Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
File: ryv4L9oo4I9iKUYLouJBQUZDMeU.mft (raw, json)
Hash identifier: 4O/tkNYaq7ki1XrGgOENwEsbUwBo9/wnOcCj7T/ikW0=
Subject key identifier: BE:43:B3:BB:E5:07:58:86:DB:88:71:E3:76:E9:81:0D:5B:7D:C7:4F
Authority key identifier: AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
Certificate issuer: /CN=af2bf82fda28e08f6229460ba2e24141464331e5
Certificate serial: 01A0CD484334A5D5C99913B55C83FBB79937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
Manifest number: 1A58
Signing time: Wed 23 Sep 2026 08:01:00 +0000
Manifest this update: Wed 23 Sep 2026 08:01:00 +0000
Manifest next update: Thu 24 Sep 2026 08:01:00 +0000
Files and hashes: 1: 0EjZecwBBAe7gj4B38NKcAdvVqQ.roa (hash: LrBTNS2rQ9a2kQJTHyUHfQ/3VciR/DEOj3SyOhIuTGk=)
2: ojqmlwhhXFrCH170geti55uM044.asa (hash: 2ItvtmzRux4XPVZnMHD/8EZ3jabau5ok75G2+Um7ykI=)
3: ryv4L9oo4I9iKUYLouJBQUZDMeU.crl (hash: KssH2eD9BI9cTMpHs5qJu3XRtWp5fILeeD/04QaCVRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:48:43:34:a5:d5:c9:99:13:b5:5c:83:fb:b7:99:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2bf82fda28e08f6229460ba2e24141464331e5
Validity
Not Before: Sep 23 08:01:00 2026 GMT
Not After : Sep 24 08:01:00 2026 GMT
Subject: CN=be43b3bbe5075886db8871e376e9810d5b7dc74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:d6:1b:e8:8f:2f:ae:3b:30:28:96:d6:17:
d0:2e:4d:ec:14:2a:09:e8:44:25:95:e9:e4:1a:26:
b6:2e:8b:77:ff:09:3d:20:e8:27:94:a3:38:d4:ed:
43:fa:33:11:ff:34:73:45:9b:25:dc:f5:4c:68:41:
64:fb:41:a6:96:f9:7d:25:c7:74:3e:d5:2f:cf:53:
b7:00:17:0e:c7:ec:b3:13:81:75:ed:d2:aa:36:28:
a4:1c:6a:a0:7b:d9:15:9d:88:87:45:09:bb:d5:fc:
50:f2:25:c6:43:ec:a9:92:ab:1b:76:46:4a:4d:a9:
15:10:03:ac:47:5f:ed:f0:df:d7:da:54:2e:76:87:
ba:d0:de:be:66:24:bf:69:a6:09:aa:27:9f:df:c0:
32:b1:c7:64:48:77:eb:46:5e:08:23:54:ff:eb:bc:
15:e7:6a:63:b0:ae:e1:d5:90:03:40:56:a2:b1:ac:
40:b6:93:6d:05:18:d0:6e:39:10:79:36:d8:1f:cf:
ab:b0:7b:19:dd:e0:60:64:66:b8:da:96:35:27:a0:
6c:a2:46:f3:72:a7:79:66:1f:d6:21:86:c9:05:ec:
95:a3:34:5b:dc:b0:ba:68:96:d1:12:b8:68:48:19:
a9:ee:c0:b1:72:1e:bf:4d:d7:ba:a1:ce:ed:ef:86:
c8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:43:B3:BB:E5:07:58:86:DB:88:71:E3:76:E9:81:0D:5B:7D:C7:4F
X509v3 Authority Key Identifier:
keyid:AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:19:f4:8b:93:d1:2d:5e:72:41:f2:8f:ae:cb:b6:02:9b:37:
d5:41:9b:16:c0:fb:3b:90:06:43:93:27:ea:9d:c5:ce:c1:d1:
6e:99:ea:f5:be:1f:0f:28:9c:a5:2b:c7:e3:78:d4:4a:be:a9:
4e:40:ae:3f:3d:7c:9b:17:84:f1:4e:30:54:72:9e:be:17:35:
ac:62:02:63:94:8f:ca:23:d1:45:94:85:65:0d:23:30:c7:77:
2c:2b:43:97:42:ee:07:3d:8f:74:db:3c:2d:2a:a2:41:f0:5a:
ce:04:43:28:b0:ba:65:8c:3d:33:45:7f:ea:bc:be:a9:4a:c8:
c2:cb:fa:91:5c:68:dd:4d:75:43:8d:31:8c:70:0f:47:1f:8d:
66:de:0e:df:9a:d0:64:49:6c:47:7a:8a:01:a0:49:99:53:74:
b1:6e:ab:89:62:d4:bd:80:ee:bc:e4:25:57:09:4d:bb:59:b3:
02:eb:47:3c:48:3c:cd:b9:3a:7e:f7:b6:8c:fb:21:11:bd:a3:
17:3e:e8:cc:07:39:ea:df:5d:af:42:6c:b3:3f:2d:6f:fb:f6:
7e:e2:dd:21:67:13:7f:20:ce:e6:f3:37:d7:20:86:0c:8f:4c:
c0:d1:5c:eb:71:a0:34:49:0d:3c:3e:1f:e9:19:1d:99:5b:7e:
cd:87:91:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:10:39 2026 by rpki-client