Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
File: mYkvB5PMiUvypMdIda8Iqi0dHJk.mft (raw, json)
Hash identifier: mycsNKmJi1uSnLm30bK/TRyFy7SI75ySqJTJxkgFFWk=
Subject key identifier: FF:8F:44:CC:50:53:AA:85:6B:31:CE:7C:54:DA:C8:1E:3D:42:10:FE
Authority key identifier: 99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
Certificate issuer: /CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Certificate serial: 01A13B5C4B330863C98988D25AC1FF6E7577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
Manifest number: 1247
Signing time: Wed 14 Oct 2026 17:01:06 +0000
Manifest this update: Wed 14 Oct 2026 17:01:06 +0000
Manifest next update: Thu 15 Oct 2026 17:01:06 +0000
Files and hashes: 1: mYkvB5PMiUvypMdIda8Iqi0dHJk.crl (hash: yjFwAM8+ECqtbYGhNYrICtt/T59M7nKAmqzbZBiLXj4=)
2: uXYt53s80GrtJ11qwwGsB2KKZTM.asa (hash: 5TjpX7oY6EMRShqcBM3plh4XQkpf2Obj3teuMkVUkHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:5c:4b:33:08:63:c9:89:88:d2:5a:c1:ff:6e:75:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Validity
Not Before: Oct 14 17:01:06 2026 GMT
Not After : Oct 15 17:01:06 2026 GMT
Subject: CN=ff8f44cc5053aa856b31ce7c54dac81e3d4210fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bd:20:29:4b:0f:b8:08:dc:c3:b2:8e:2b:fa:
6f:71:32:47:d8:37:f3:4f:f1:a2:df:6c:98:52:5e:
2e:fc:f8:f8:bf:cf:f5:f0:dd:32:05:a5:c8:f5:57:
ba:9e:ad:62:90:db:42:6b:ad:29:89:49:08:7b:13:
87:82:c4:81:68:0a:49:b2:2a:e5:82:46:87:f1:10:
1b:d9:af:c6:de:68:b2:d9:64:2e:6d:da:02:e7:ea:
77:95:dc:f0:52:98:90:5e:87:4c:4e:da:6b:17:81:
91:a2:c3:37:bf:71:9d:40:25:14:d1:f2:2f:61:18:
3e:63:d6:03:83:6d:be:78:8b:4e:cc:f7:35:37:e8:
9d:ae:13:86:7d:bf:81:ee:30:e8:eb:e9:ed:1f:fe:
0f:69:f6:d8:f6:dc:d5:1a:f3:ab:db:3c:45:b0:8d:
d7:81:97:34:95:b6:df:72:7c:ca:5e:17:0a:94:61:
63:96:73:0e:2f:2f:53:79:12:03:d0:24:0b:d4:5e:
7a:95:08:14:11:43:62:8b:25:71:c9:2e:19:7c:4a:
a7:c7:92:29:a3:b5:10:c8:86:41:60:9b:bb:34:d2:
44:c4:3e:fa:f9:ec:2e:cd:22:ff:35:36:9b:e7:69:
a8:c7:7c:0b:5d:4f:5c:54:ee:bf:f2:33:bc:7c:c2:
36:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8F:44:CC:50:53:AA:85:6B:31:CE:7C:54:DA:C8:1E:3D:42:10:FE
X509v3 Authority Key Identifier:
keyid:99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a3:45:4d:f3:2f:c8:2e:e2:db:31:e2:80:da:4d:3b:ae:a9:
17:3b:53:66:32:16:0d:3c:49:78:c2:7e:61:69:5e:5f:fd:b8:
82:d1:80:0a:b2:14:e1:45:34:5c:47:f6:4b:17:c7:19:24:cd:
95:49:a8:37:83:26:25:78:64:34:0a:bd:2c:f0:8c:94:fb:f0:
54:2d:ba:88:3e:cc:2f:2e:62:3f:36:9e:8e:4d:c0:b1:ea:cf:
04:74:b7:80:be:2f:36:c7:78:5b:9a:b7:2d:f2:59:0b:d9:86:
6c:53:49:c5:ce:a4:aa:e0:5d:d8:4f:39:8e:fc:a6:17:7d:c8:
ad:f2:41:ed:bc:e8:4d:48:5a:b7:1c:d0:c7:d2:20:9c:3c:b8:
a9:03:03:d3:df:d2:3e:de:e0:ae:d6:74:24:1c:d4:0a:76:a3:
e9:44:47:5a:d2:88:16:24:68:5d:cf:4c:33:4f:31:a9:ac:4a:
f7:9e:36:61:6a:1d:8f:cd:78:1a:18:47:49:5f:ed:e3:44:b5:
3c:c4:03:70:2a:68:85:6b:6c:ab:ca:ec:fb:ef:ed:60:ca:67:
94:b4:be:f1:a5:c1:4a:33:23:e4:46:4a:9a:aa:4d:2e:7c:63:
f8:ba:2b:ea:d3:17:d3:a9:7c:d3:b3:c1:0e:f8:24:52:95:8a:
1d:f4:b9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:51:13 2026 by rpki-client