Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
File: mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft (raw, json)
Hash identifier: zjj1bTUaHzzQrmxWWhSXnNgOBA2KZ+ee/VECkHyM8P8=
Subject key identifier: 45:A1:4A:A7:9C:7A:D6:BF:39:BB:25:0E:01:E1:EE:26:A7:FE:D9:C7
Authority key identifier: 99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
Certificate issuer: /CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Certificate serial: 019D99999C0B167DF7E83061BA4AB781250F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
Manifest number: 0FA3
Signing time: Fri 17 Apr 2026 04:01:13 +0000
Manifest this update: Fri 17 Apr 2026 04:01:13 +0000
Manifest next update: Sat 18 Apr 2026 04:01:13 +0000
Files and hashes: 1: mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl (hash: 2kApn4U45367rNFTO3I2xertghE2UPGcVunKSXkdVVU=)
2: wBSqoLFJ8ghdrJRBL3vMWYtDQ7Y.roa (hash: NXyL8CpxXnA8Of0Eq4HRkrn4hYLRn+YBP9JG8zmPi+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:9c:0b:16:7d:f7:e8:30:61:ba:4a:b7:81:25:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Validity
Not Before: Apr 17 04:01:13 2026 GMT
Not After : Apr 18 04:01:13 2026 GMT
Subject: CN=45a14aa79c7ad6bf39bb250e01e1ee26a7fed9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:1f:30:5a:6f:4f:5c:32:6e:a4:2a:bf:7d:
b2:99:7d:b0:02:ee:48:ce:e7:e1:23:a3:71:11:cb:
d0:c0:b0:51:7c:8e:ce:e7:c0:f7:a1:3d:00:b0:02:
54:29:81:86:6a:b1:fa:d3:1d:a9:1f:83:56:c6:6d:
eb:dd:ed:2a:7f:d0:02:c7:98:47:2b:44:c7:29:8e:
84:90:21:43:cb:fc:6e:eb:0c:9e:1e:b5:c2:21:c5:
d9:64:20:83:d7:cd:16:6e:81:15:7f:fb:9c:15:aa:
58:29:e3:51:91:a2:0c:4d:20:46:90:fa:f0:cb:a1:
4f:54:92:14:14:ab:bb:e9:16:d3:c1:49:fd:11:92:
1c:d9:b0:45:83:bd:1b:c5:db:e5:de:7c:1c:81:78:
88:29:43:48:4e:99:68:0c:0d:fb:b8:94:0d:2d:33:
c3:56:97:70:6b:d7:53:9f:5a:52:79:56:dd:8b:9b:
e1:1b:c4:f8:7f:45:42:71:5f:b2:6f:69:11:14:a2:
82:70:71:7e:d7:f0:14:5a:38:d3:de:ec:a1:e2:2b:
a2:bc:c4:a6:07:80:5a:5b:9c:95:0e:a7:88:b6:ca:
5d:b7:9a:d7:73:9c:f2:9c:5a:17:00:54:d2:f1:3f:
f1:17:98:22:d3:1f:21:2b:0c:28:d4:f4:23:43:0a:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A1:4A:A7:9C:7A:D6:BF:39:BB:25:0E:01:E1:EE:26:A7:FE:D9:C7
X509v3 Authority Key Identifier:
keyid:99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8e:0b:f0:85:72:2e:95:e7:64:e7:c4:fe:f0:c7:2e:31:e5:
05:4b:fc:6e:7e:5b:83:a6:3f:4e:20:e5:ca:6b:c6:d4:11:a7:
b5:46:ed:66:11:d7:6d:5d:94:e8:86:72:f8:5c:a1:6c:b4:1c:
6f:0d:75:41:8c:ba:f7:19:54:e3:21:88:38:20:36:4f:0c:d4:
c3:a0:b4:a6:8e:6d:16:9c:39:76:74:c1:24:6c:0b:8a:8e:d1:
e2:5c:9e:e2:f5:16:48:c1:a1:bb:13:a0:22:ef:6b:12:d0:15:
54:2e:4b:f1:d5:3b:c0:cb:31:cc:4f:75:bf:9e:c0:8a:c7:8d:
ce:c9:97:c1:6b:16:8d:41:89:84:63:21:d3:3a:79:aa:9e:e1:
6d:20:fc:9a:20:c2:4e:bd:42:26:5d:44:5f:c3:c2:64:f9:7a:
69:ef:cb:57:fb:c4:5c:53:24:d7:c4:84:28:a6:3e:4a:f2:bd:
a8:ab:57:63:00:76:cc:f9:08:56:24:af:d1:19:b0:34:1a:d2:
f6:fd:c4:00:5d:bc:c5:2c:17:73:8f:1d:11:e5:5d:66:19:0c:
4a:7c:21:6a:a6:9f:ef:70:70:a1:7e:8d:e5:14:27:fd:1d:cb:
46:62:31:de:a7:4f:20:ac:78:dd:e6:0b:01:35:be:63:06:0d:
dd:d8:01:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:13 2026 by rpki-client