Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
File: ryv4L9oo4I9iKUYLouJBQUZDMeU.mft (raw, json)
Hash identifier: NNLtuEBn41P/0Oe3VWAyn36uI3ZHQYPS2tpZJspwP+8=
Subject key identifier: D9:24:04:A6:A1:B9:98:3E:12:D2:87:D4:13:30:C9:36:AB:21:CA:E3
Authority key identifier: AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
Certificate issuer: /CN=af2bf82fda28e08f6229460ba2e24141464331e5
Certificate serial: 019F8EA2E3AF9234FF4B33F1A2ED7B673FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
Manifest number: 19B3
Signing time: Thu 23 Jul 2026 11:01:07 +0000
Manifest this update: Thu 23 Jul 2026 11:01:07 +0000
Manifest next update: Fri 24 Jul 2026 11:01:07 +0000
Files and hashes: 1: 0EjZecwBBAe7gj4B38NKcAdvVqQ.roa (hash: LrBTNS2rQ9a2kQJTHyUHfQ/3VciR/DEOj3SyOhIuTGk=)
2: ojqmlwhhXFrCH170geti55uM044.asa (hash: 2ItvtmzRux4XPVZnMHD/8EZ3jabau5ok75G2+Um7ykI=)
3: ryv4L9oo4I9iKUYLouJBQUZDMeU.crl (hash: cFxaqu1hmpMXd0bLkd7gJPUj5SzCkVPLHLPgvIjpHHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:e3:af:92:34:ff:4b:33:f1:a2:ed:7b:67:3f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2bf82fda28e08f6229460ba2e24141464331e5
Validity
Not Before: Jul 23 11:01:07 2026 GMT
Not After : Jul 24 11:01:07 2026 GMT
Subject: CN=d92404a6a1b9983e12d287d41330c936ab21cae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:5f:99:59:e3:e3:47:e0:3d:15:57:23:3b:
1e:26:04:a1:c0:e3:07:c2:f7:82:36:e9:b5:fd:c1:
c0:f7:4f:27:42:f6:47:73:4a:41:36:a9:00:36:d5:
25:eb:25:d7:26:0d:ea:6b:27:63:2b:ff:2e:e3:96:
56:1b:28:c4:eb:04:d1:33:4d:5e:70:ac:fb:e0:e1:
60:1c:4e:28:4a:97:ea:f0:bf:35:4b:6a:86:02:af:
18:68:27:dd:0d:6e:1c:7d:93:6c:c5:b0:48:09:58:
00:cf:01:0d:89:d5:3b:5d:9b:38:79:78:51:60:23:
71:48:e2:b5:84:ff:55:f0:ab:b3:79:05:ae:42:40:
07:0f:c7:c0:f3:33:bd:0c:c1:d7:f7:02:eb:32:9f:
f0:be:02:40:fd:94:a2:12:07:fe:28:db:29:7c:b5:
b7:8a:6d:13:c4:6a:51:24:02:f1:6c:05:4c:25:91:
1d:5f:06:83:19:02:35:74:d7:1b:cd:fc:7c:27:d4:
9e:bf:1e:71:9c:9c:84:d8:4b:92:33:d5:3d:a3:ee:
4b:28:84:b6:7c:88:40:ae:f8:b9:4a:82:b6:65:e8:
1d:90:ca:dc:6b:12:08:cf:33:b9:f9:75:69:26:c3:
75:40:2b:49:2e:a7:1d:35:cc:f1:97:ce:1e:61:bf:
61:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:24:04:A6:A1:B9:98:3E:12:D2:87:D4:13:30:C9:36:AB:21:CA:E3
X509v3 Authority Key Identifier:
keyid:AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:56:b8:10:ef:f7:09:6b:cf:22:36:26:b2:5f:bc:49:24:a2:
d0:22:a2:98:9a:85:85:54:33:49:1f:34:66:8a:cf:e2:a7:9e:
39:3c:df:29:f9:c0:23:1b:c1:3c:f4:82:28:40:96:a6:f5:d6:
30:33:49:76:ec:8e:c6:ad:69:b2:df:9a:92:17:ef:c1:80:63:
d7:f8:5e:d8:b8:2b:28:8a:5c:fc:14:5c:94:2c:63:fd:21:73:
dc:05:57:58:fd:68:59:af:38:f3:1f:be:8d:76:21:36:d7:e5:
c5:33:8d:03:7b:5a:dc:c9:ac:94:65:42:fd:72:f3:a3:7e:71:
ed:9c:7d:62:02:2f:9f:2c:fe:2e:bc:6e:4d:1a:1e:23:5d:11:
0f:61:57:41:05:64:6f:5d:14:e8:9f:2d:85:88:72:33:b3:3c:
5d:1d:d3:80:89:19:f6:85:9a:31:3f:5a:a0:89:96:bf:9f:55:
7d:72:be:a0:ba:72:fc:0c:49:91:70:05:0e:1f:a1:f8:20:e4:
92:1e:5d:91:26:79:f3:84:20:5b:e1:b8:3d:c9:c6:19:e4:1a:
32:ac:89:94:90:30:0b:be:18:85:01:19:d5:eb:cf:89:0f:23:
ba:33:ef:0b:c1:79:bb:0d:c8:f8:13:e0:97:0c:34:50:2f:4f:
c0:9e:07:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:33 2026 by rpki-client