Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
File: ryv4L9oo4I9iKUYLouJBQUZDMeU.mft (raw, json)
Hash identifier: rSua6ZtCgjLxGy9+eUS2qA+0oiWstky+zgvEdpkjIt4=
Subject key identifier: A5:6A:F4:3F:3F:2D:73:6F:D4:FF:B0:4D:E4:43:3E:FE:BD:B5:08:18
Authority key identifier: AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
Certificate issuer: /CN=af2bf82fda28e08f6229460ba2e24141464331e5
Certificate serial: 019E1C0F8392AD30B19E7976FD69AC147BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
Manifest number: 18F3
Signing time: Tue 12 May 2026 12:00:39 +0000
Manifest this update: Tue 12 May 2026 12:00:39 +0000
Manifest next update: Wed 13 May 2026 12:00:39 +0000
Files and hashes: 1: 0EjZecwBBAe7gj4B38NKcAdvVqQ.roa (hash: LrBTNS2rQ9a2kQJTHyUHfQ/3VciR/DEOj3SyOhIuTGk=)
2: ojqmlwhhXFrCH170geti55uM044.asa (hash: 2ItvtmzRux4XPVZnMHD/8EZ3jabau5ok75G2+Um7ykI=)
3: ryv4L9oo4I9iKUYLouJBQUZDMeU.crl (hash: QGcPF4dRaQT+dU+rgAlK7JrGmj+Oiq2aLay6F6bIdEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:83:92:ad:30:b1:9e:79:76:fd:69:ac:14:7b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2bf82fda28e08f6229460ba2e24141464331e5
Validity
Not Before: May 12 12:00:39 2026 GMT
Not After : May 13 12:00:39 2026 GMT
Subject: CN=a56af43f3f2d736fd4ffb04de4433efebdb50818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:0c:05:e0:a5:6c:e4:49:dc:ec:df:82:a8:
16:40:73:9c:d8:f7:20:6d:bb:76:b2:e1:6d:a2:de:
8f:29:82:14:3a:a0:bf:0e:ae:bf:8f:2e:63:07:a3:
8a:e7:d6:06:5f:a8:1b:c9:de:1c:a2:93:da:67:45:
a9:42:64:1f:af:11:80:54:48:5b:67:90:4e:1c:09:
e8:a6:d7:cc:62:40:1a:4a:7c:79:69:d7:b1:ca:12:
b7:02:73:1f:38:ae:3e:13:92:9c:5a:da:fa:a3:fb:
81:71:ea:33:4b:88:a3:32:67:40:3a:e9:2d:47:d9:
b0:21:2d:8e:81:06:eb:36:0b:76:f5:e9:64:f8:87:
f3:e1:6b:ab:60:5b:59:27:21:9a:e4:b8:b5:b6:8c:
f1:67:34:04:7f:1e:16:a4:b7:24:8e:e2:ca:e5:61:
45:a3:aa:1b:54:ca:c9:91:b7:55:a2:13:89:61:fc:
9b:e1:69:25:68:84:07:8c:01:e0:3d:f9:0a:a8:8e:
b3:07:4a:e2:b9:a8:ce:1e:7b:a9:01:9e:38:e6:5c:
8b:8f:90:25:8c:26:e0:2e:20:e4:fc:2d:51:d4:38:
8f:2a:20:94:e7:12:d5:e3:5e:a1:c2:eb:3a:1e:05:
52:0c:e6:af:70:54:0f:35:d8:3d:5d:18:f7:6a:43:
63:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6A:F4:3F:3F:2D:73:6F:D4:FF:B0:4D:E4:43:3E:FE:BD:B5:08:18
X509v3 Authority Key Identifier:
keyid:AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4f:a3:3b:fd:1e:19:54:b1:7b:66:60:a8:ec:02:f8:85:f9:
1c:4f:22:df:50:71:c2:d5:33:b0:46:79:00:9c:35:6a:d0:5e:
0a:b4:40:5e:e6:9a:6d:c6:b0:c2:72:3b:62:7b:05:eb:ab:f4:
1f:b8:ae:e9:04:4c:d4:17:e3:27:00:d9:14:67:11:e1:c9:7e:
eb:bb:07:b2:83:da:5c:12:44:7a:51:61:4e:53:e6:19:4d:10:
2f:a7:82:c9:8f:7f:f0:40:5c:f7:6e:d4:78:04:96:61:86:03:
3f:02:68:70:b3:be:38:cd:04:ff:2e:ce:67:04:c1:e6:16:7b:
6c:4c:5d:e6:39:e4:22:2a:1f:ef:1a:43:0e:75:fe:a4:47:9a:
76:ee:23:a5:4d:dd:46:cf:df:fa:1c:b3:86:a9:83:1d:5b:39:
ca:a7:5c:16:1b:cf:ec:27:b3:ae:a1:d7:b9:da:18:fb:78:38:
fd:a9:7f:cc:3c:29:3e:9c:1e:db:84:03:3c:18:3f:46:b2:e5:
c9:dd:c5:0b:3f:04:0b:4d:33:b8:34:15:8d:2e:a2:24:df:2c:
1a:f6:17:a0:e4:29:5e:1b:88:34:cf:aa:8c:19:d7:28:cb:3f:
76:20:8c:2e:ff:d5:da:a4:dc:d0:70:e1:7e:1c:b9:6f:f9:eb:
26:d9:75:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:19 2026 by rpki-client