Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
File: ryv4L9oo4I9iKUYLouJBQUZDMeU.mft (raw, json)
Hash identifier: X8wV7coM6DYlLiuDLgeOciRSW2mhoO6g5fN2o2M9FE4=
Subject key identifier: B1:C1:55:E9:C6:3F:8B:EB:53:A1:3E:25:9D:CB:C3:04:EB:30:E0:9F
Authority key identifier: AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
Certificate issuer: /CN=af2bf82fda28e08f6229460ba2e24141464331e5
Certificate serial: 019D24DE81F2E87C52AC287BCB7DDB6CCB21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
Manifest number: 1873
Signing time: Wed 25 Mar 2026 12:00:55 +0000
Manifest this update: Wed 25 Mar 2026 12:00:55 +0000
Manifest next update: Thu 26 Mar 2026 12:00:55 +0000
Files and hashes: 1: 0EjZecwBBAe7gj4B38NKcAdvVqQ.roa (hash: LrBTNS2rQ9a2kQJTHyUHfQ/3VciR/DEOj3SyOhIuTGk=)
2: ojqmlwhhXFrCH170geti55uM044.asa (hash: 2ItvtmzRux4XPVZnMHD/8EZ3jabau5ok75G2+Um7ykI=)
3: ryv4L9oo4I9iKUYLouJBQUZDMeU.crl (hash: 0q5fskjfOs1G0bFQTMQHLdaAK3gC53hz0617GlWvyO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:81:f2:e8:7c:52:ac:28:7b:cb:7d:db:6c:cb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2bf82fda28e08f6229460ba2e24141464331e5
Validity
Not Before: Mar 25 12:00:55 2026 GMT
Not After : Mar 26 12:00:55 2026 GMT
Subject: CN=b1c155e9c63f8beb53a13e259dcbc304eb30e09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:7b:9f:09:18:3c:f1:3c:6f:b1:91:74:e9:
37:93:35:44:f8:84:fd:08:8d:da:3b:59:05:84:47:
00:de:83:cb:45:b5:97:ff:75:1d:0e:85:12:5b:8b:
69:b7:f7:98:8d:83:4e:2e:06:8c:e0:db:b6:1e:a4:
be:c3:a1:9f:c0:2c:30:ee:7a:e3:79:61:32:3c:f3:
c3:35:39:07:91:db:39:63:39:2b:b8:45:c7:ac:68:
6e:3f:7b:d7:de:9c:cd:e6:24:53:f8:ce:db:41:47:
8a:8a:4e:48:73:b3:fe:2f:27:ad:ca:2a:f8:02:a0:
68:93:42:95:73:b1:13:85:01:56:0f:ed:d2:f9:b4:
f4:a1:2a:d7:1f:14:e7:a2:fe:d3:ad:8d:20:52:26:
b5:42:05:f6:1d:30:24:0c:40:fc:14:f0:4e:d3:d4:
96:ac:05:69:43:bb:09:24:b0:3a:e9:0d:21:a1:b4:
87:72:c1:0c:fc:ea:c3:ae:11:14:70:97:42:f8:22:
bf:26:a2:e1:df:f1:96:a6:97:41:83:e6:bb:47:61:
c9:25:24:7d:5d:07:6b:1f:03:0e:a9:6a:0d:06:5c:
2e:59:73:fd:2e:29:c1:f6:a1:41:db:12:47:bb:74:
e9:21:01:ab:13:2e:c9:75:ce:bd:de:2d:5c:9c:21:
d7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C1:55:E9:C6:3F:8B:EB:53:A1:3E:25:9D:CB:C3:04:EB:30:E0:9F
X509v3 Authority Key Identifier:
keyid:AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:f4:fb:10:ff:d9:8a:ad:60:a2:bb:ae:35:73:d8:36:2e:9e:
06:15:1a:48:d6:4b:a0:c0:3d:26:a2:32:ba:ad:5f:ed:9c:e2:
72:3f:ec:ba:c5:ce:ce:a3:f4:45:30:6b:db:9e:27:08:02:da:
f4:5b:41:6a:e2:0c:64:35:ec:77:f5:f6:99:42:ca:df:8e:f7:
9c:1c:55:98:39:df:79:e0:c6:20:ce:e8:56:7f:e2:c9:b9:fd:
27:86:7a:66:0f:e4:30:c2:35:41:76:87:d1:93:02:f0:8c:83:
ff:be:63:51:a0:1b:ed:4b:d0:dc:87:94:38:b1:80:8b:ca:af:
46:2e:ff:2c:21:55:0f:5c:0c:89:bc:38:ee:b8:d2:43:62:d8:
ea:ee:7c:ea:ff:2a:25:d1:a9:79:ae:a9:c7:c0:68:2a:de:42:
80:f8:58:30:52:e5:4a:6e:eb:8f:6f:0c:a7:70:f2:d9:cc:8a:
e7:02:df:aa:40:bc:3c:67:a6:81:10:a9:48:79:c9:30:fa:b6:
1d:16:c3:cc:87:65:83:90:63:f4:cb:72:e6:54:7c:b5:46:04:
33:53:39:bb:8b:8f:b4:24:9d:3f:d3:8f:fd:65:f1:71:ba:4b:
65:f0:e4:24:19:c1:98:52:a2:c8:8b:68:ce:81:d7:d9:39:24:
1a:9b:3c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:55 2026 by rpki-client