Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
File: mYkvB5PMiUvypMdIda8Iqi0dHJk.mft (raw, json)
Hash identifier: gp1JsssRhaG4GUiLBKY9iq9GlFszHZuRV5KkHLotj+Q=
Subject key identifier: EA:FC:CA:3A:6C:8D:3F:B3:A1:7A:61:BA:EA:04:AC:8A:74:21:F4:83
Authority key identifier: 99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
Certificate issuer: /CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Certificate serial: 019D9999126803226279AC9064882F90FC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
Manifest number: 1065
Signing time: Fri 17 Apr 2026 04:00:38 +0000
Manifest this update: Fri 17 Apr 2026 04:00:38 +0000
Manifest next update: Sat 18 Apr 2026 04:00:38 +0000
Files and hashes: 1: 8d01Xvs_aaIVSfahCINvVoz5qZs.asa (hash: hdcUHQVv+Z/OXdZkuAsmuPgKWFluiU3e3EejuVlqoak=)
2: mYkvB5PMiUvypMdIda8Iqi0dHJk.crl (hash: 16+Xw6yeDW3+bthdIXzV14BbVvBZ6IAxt2ihueGxhLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:12:68:03:22:62:79:ac:90:64:88:2f:90:fc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Validity
Not Before: Apr 17 04:00:38 2026 GMT
Not After : Apr 18 04:00:38 2026 GMT
Subject: CN=eafcca3a6c8d3fb3a17a61baea04ac8a7421f483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:71:6e:94:a8:20:4f:dd:ac:25:78:12:da:7d:
66:97:cd:cd:f9:ff:f8:c9:4d:53:75:b5:f0:b5:0a:
67:78:c8:b5:95:ed:26:f1:9e:9b:28:18:46:f7:a9:
90:8d:5b:ee:76:db:bd:7a:35:d0:25:ad:60:52:f6:
42:30:8a:c9:83:78:a0:a6:47:68:e2:9e:65:41:25:
96:e6:08:a7:e1:5a:49:70:03:e6:6b:b9:d1:8b:e0:
24:de:d9:bb:c0:cb:4d:89:4e:e4:ea:98:ce:1a:be:
1c:30:2b:e2:7e:c2:30:8f:f8:88:4c:98:ae:90:72:
b8:0c:35:f2:88:49:b9:e8:2f:7a:55:c4:7f:f3:dd:
59:1d:28:a5:f1:6a:90:87:60:08:75:31:25:bd:c0:
57:55:96:6f:b8:a2:55:90:d7:64:70:08:81:6f:d8:
ac:af:4c:29:85:37:76:b6:cf:b6:93:45:75:8c:c5:
e8:68:f4:c0:f4:62:52:51:60:eb:94:71:d5:44:8c:
82:ab:9b:dd:7f:0c:51:df:f8:1a:36:77:35:e5:f3:
c6:39:02:30:66:24:77:aa:a1:59:c8:60:4a:2a:ea:
7d:e1:48:ef:e1:56:9a:b1:3d:66:8a:08:58:aa:9e:
cb:26:e3:49:a6:9f:71:32:85:0a:c9:39:33:d0:cc:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FC:CA:3A:6C:8D:3F:B3:A1:7A:61:BA:EA:04:AC:8A:74:21:F4:83
X509v3 Authority Key Identifier:
keyid:99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:7b:9b:6f:dc:14:c1:e7:9d:39:93:13:6d:4d:c7:02:58:61:
6c:f7:a5:36:54:4a:7d:49:7e:c8:e4:1a:21:17:4c:4b:fe:2b:
b8:7c:0c:91:56:7f:4e:51:25:90:b7:96:e9:ea:97:d1:5f:4d:
48:ac:d7:46:f2:7b:97:f5:1a:8a:61:23:d1:b9:b3:72:00:ce:
c5:e7:9e:4c:96:ea:cd:98:25:ef:fd:31:5a:04:01:81:ca:c0:
5b:6b:b2:17:15:4e:af:54:87:ab:8c:46:1d:48:24:9e:f9:e4:
17:56:e7:54:af:e6:0e:e3:66:75:f6:23:3d:f8:89:7c:9b:0f:
e3:b1:65:6d:4b:d2:ec:e6:67:f2:e2:4d:03:da:11:75:1e:9e:
2e:2d:8c:20:c6:00:e2:9a:32:4a:4b:86:0a:c6:66:ea:98:8a:
18:1d:ef:f0:e1:0d:a3:98:92:56:c8:1e:fa:fa:d0:fb:f2:eb:
60:35:25:77:a5:b8:cf:05:b4:c9:c9:c8:1f:2f:81:0b:20:04:
1b:b0:ef:c5:ad:27:58:1a:aa:06:9a:94:a4:3f:c6:e2:65:88:
cb:02:8c:3d:fd:de:e3:7e:5c:2d:a5:8f:a0:20:6d:14:81:a5:
05:7a:1a:2d:a3:93:59:96:f7:b6:e1:f2:fb:36:4e:14:7c:d8:
15:ab:c0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:21:32 2026 by rpki-client