Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
File: RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft (raw, json)
Hash identifier: Aj67fbYodEv4QsnhSWdIrcvnPuhpgwEOlCwwPP8A5uM=
Subject key identifier: 77:3A:95:DC:FA:9E:74:9E:71:98:74:1A:83:4D:FD:DF:37:F7:72:A6
Authority key identifier: 45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0
Certificate issuer: /CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0
Certificate serial: 019D2AE13682D97C9CE6F6755FCC87C41808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
Manifest number: 0FBA
Signing time: Thu 26 Mar 2026 16:01:35 +0000
Manifest this update: Thu 26 Mar 2026 16:01:35 +0000
Manifest next update: Fri 27 Mar 2026 16:01:35 +0000
Files and hashes: 1: RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl (hash: oO89hHSY/m5FjyQRYfMGD+XewhbAcvV0GFnhYHaCVrI=)
2: iG_jpL5evYKdvaSXMweO07u-LZE.roa (hash: bAZcm3e4oR8RQlmgma0fN3YtSn8DFyr4KMu8blXi4D0=)
3: pMLFHgvr97zNskO8YN_sDv0Y-aU.roa (hash: OO8vYGJ08onKRzkSKXfvr1cztRsM4kZCRCHxKVslWRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:36:82:d9:7c:9c:e6:f6:75:5f:cc:87:c4:18:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0
Validity
Not Before: Mar 26 16:01:35 2026 GMT
Not After : Mar 27 16:01:35 2026 GMT
Subject: CN=773a95dcfa9e749e7198741a834dfddf37f772a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:35:61:a7:d4:2c:4a:c5:30:7f:7d:77:f3:a1:
07:e3:c2:b8:fd:83:af:b2:db:1c:c2:2b:9c:f5:dc:
a1:0b:bf:45:39:e6:de:b2:cc:de:ac:ad:09:52:3c:
b7:96:00:b6:9c:6b:f2:60:bc:99:17:8d:29:a8:f0:
a7:f7:3b:2d:ba:13:79:67:a3:b4:b1:ba:25:68:5d:
cf:f3:13:4e:a7:d8:23:10:be:86:46:3f:bf:ed:ef:
b7:5c:88:de:81:0a:f5:bb:3d:19:e0:d9:ad:d1:a1:
b7:fc:bc:ac:09:82:6b:5d:02:89:62:db:b7:21:1d:
16:1b:43:33:a9:eb:2a:bf:a0:fa:16:3b:1c:98:e7:
0f:eb:e5:5f:0d:e6:00:87:c9:b7:1e:52:96:c0:14:
11:9c:76:46:13:2a:1b:a5:f2:28:0f:4b:d0:6c:29:
43:0a:d1:a5:0a:5f:4e:68:1e:d7:2b:2b:ac:fe:d9:
d0:4e:2c:84:65:bd:ce:81:3d:e3:6e:fe:6e:67:b7:
3b:60:68:a5:20:00:1c:08:07:85:88:fd:1c:db:b5:
e8:03:cd:ad:43:62:ff:f7:1a:93:85:f6:62:74:ee:
ff:d8:6e:74:ea:35:51:c4:ae:7b:5b:75:74:c2:86:
18:70:f1:3c:4b:e2:1d:cb:8e:2f:61:51:c8:53:3d:
13:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3A:95:DC:FA:9E:74:9E:71:98:74:1A:83:4D:FD:DF:37:F7:72:A6
X509v3 Authority Key Identifier:
keyid:45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4a:ca:76:3b:a3:7e:5f:4e:6a:9e:57:7e:b1:04:38:2f:8a:
62:66:ec:ae:50:17:69:ad:2e:ff:48:fb:17:dd:4d:6e:00:47:
c1:04:42:d4:dd:cf:fb:26:1f:6d:de:f1:e2:66:76:28:cf:1a:
e8:76:d5:c7:41:67:1a:4f:10:64:de:72:ed:17:83:e0:80:5b:
41:20:f9:c6:d6:bd:19:4f:cc:b4:1e:7f:2f:1c:1c:9e:08:42:
e2:08:cf:62:dd:f3:dd:f2:d4:a5:4c:75:ba:9b:78:ae:ec:7d:
3b:29:53:f0:bf:8d:7d:54:56:9f:2d:53:67:eb:86:e1:07:d4:
4c:e3:56:16:45:0d:df:79:bc:e5:a0:14:aa:17:8b:fa:1a:b3:
95:a1:1e:16:7c:50:61:f5:c2:e8:ed:87:f2:47:51:52:fd:34:
bb:a5:4f:fe:1a:58:12:c5:65:10:a0:ea:0d:0e:60:67:56:91:
f9:61:2f:61:dd:94:3a:8e:21:c2:bd:9c:0c:7b:8e:60:38:38:
17:6b:a8:dc:a6:91:0e:58:a3:4c:45:d2:b5:ac:de:92:45:96:
10:7e:03:af:a1:92:cc:a7:d9:49:55:54:11:61:fd:f0:40:5d:
e6:31:e5:a0:c0:a8:c0:fe:f3:8c:79:d0:4d:fc:d3:07:f1:98:
e8:56:b4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:46:00 2026 by rpki-client