Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
File: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft (raw, json)
Hash identifier: lAGbBK05VZj0yFQH7eqs9FFu4mqpLy8mr+3K2TVkm8s=
Subject key identifier: 12:CB:F1:7E:A7:3A:92:60:66:1E:A4:85:87:32:5D:76:C4:C0:0C:73
Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
Certificate issuer: /CN=472694d8a399a3a66f442ec72295c754acbbad41
Certificate serial: 019D2771F240858D600E3702ED21825213E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
Manifest number: 175F
Signing time: Thu 26 Mar 2026 00:01:12 +0000
Manifest this update: Thu 26 Mar 2026 00:01:12 +0000
Manifest next update: Fri 27 Mar 2026 00:01:12 +0000
Files and hashes: 1: 9Y9_-ghmVyAuliB_ZM6L4N2aR9Y.roa (hash: AlB+NM2coMQme+Vwjxfjbx7bvSYOwHST/cCoDhabdh8=)
2: BGx_SKWg0A0x4u2zJMu40hnQx4Q.roa (hash: 3vgm19azZKbua/L5jF2wErVGYC2PH4djUu3AdY79HJs=)
3: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl (hash: WAu1eSGgyalyZElDgAK7uUk9cELwddC0Rl4GR5+RZ3U=)
4: gHq4ZQAB43U72DuDXjjiZ0-2-00.roa (hash: UuXFiLQX/A/tFOUVtGrjRAOGOHSsYt/+KkH7+iWkPIk=)
5: xiXKqk3tGFwKj2r6-VSmJj7eq_k.roa (hash: 1zP1wd86zOnUvyVaHLe0E+PkkU2X/81i9Nla1ulLn0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f2:40:85:8d:60:0e:37:02:ed:21:82:52:13:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41
Validity
Not Before: Mar 26 00:01:12 2026 GMT
Not After : Mar 27 00:01:12 2026 GMT
Subject: CN=12cbf17ea73a9260661ea48587325d76c4c00c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:c0:19:5f:11:9a:23:17:a5:73:59:06:59:
12:88:a0:6e:b2:20:af:e0:6b:de:e0:e3:3b:5f:80:
dc:dc:93:02:30:34:2c:73:e9:0b:0b:35:70:32:25:
24:15:b9:9d:f4:88:bb:51:33:7d:33:18:d9:54:2f:
0c:3a:cc:b4:46:87:18:ea:de:81:d0:15:ec:5a:c8:
7e:e1:9e:c0:0e:55:45:55:b2:d7:8b:3c:2b:a2:a2:
ad:b4:c1:45:17:05:50:7f:56:54:35:4f:8d:27:6e:
a3:87:6c:21:79:07:16:94:0d:16:7f:e3:62:79:36:
a1:b6:f5:0d:17:94:59:0d:e1:0c:fc:39:2f:fe:02:
fb:57:ac:a3:37:18:36:95:94:6c:bb:b5:19:89:c0:
eb:1e:75:50:e0:04:3e:e7:80:74:20:2f:29:7d:bc:
ef:17:92:5c:f2:61:52:17:11:5a:7f:8b:2b:9e:8f:
08:55:5c:db:de:05:00:a0:2a:11:35:36:00:9b:21:
a1:d5:b2:ca:da:cc:ad:0c:10:c9:7e:5b:b5:9e:d5:
7e:02:ca:d1:56:f0:f5:65:de:82:d5:a0:91:81:07:
5d:27:04:69:a2:f3:76:cb:87:0a:6a:d6:e0:26:27:
6b:38:d4:82:43:ca:b2:86:2e:99:d9:5a:26:2f:da:
18:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CB:F1:7E:A7:3A:92:60:66:1E:A4:85:87:32:5D:76:C4:C0:0C:73
X509v3 Authority Key Identifier:
keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:77:14:a1:88:58:57:a9:71:72:32:78:10:9b:61:b5:43:a8:
75:8a:e7:df:cc:4e:19:e0:4c:1f:23:e3:22:5b:50:4d:03:da:
87:17:0f:f3:c8:10:3c:96:1a:69:2c:91:23:db:ca:20:62:3c:
44:4b:d6:2c:c0:6a:19:4a:83:c5:03:a4:05:6a:2b:2b:32:13:
22:a9:bd:10:ed:23:b0:91:76:a0:17:82:3e:b4:51:10:95:3d:
ff:7e:49:04:0c:69:2a:11:6c:12:01:8c:43:b6:ec:bc:a3:51:
e5:c2:bf:80:9a:fd:93:12:11:80:7c:2e:5e:c8:09:04:94:a8:
cf:7a:57:dc:11:20:a5:11:ea:ff:fa:d4:b0:13:91:3a:f6:a9:
b1:1c:81:e7:20:b2:f6:23:d5:8f:c7:83:a6:bf:d3:08:8f:5b:
10:43:dd:d8:06:24:37:91:bb:ef:6f:5d:2b:c5:c7:b7:c7:68:
2e:ec:b4:13:e4:7b:d5:7f:4e:5b:8e:5f:e7:2c:f4:b3:a5:7b:
ab:82:5f:c6:aa:6b:ac:5f:15:dc:5a:08:51:37:ed:0f:49:5f:
cb:07:92:ce:32:d9:ba:89:f3:d1:d7:74:99:8e:8c:8b:e8:76:
a4:ad:eb:40:c5:48:3c:17:e3:b8:76:98:53:32:2d:93:8b:ea:
12:9a:16:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:50 2026 by rpki-client