Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
File: mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft (raw, json)
Hash identifier: ANbtyTvbTb00aDW+6AomFF1aV4i9O4YadS7ViG8KfLU=
Subject key identifier: F5:3A:C8:D3:7F:68:F5:98:AB:81:F6:1D:74:AE:AB:88:D7:4D:43:F7
Authority key identifier: 99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
Certificate issuer: /CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Certificate serial: 019CAA215CBE73D2A3CFB9FB936108291404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
Manifest number: 0F27
Signing time: Sun 01 Mar 2026 16:00:38 +0000
Manifest this update: Sun 01 Mar 2026 16:00:38 +0000
Manifest next update: Mon 02 Mar 2026 16:00:38 +0000
Files and hashes: 1: mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl (hash: AMpCajGHbzG6830ICNX4zugenwHdNoDFemq3aDkxJIc=)
2: wBSqoLFJ8ghdrJRBL3vMWYtDQ7Y.roa (hash: NXyL8CpxXnA8Of0Eq4HRkrn4hYLRn+YBP9JG8zmPi+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:5c:be:73:d2:a3:cf:b9:fb:93:61:08:29:14:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Validity
Not Before: Mar 1 16:00:38 2026 GMT
Not After : Mar 2 16:00:38 2026 GMT
Subject: CN=f53ac8d37f68f598ab81f61d74aeab88d74d43f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:99:f8:ba:db:4a:4c:63:22:67:51:c5:b2:d3:
9d:0f:6d:6f:53:cf:b8:26:96:27:f2:23:07:a2:c9:
c3:c7:6e:c1:af:d6:2b:9e:19:b9:90:7a:fa:e3:58:
34:31:62:48:e2:df:62:1f:bc:b7:06:0d:dd:60:8e:
4b:12:5d:a0:2d:fd:f1:78:25:17:98:c2:05:3b:29:
28:14:3f:5c:e8:6e:c8:e7:4d:b9:27:c7:ea:e2:ea:
99:13:3d:7d:2a:28:45:2f:6a:1d:cc:e4:ef:9d:ea:
5a:6d:28:bd:6a:5b:d3:5e:85:5b:df:8a:a9:2a:0b:
35:5f:96:d3:7c:3f:2e:d3:af:d3:5c:a8:eb:cc:16:
19:da:e2:1a:6b:4c:87:79:a3:4e:9e:a9:7f:67:b2:
18:32:50:a7:8b:26:fa:c6:6e:71:5f:c8:43:5c:46:
c9:e9:f6:b5:82:c4:41:ca:5c:8c:87:60:3c:03:4c:
94:9a:26:ac:c1:92:11:c7:ff:35:f5:85:0b:74:2e:
ec:e3:1b:22:f5:c0:9f:7e:e8:37:94:5e:9f:16:0f:
bc:52:19:28:e5:24:ef:7f:58:9d:dc:70:39:7f:05:
f6:f3:10:f8:0b:c3:23:88:cd:4d:cd:fa:58:42:f8:
1c:cc:9c:4c:ce:26:1c:ff:64:0b:1d:e3:28:0a:42:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3A:C8:D3:7F:68:F5:98:AB:81:F6:1D:74:AE:AB:88:D7:4D:43:F7
X509v3 Authority Key Identifier:
keyid:99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ce:09:eb:7e:4e:de:19:9c:9d:9e:b1:12:3c:25:7e:d6:21:
2a:0b:ae:1a:55:04:96:c5:92:e2:7c:9d:cb:b0:90:fc:24:32:
12:15:a4:0e:78:04:a5:c4:3c:93:e4:75:c3:7b:79:6d:b4:c1:
df:b8:23:52:26:50:4c:04:0f:8a:7a:aa:99:c7:f8:89:d6:c4:
b2:85:df:2b:b5:f1:90:2c:d1:f7:4a:9e:1c:19:3a:28:a6:62:
32:6d:67:c1:85:e5:86:ef:16:61:1f:cc:59:a4:1d:b6:1b:59:
13:c7:81:af:2b:df:46:5e:fd:2c:fa:89:6b:b8:8e:c3:43:1a:
cc:7c:45:f1:5a:c8:22:5f:2d:5c:8d:fe:78:c3:ef:c1:57:84:
af:4f:e5:ca:4b:34:90:ea:71:6f:b1:ab:f4:28:62:82:a9:48:
67:1d:69:e9:b7:b8:80:27:e1:72:62:64:7b:11:2c:70:0b:ce:
d0:df:c3:f3:26:59:2f:95:aa:1d:53:a1:57:d2:d7:f3:e4:8c:
64:05:41:04:95:10:31:75:22:55:d1:df:9c:4f:4c:b4:c3:27:
9c:2c:e2:7b:34:97:0d:5e:3d:b0:91:b2:be:f8:cc:58:d5:af:
bb:c1:1d:9a:62:d3:1f:b4:7d:7d:0d:2c:6d:b5:27:87:5f:4f:
37:01:b6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:19 2026 by rpki-client