Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
File: RYg0xSq-MEJ_CiKqRv09CAntRYU.mft (raw, json)
Hash identifier: 7/sZUGHfw1XOjKd3D3L9I6Kj+0boIA0rdPYhQ5Xxllg=
Subject key identifier: 44:CE:B0:90:BB:A2:41:E7:8C:22:28:AC:23:CD:F1:18:F7:18:B7:4F
Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
Certificate issuer: /CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Certificate serial: 019D26CCF6B163DAF25485DD739127E94B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 21:00:59 +0000
Manifest this update: Wed 25 Mar 2026 21:00:59 +0000
Manifest next update: Thu 26 Mar 2026 21:00:59 +0000
Files and hashes: 1: 1urLz8sI-D-U1DWR00K73cOQtJw.roa (hash: h9FTShSF6pUVjdu4OolKEkCN6zMb2Hm/ugBT1eJvw3M=)
2: RYg0xSq-MEJ_CiKqRv09CAntRYU.crl (hash: JbJKjZfrdFkhWho5RF+yd2GaLMchDmPBUwWaOTUIYO0=)
3: cQXpdp-3wdqJlOzPKIgd4leRkno.roa (hash: voWCMVgfvUJ+YC+Z4yIk4orQRD3bQ3xmCc1/ZJDuxG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:f6:b1:63:da:f2:54:85:dd:73:91:27:e9:4b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Validity
Not Before: Mar 25 21:00:59 2026 GMT
Not After : Mar 26 21:00:59 2026 GMT
Subject: CN=44ceb090bba241e78c2228ac23cdf118f718b74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:da:82:b2:45:7a:ec:5a:3f:c6:0b:b2:62:
6f:b5:88:ba:e8:e2:59:3f:9d:ef:de:58:2a:f2:56:
71:26:60:5a:77:5d:3d:5c:09:3a:08:55:c0:4e:90:
db:a3:47:b4:40:54:8a:5d:93:d8:34:f4:bf:1e:6e:
5c:fa:fc:32:72:d2:75:0d:07:07:bd:6c:31:69:10:
57:58:74:2c:87:14:a1:cc:04:bc:75:8f:45:04:6b:
e1:f7:6b:6b:ab:04:05:7d:bd:c4:7b:55:95:b4:fb:
b1:12:a1:49:f8:9a:31:df:70:a7:a0:68:da:7d:51:
78:0f:f7:6b:f8:50:c9:63:19:7d:89:10:58:60:11:
67:db:75:4d:9c:a3:1e:32:54:ba:db:c3:16:8e:7d:
d8:92:58:25:55:2e:df:18:60:96:12:70:ca:5c:ea:
20:e9:37:d7:88:f6:e6:76:5f:f1:d7:f0:4f:54:d5:
c6:7f:12:e8:06:c3:91:53:02:a7:0e:d9:39:6e:3b:
d0:d2:3b:6b:43:da:d7:82:f4:7c:51:06:9a:0f:f2:
e4:e7:fe:ac:b8:be:c1:4e:a6:d0:ee:fb:24:c9:10:
73:d3:75:b7:5f:2d:53:61:4a:4c:ef:8c:62:c7:94:
36:65:ca:df:bf:3b:79:f3:7b:28:d9:b5:1f:dd:bb:
3b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CE:B0:90:BB:A2:41:E7:8C:22:28:AC:23:CD:F1:18:F7:18:B7:4F
X509v3 Authority Key Identifier:
keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ff:dd:23:75:a1:54:46:57:0e:e6:83:6e:b0:4c:76:21:b6:
3b:2d:ee:48:61:74:16:50:ff:83:64:4e:6a:6b:06:34:22:cd:
80:ee:dd:5f:f0:8a:9b:d3:99:a0:b7:c8:99:b5:92:d0:6d:4c:
6a:77:86:d7:20:1e:ff:85:62:b8:1e:b7:34:28:b5:f8:af:69:
da:d5:14:6a:06:ef:ed:fa:a3:f2:d4:77:f3:b2:da:f0:a7:cc:
61:9b:75:ad:b7:f1:fa:62:3d:4a:fb:98:05:1d:d6:a4:09:35:
a3:d2:11:82:c4:ed:81:58:db:55:6e:56:eb:df:f4:b2:17:96:
34:4c:1f:7f:ce:52:ee:74:6a:b3:04:44:88:20:97:a3:c8:f5:
d5:bf:7c:e3:dc:26:0c:60:15:04:4c:df:b5:e8:81:97:29:fd:
63:35:5c:51:e9:5c:25:3f:8f:80:9d:27:5d:56:5b:8e:4d:c3:
4b:c7:c7:90:aa:99:5e:06:be:e5:3d:57:a6:b6:13:47:6c:59:
94:e2:c2:2b:68:03:13:f6:e6:cd:0b:53:ec:f7:9f:23:74:e6:
8e:5c:56:4d:4d:f8:d6:a5:e4:cf:79:3f:80:c0:ad:0c:85:f7:
f0:1d:42:30:a8:df:8c:dc:5c:66:d3:83:7e:75:26:e0:45:9b:
a7:2c:e0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:39 2026 by rpki-client