Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
File: RyjroAE1nN1Bg0b2UcChh8ifur8.mft (raw, json)
Hash identifier: jHFlUVwpHsBHGU1aIp4A/g0U327WezVJg8RDss205LI=
Subject key identifier: 4F:84:24:6F:21:6F:28:B2:55:18:F7:0E:12:D1:C4:00:8C:F3:1A:52
Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf
Certificate serial: 019D27DFBA1C13A42E6C49D9B0ED991FB566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:01:06 +0000
Manifest this update: Thu 26 Mar 2026 02:01:06 +0000
Manifest next update: Fri 27 Mar 2026 02:01:06 +0000
Files and hashes: 1: GUkWGU-5YSSWyPrOwq-ARQkvPxM.roa (hash: zDxdPWOaOyVyBd2CSMyYPVbN3CHQHLMBOzpB+fsTOpQ=)
2: RyjroAE1nN1Bg0b2UcChh8ifur8.crl (hash: UlDqXyZL1LfcNEQqWyGZ4pEaoXdLArFSeE+d0SZsB5w=)
3: u599xzfE-EX9olnz8cBJD6oZ2j8.roa (hash: rUizvq/CWTmc6UMWj8ItfZ7+jtqd5XX0DhV70/3vEUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ba:1c:13:a4:2e:6c:49:d9:b0:ed:99:1f:b5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf
Validity
Not Before: Mar 26 02:01:06 2026 GMT
Not After : Mar 27 02:01:06 2026 GMT
Subject: CN=4f84246f216f28b25518f70e12d1c4008cf31a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:7f:ba:3e:f6:a7:04:bc:98:18:08:1b:81:
5d:65:da:63:40:65:eb:a6:43:5d:5a:7f:22:17:6b:
24:0c:81:01:68:95:a9:f7:de:99:28:57:1e:49:71:
53:f0:6c:39:98:75:15:ba:41:43:16:6c:72:a0:1e:
a8:bc:c0:5b:95:e7:99:98:29:94:3c:ae:88:9c:d8:
0b:0f:0d:9c:66:d5:60:42:72:8e:98:75:49:0e:42:
a5:82:b8:41:36:50:b3:e7:c9:7f:b0:78:35:fb:49:
d6:6d:d4:50:2a:1f:00:81:3c:c3:54:5a:70:f8:1c:
cc:2c:bc:e1:2e:fd:16:cf:be:6e:cb:01:6c:db:6c:
ef:86:2c:d4:37:f1:32:2d:45:1b:4e:0e:41:c9:d6:
6a:44:66:6f:49:97:d9:5c:e7:1e:df:30:e7:31:2d:
2b:17:82:30:0c:d8:8b:12:ee:b4:63:74:ca:83:4b:
cf:dc:a1:7c:ff:df:2b:e4:31:c4:84:f6:53:c6:22:
91:1c:74:64:60:da:51:58:cc:88:28:fe:69:53:92:
a0:a5:e4:c5:a7:e8:f0:00:9b:14:6f:32:ef:94:1e:
32:1b:84:1e:ba:46:95:a3:08:a6:34:f0:7c:ae:37:
d0:8c:59:b4:99:07:a8:0e:21:3d:38:89:1a:16:39:
3e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:84:24:6F:21:6F:28:B2:55:18:F7:0E:12:D1:C4:00:8C:F3:1A:52
X509v3 Authority Key Identifier:
keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:22:b1:b3:a6:6b:91:85:5a:ff:e2:e4:85:78:6a:4c:43:89:
2e:3b:7c:f4:52:90:0c:00:f1:86:02:f1:6e:ee:35:2d:06:ce:
33:1e:57:67:f4:e2:2f:b4:d5:f2:a3:0c:c1:48:0a:ae:23:9f:
03:d3:2e:91:1c:79:e0:5f:95:61:21:3c:1b:d8:ce:0b:6a:a8:
1f:6a:4d:a2:8e:29:f9:6c:e9:1f:80:67:ed:95:48:2d:ba:57:
5e:3d:89:28:52:3f:a2:40:18:52:60:d0:94:aa:a3:0c:44:fe:
50:af:23:05:ca:99:e2:38:3e:98:a1:05:12:30:07:bb:a8:2c:
4f:78:60:00:ad:11:5b:3d:e2:d2:31:15:fb:81:0a:fa:e7:e4:
a3:b7:d1:31:25:ea:3c:c5:0a:bf:dc:ec:d3:30:6d:09:1e:43:
59:f6:02:8d:b3:db:c8:4b:b8:db:50:83:7a:36:9e:f2:af:b0:
5b:eb:57:33:84:e9:dc:bd:c7:90:bc:bd:e2:77:fb:a1:be:1a:
6a:be:17:e3:a4:74:ee:69:6e:e2:93:fd:79:d9:20:5f:e9:da:
24:38:c2:d0:65:45:6a:b0:c1:ef:22:05:c5:13:e9:56:8f:f1:
a5:11:70:2f:4c:6c:a8:9e:38:87:a8:21:f8:29:af:57:13:98:
11:fc:81:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:56 2026 by rpki-client