
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
File: RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft (raw, json)
Hash identifier: PZwr0lRBTQar79SOs46g74eAh+4LGl8Khr4UN4YyLKA=
Subject key identifier: 55:1A:3B:3C:34:24:E5:9E:4D:76:C1:5C:8B:5C:47:5E:1C:19:F8:9F
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial: 019D2772C379085DD8FC6D14A0C3E7BC47B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
Manifest number: 1892
Signing time: Thu 26 Mar 2026 00:02:05 +0000
Manifest this update: Thu 26 Mar 2026 00:02:05 +0000
Manifest next update: Fri 27 Mar 2026 00:02:05 +0000
Files and hashes: 1: 2iOxvtLJRmqeCCs6jsBCnhsmuMk.roa (hash: xSNUQ0HB9QKxYzPdIeyT3O6eENXbIaUd/nPbY1Wjb78=)
2: EfsvGGiWagU_0mzeylXRaksRn_8.roa (hash: KEPOuFM2LSKDwp8tR2Mp0dmeSc6fJlmHWiPoO6jvt04=)
3: RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl (hash: V8tkcuJVr/sWMyl/MxMxnXig3f7U/0Y8f8bkSROOmBw=)
4: zT3qRTo_Bh_Y4PRUIgbcM4_OPhI.roa (hash: DLHVLGVEeEcowvlPfROsXYSKn9EL35p8lKZcaisVJ0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c3:79:08:5d:d8:fc:6d:14:a0:c3:e7:bc:47:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Validity
Not Before: Mar 26 00:02:05 2026 GMT
Not After : Mar 27 00:02:05 2026 GMT
Subject: CN=551a3b3c3424e59e4d76c15c8b5c475e1c19f89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:a8:88:f7:b2:35:20:9f:7e:2d:dc:01:1b:
a9:85:dc:3f:aa:22:8f:5a:8f:45:32:4e:32:1a:50:
8b:98:3f:14:8d:fa:c6:6c:ce:78:9d:9b:8d:94:76:
f1:3b:e8:ca:61:13:c2:cf:bc:89:9d:ac:bf:92:5f:
30:06:e6:1f:a8:f6:24:25:57:cd:b8:73:a0:e8:c6:
30:74:b6:52:19:c9:ac:9e:3e:da:13:1f:cc:2f:8d:
84:18:c1:a9:42:c1:7b:01:c8:b9:83:8e:7f:a9:15:
4e:bd:ca:97:cd:45:8a:1e:93:9b:b3:1d:a7:1a:10:
24:19:44:8d:3d:ac:4d:a4:c5:6e:02:b9:24:be:91:
a5:2c:89:44:92:91:e7:31:3b:16:42:ab:bb:41:3b:
68:52:08:60:77:2b:be:aa:28:55:9d:2d:db:b1:95:
a5:08:b8:a8:8b:7b:8a:41:9d:aa:51:1d:16:b3:3f:
6d:55:76:fa:5e:ed:9a:72:98:a7:c8:c1:cb:1f:a9:
9c:5f:f4:07:9d:b1:55:68:8f:f4:ec:1b:c5:90:fe:
6f:db:4b:b0:48:80:5e:00:ba:53:ab:40:4b:3b:1e:
8b:4c:78:04:9d:36:42:81:0b:94:b3:86:df:8f:90:
1f:76:b9:61:9a:49:66:be:25:e4:5c:8f:da:30:48:
a1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1A:3B:3C:34:24:E5:9E:4D:76:C1:5C:8B:5C:47:5E:1C:19:F8:9F
X509v3 Authority Key Identifier:
keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:04:01:cd:05:5f:a6:dd:37:4e:3e:88:a1:e5:08:6f:08:94:
d0:60:61:f3:44:7e:8d:ee:37:c7:31:9e:68:8e:1e:af:32:0d:
40:35:3e:4e:0e:de:89:17:86:cd:a3:72:0e:6f:4d:0b:44:c4:
72:d1:36:91:4d:3d:c5:1c:23:fb:57:05:09:7c:f1:e4:42:4c:
34:b3:90:6c:a0:95:d8:af:94:09:e5:e1:8f:44:e7:d6:a1:00:
59:83:1b:e1:36:0e:05:ce:a4:be:4e:d8:17:31:56:a1:d9:84:
76:ad:67:93:a2:74:e6:12:d7:12:6d:a9:85:db:22:0a:62:fc:
85:e2:62:e6:e8:b0:62:67:61:d5:dc:26:32:54:fe:ff:e4:f2:
75:12:71:74:79:f1:49:c8:a4:18:4e:97:a9:ae:05:27:2f:f0:
08:2d:a4:49:68:8b:48:4f:47:51:3e:7a:c9:97:5b:12:6d:f9:
d3:0c:49:a7:e6:8e:0e:a7:d0:19:11:75:07:dd:d8:48:13:59:
ec:54:c9:79:79:03:9f:b6:f1:3b:f5:c3:a2:91:d2:6e:f3:1a:
f6:53:c5:fa:f9:c0:f5:5f:72:f3:87:48:5e:bb:dd:56:e6:54:
5d:e5:8e:c1:2b:eb:34:2d:18:52:5e:95:ef:09:96:88:63:79:
9f:48:73:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncsN5CF3Y/G0UoMPnvEeyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MjJhZWEwZWY0YzA2NjdkYjgxOWY1ZDVhM2RhZWE2Mzk5
ZjAzOGMwHhcNMjYwMzI2MDAwMjA1WhcNMjYwMzI3MDAwMjA1WjAzMTEwLwYDVQQD
Eyg1NTFhM2IzYzM0MjRlNTllNGQ3NmMxNWM4YjVjNDc1ZTFjMTlmODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRyoiPeyNSCffi3cARuphdw/qiKP
Wo9FMk4yGlCLmD8UjfrGbM54nZuNlHbxO+jKYRPCz7yJnay/kl8wBuYfqPYkJVfN
uHOg6MYwdLZSGcmsnj7aEx/ML42EGMGpQsF7Aci5g45/qRVOvcqXzUWKHpObsx2n
GhAkGUSNPaxNpMVuArkkvpGlLIlEkpHnMTsWQqu7QTtoUghgdyu+qihVnS3bsZWl
CLioi3uKQZ2qUR0Wsz9tVXb6Xu2acpinyMHLH6mcX/QHnbFVaI/07BvFkP5v20uw
SIBeALpTq0BLOx6LTHgEnTZCgQuUs4bfj5AfdrlhmklmviXkXI/aMEihGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUaOzw0JOWeTXbBXItcR14cGfifMB8GA1UdIwQY
MBaAFEcirqDvTAZn24GfXVo9rqY5nwOMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnlLdW9POU1CbWZiZ1o5ZFdqMnVwam1mQTR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84MGMzODctYjIwYi00MzBhLWE1ZTYt
NmUzMDc0YzZjNjYzLzEvUnlLdW9POU1CbWZiZ1o5ZFdqMnVwam1mQTR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84MGMzODctYjIwYi00MzBhLWE1ZTYtNmUzMDc0YzZjNjYz
LzEvUnlLdW9POU1CbWZiZ1o5ZFdqMnVwam1mQTR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgQBzQVf
pt03Tj6IoeUIbwiU0GBh80R+je43xzGeaI4erzINQDU+Tg7eiReGzaNyDm9NC0TE
ctE2kU09xRwj+1cFCXzx5EJMNLOQbKCV2K+UCeXhj0Tn1qEAWYMb4TYOBc6kvk7Y
FzFWodmEdq1nk6J05hLXEm2phdsiCmL8heJi5uiwYmdh1dwmMlT+/+TydRJxdHnx
ScikGE6Xqa4FJy/wCC2kSWiLSE9HUT56yZdbEm350wxJp+aODqfQGRF1B93YSBNZ
7FTJeXkDn7bxO/XDopHSbvMa9lPF+vnA9V9y84dIXrvdVuZUXeWOwSvrNC0YUl6V
7wmWiGN5n0hzdw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:26 2026 by rpki-client