Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
File: ryNYW_zdBhypRuLZ6ouX5FucMdY.mft (raw, json)
Hash identifier: Bxim/ydp/dG/5KyEf6YXA5XcLwH+npfkZCLgOCHZaRU=
Subject key identifier: 92:68:63:37:A3:76:AB:4B:FE:8C:4A:E1:D5:09:4C:17:0D:2C:CE:CD
Authority key identifier: AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
Certificate issuer: /CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Certificate serial: 019F92B6727F1F2F9DE7409FA4A0AB4B12A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
Manifest number: 192D
Signing time: Fri 24 Jul 2026 06:00:58 +0000
Manifest this update: Fri 24 Jul 2026 06:00:58 +0000
Manifest next update: Sat 25 Jul 2026 06:00:58 +0000
Files and hashes: 1: ECi1vnqUM-fxIfMgxs6Z6zPn5G8.roa (hash: vGQVzQW6eOz/ocuImvFOzh/r1Lw9xkrPt/351GBE1Vg=)
2: jkO9BFrCDIzfertRYsapdDM7d60.roa (hash: lSLXPmm7AIqebADnL1CRDBRTEdI7PBQZJXEYwCSAye8=)
3: ryNYW_zdBhypRuLZ6ouX5FucMdY.crl (hash: tPbVqCdTjkmP93xIVu/U+ZEZNvPoLjK0Nd2NU7sdV84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:72:7f:1f:2f:9d:e7:40:9f:a4:a0:ab:4b:12:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Validity
Not Before: Jul 24 06:00:58 2026 GMT
Not After : Jul 25 06:00:58 2026 GMT
Subject: CN=92686337a376ab4bfe8c4ae1d5094c170d2ccecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:07:3d:53:fa:3e:57:a8:4b:eb:8a:20:7b:ed:
29:15:f0:e6:08:4a:5f:e6:5f:56:e1:c3:d3:ff:50:
11:9d:1a:b0:ec:dc:75:9f:ff:85:ff:1c:1b:73:da:
c3:db:aa:6b:d7:9e:4c:64:5f:27:a3:46:87:c5:97:
27:a5:b4:6b:67:16:b2:25:56:ec:0a:86:40:10:b8:
13:1f:92:41:aa:b3:b3:fc:38:c2:85:72:c0:24:3e:
78:9f:ba:b0:80:ed:03:1a:ff:24:43:16:cc:d9:8f:
82:5a:0f:43:71:3b:57:77:b2:2a:7a:3b:c5:4a:98:
89:4b:c5:6f:34:a5:38:6e:7f:57:30:be:dc:19:f6:
f9:3d:5a:dc:82:47:c7:a4:b5:77:7a:b3:6a:6b:69:
19:0d:fb:60:27:3b:cc:44:0f:85:97:5b:50:c7:d2:
9c:a6:9a:71:0f:c7:0a:bf:c2:6a:6d:ef:d2:22:b7:
c7:20:b0:5e:bc:34:64:aa:78:89:4d:89:08:76:f8:
93:0b:a1:c5:85:0d:98:c2:e5:3f:2c:40:e2:95:05:
c2:92:df:97:51:0d:15:54:fc:0b:64:ed:60:29:1d:
ad:6d:01:27:ad:4b:24:e7:bd:d6:fa:a2:cd:45:9e:
02:82:61:6b:96:19:0b:a7:0a:32:bf:2b:34:31:0f:
e6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:68:63:37:A3:76:AB:4B:FE:8C:4A:E1:D5:09:4C:17:0D:2C:CE:CD
X509v3 Authority Key Identifier:
keyid:AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b9:02:8f:df:6b:31:0c:4e:56:78:0f:27:f7:e6:3b:f1:c0:
6b:62:64:8a:4e:86:75:ef:fc:6e:40:cc:04:f0:f9:a4:55:77:
f6:cf:ae:81:1b:5c:cc:95:72:78:35:fe:aa:9f:41:33:fe:00:
9c:e6:c2:f7:75:e7:aa:43:de:cf:22:9b:b5:e5:b8:94:85:96:
c8:8e:22:79:98:bb:40:30:69:6c:a5:61:93:68:02:b9:17:59:
fe:cf:25:96:c0:9a:5b:4f:73:1b:07:ba:5c:f7:0b:09:c3:40:
38:3d:bb:1f:ce:14:15:86:a0:d4:f4:65:aa:03:19:23:3c:ea:
9a:d9:e2:9d:9f:37:b7:13:80:70:ab:74:96:08:e4:18:62:b4:
29:10:8d:09:eb:d8:69:07:68:bc:83:cc:ce:46:d2:e9:fd:2f:
1b:d9:73:3e:6d:b1:02:af:00:5a:4f:e4:03:cf:b5:5c:c0:fd:
16:50:d1:a4:90:ed:4f:a8:b4:3f:7a:3b:2c:04:9e:a5:9c:42:
7a:3e:8e:be:7a:52:90:bd:f4:01:a4:db:92:30:ea:58:53:db:
2d:27:d6:38:6e:aa:59:ae:40:7d:fe:2b:d7:e6:48:0d:bc:5e:
ea:b8:13:4d:23:37:a3:09:5b:d7:fa:f6:40:46:b5:cd:87:55:
d3:59:da:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:28 2026 by rpki-client