Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
File: ryv4L9oo4I9iKUYLouJBQUZDMeU.mft (raw, json)
Hash identifier: gtqr1TQRD8YzKCLrodoxSuu4z6PQlWdZMx4AJz1yUus=
Subject key identifier: 3D:F7:16:CC:2F:4F:B2:BF:DE:4A:7B:B4:32:07:A7:DC:24:31:76:CE
Authority key identifier: AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
Certificate issuer: /CN=af2bf82fda28e08f6229460ba2e24141464331e5
Certificate serial: 01A0D12500E9BEA0EB2541DBA01235D41D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
Manifest number: 1A5A
Signing time: Thu 24 Sep 2026 02:00:58 +0000
Manifest this update: Thu 24 Sep 2026 02:00:58 +0000
Manifest next update: Fri 25 Sep 2026 02:00:58 +0000
Files and hashes: 1: 0EjZecwBBAe7gj4B38NKcAdvVqQ.roa (hash: LrBTNS2rQ9a2kQJTHyUHfQ/3VciR/DEOj3SyOhIuTGk=)
2: ojqmlwhhXFrCH170geti55uM044.asa (hash: 2ItvtmzRux4XPVZnMHD/8EZ3jabau5ok75G2+Um7ykI=)
3: ryv4L9oo4I9iKUYLouJBQUZDMeU.crl (hash: +rOKxsTrdw9PCWOLNaug1VtNhYVVdkf0f3kLQtINp5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:25:00:e9:be:a0:eb:25:41:db:a0:12:35:d4:1d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2bf82fda28e08f6229460ba2e24141464331e5
Validity
Not Before: Sep 24 02:00:58 2026 GMT
Not After : Sep 25 02:00:58 2026 GMT
Subject: CN=3df716cc2f4fb2bfde4a7bb43207a7dc243176ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:65:82:ed:3d:1f:58:48:d8:f7:66:fe:ab:4f:
f4:b2:6a:66:10:50:f9:65:8c:b2:c7:c8:4b:f5:0c:
f5:16:07:e8:cf:a2:34:73:28:d6:7c:cd:05:2a:a0:
5b:9f:81:f9:36:f1:cd:a9:03:da:71:08:41:ea:c5:
29:ec:1e:91:83:7d:b1:27:bc:07:b4:0f:1c:ec:e0:
b3:5a:87:3c:02:ed:c8:14:2c:54:51:59:37:11:8d:
76:f5:30:3b:e1:8c:83:da:10:af:30:32:7c:68:e7:
4d:1c:78:df:a3:6e:fb:76:e6:5c:70:ee:11:03:ed:
4b:c4:be:d6:e6:80:e7:b7:d8:f8:a8:95:88:92:73:
b0:cc:b8:71:8d:f4:7e:64:58:75:63:c4:92:33:20:
b9:99:2f:f7:2f:63:73:3b:aa:83:37:b4:f4:53:e0:
84:f7:14:b5:2a:21:7d:9f:7a:74:38:8d:e9:61:e2:
1e:3f:04:2b:a9:fb:42:8a:e6:34:36:83:f2:7f:86:
c8:17:d2:0b:cf:90:24:23:51:63:24:b6:e1:ff:b2:
a5:a2:65:07:16:ba:64:bf:e4:7d:80:f1:ad:ee:e0:
62:5c:83:f2:6c:20:3b:ba:d2:13:13:6b:fd:0a:32:
3f:f6:ae:a3:20:13:c5:b9:b6:6b:86:78:09:48:1b:
f8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F7:16:CC:2F:4F:B2:BF:DE:4A:7B:B4:32:07:A7:DC:24:31:76:CE
X509v3 Authority Key Identifier:
keyid:AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:85:99:d9:89:72:65:6b:ac:38:27:3f:61:fb:f4:c9:ec:80:
27:2b:89:90:b5:25:93:1f:48:6f:de:38:1b:5b:2b:f8:9f:38:
7c:a5:56:7f:5c:c1:21:6d:ff:c8:22:22:c1:2c:e6:59:4e:65:
cd:7b:1b:8d:8b:e1:37:4e:df:63:bc:64:31:2b:76:ff:73:2a:
b4:d0:97:b5:4a:3e:9b:8e:9e:fc:eb:b8:2e:52:a2:f3:58:6b:
fd:29:c7:29:37:bb:7a:48:cb:66:b4:17:e7:90:c5:1f:49:34:
44:fe:1c:b7:95:8e:b6:37:fb:d8:90:7c:d1:75:7a:38:af:24:
5c:46:93:5f:4a:d6:20:5e:bc:81:32:ba:5b:c7:a8:b2:f9:cd:
9f:14:02:3e:14:ba:b8:3f:a0:33:4c:48:2a:78:bf:7e:78:54:
83:58:a2:36:fe:d7:e0:0c:db:24:73:71:3e:70:dc:24:b8:16:
c2:bc:e1:17:f4:45:7f:33:90:bf:d4:f5:0b:48:a3:55:f6:be:
44:b7:c2:69:3b:e6:e2:37:c3:28:73:a6:9b:7b:28:15:55:0c:
a3:b6:27:3e:ec:64:c4:cf:0a:c7:2a:bd:19:1f:a1:00:fc:4a:
7b:5f:7e:0a:d6:63:ef:0a:69:21:97:c0:e1:ce:44:76:db:7e:
17:01:ea:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:57:56 2026 by rpki-client