHTD0X4mbacnrni9vT8P2k=
Subject key identifier: BC:30:B8:5C:BC:0C:42:F3:66:18:0B:E9:32:7B:C6:28:B9:7B:D1:EC
Authority key identifier: 33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
Certificate issuer: /CN=332293d0399160788b31e438760dc3bd1ed882eb
Certificate serial: 019CAC472965019942CD1A64FE158CF9EABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
Manifest number: 069B
Signing time: Mon 02 Mar 2026 02:01:10 +0000
Manifest this update: Mon 02 Mar 2026 02:01:10 +0000
Manifest next update: Tue 03 Mar 2026 02:01:10 +0000
Files and hashes: 1: MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl (hash: ZU7qMr0sMtkcwPSXJZN0EfeuWvksOtbO+V8A8RsPAm8=)
2: oc9NNjLJP5bHNwRtvggK5853u0I.roa (hash: QEJX9V+tmmHO1oVM4U0QVK2GYXHC+jd9Iu69/qnNN24=)
3: smnidOYe69oO55xZTobcKWGygYI.roa (hash: q2tFDWQKOHaPKe1BkVdfE8mFZF9krJjfYfAHh+hfLLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:29:65:01:99:42:cd:1a:64:fe:15:8c:f9:ea:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=332293d0399160788b31e438760dc3bd1ed882eb
Validity
Not Before: Mar 2 02:01:10 2026 GMT
Not After : Mar 3 02:01:10 2026 GMT
Subject: CN=bc30b85cbc0c42f366180be9327bc628b97bd1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:d4:78:67:45:e3:9c:de:f0:29:97:09:d2:
44:69:83:26:52:04:75:26:2f:85:45:81:8b:c0:5a:
13:a7:e3:58:37:2e:25:31:2e:18:60:c5:0b:d1:b6:
57:e0:f6:04:ef:91:a9:8d:72:d0:ce:c2:90:23:92:
71:7c:c5:f2:59:1a:d0:6b:4f:5f:a9:d9:5d:8e:f1:
7d:35:cc:71:27:3a:f7:e7:19:57:e1:5f:9b:ed:f3:
db:04:0b:67:cb:df:8e:ef:59:0b:15:61:7d:3f:d3:
19:db:e3:0f:11:ec:a0:8c:dc:10:eb:9c:b0:2f:c0:
b6:cf:10:6d:b3:f6:e3:79:a3:b9:e1:9e:68:96:da:
30:a3:a7:33:b6:7f:49:54:62:c5:2a:e9:ea:02:ee:
45:e7:ad:73:4a:61:c6:1a:f5:04:b6:86:52:4b:0d:
5e:2c:0a:66:10:8a:b8:e5:1b:8f:c7:1d:10:e5:41:
30:b3:3e:79:1b:9d:a7:b0:f0:a6:49:e3:e0:ad:86:
3e:36:00:e2:f5:3c:62:6e:34:b2:59:ed:a4:86:a0:
97:4c:22:6a:12:7b:17:8b:38:9c:42:b8:05:bb:43:
cb:a7:f9:8d:1a:fa:e8:f1:52:90:e4:d8:0b:f7:52:
61:25:ba:89:81:13:5b:0c:a6:26:cb:7d:fb:45:25:
ec:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:30:B8:5C:BC:0C:42:F3:66:18:0B:E9:32:7B:C6:28:B9:7B:D1:EC
X509v3 Authority Key Identifier:
keyid:33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:cb:37:fa:f5:cc:ee:64:ae:d7:ac:19:45:05:3f:a1:ef:48:
0f:9b:f4:32:cd:58:f7:9a:27:9a:71:01:27:15:93:06:b8:2a:
9d:77:fc:40:30:ab:96:49:ef:68:ce:25:fb:24:60:04:c2:fb:
ec:e3:06:25:19:db:02:04:a2:3b:85:f4:dc:a0:60:a8:36:57:
9e:d1:87:76:ed:df:ed:cf:71:0a:22:74:49:f2:2b:f7:b0:54:
0b:69:56:4e:03:3d:6a:14:1b:5d:b1:74:78:1f:a0:56:3e:4e:
1e:db:08:1f:30:ff:ac:6e:c5:55:9c:5a:ae:d5:c0:62:a9:f2:
e7:7e:db:1e:7d:49:60:cb:9e:5f:03:58:84:d9:18:6e:a8:25:
ba:ad:66:87:f8:59:e9:99:92:eb:3a:f1:8d:ac:3b:3d:ff:e5:
60:51:97:7d:42:03:f3:a5:4d:42:17:6d:a9:1a:63:ab:56:3d:
fb:dd:fc:e3:9b:f2:11:6e:91:37:81:3f:a8:62:ca:78:fc:90:
26:42:2a:a5:27:5a:6e:d7:73:b0:d9:20:d8:65:0d:fb:aa:11:
2e:e0:ba:a3:b2:39:7e:8c:59:03:be:47:7c:8a:a2:24:30:0c:
c7:f0:2e:95:c3:a7:48:b6:77:fe:b2:92:f9:73:71:e3:42:56:
7a:e4:4b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:41 2026 by rpki-client