Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
File: ryNYW_zdBhypRuLZ6ouX5FucMdY.mft (raw, json)
Hash identifier: iGKd9puWgg5VzQyB/irlQIljff6T480Wyf6oLiO9ogM=
Subject key identifier: 07:F5:38:7A:B5:B2:2E:4D:60:56:70:95:1C:DE:F4:36:D9:37:92:61
Authority key identifier: AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
Certificate issuer: /CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Certificate serial: 019D28F20C32DC853BE05B398CDA714E0A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
Manifest number: 17ED
Signing time: Thu 26 Mar 2026 07:00:44 +0000
Manifest this update: Thu 26 Mar 2026 07:00:44 +0000
Manifest next update: Fri 27 Mar 2026 07:00:44 +0000
Files and hashes: 1: ECi1vnqUM-fxIfMgxs6Z6zPn5G8.roa (hash: vGQVzQW6eOz/ocuImvFOzh/r1Lw9xkrPt/351GBE1Vg=)
2: ryNYW_zdBhypRuLZ6ouX5FucMdY.crl (hash: Z9Ua82mFp9l7eFUH/fzNCJybjE8xMovWCdkeXroKGLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:0c:32:dc:85:3b:e0:5b:39:8c:da:71:4e:0a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Validity
Not Before: Mar 26 07:00:44 2026 GMT
Not After : Mar 27 07:00:44 2026 GMT
Subject: CN=07f5387ab5b22e4d605670951cdef436d9379261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f1:f8:16:ba:4a:5e:53:68:27:b4:f6:59:5b:
02:43:ef:fa:30:f1:87:68:45:0c:f0:92:4c:bf:59:
ed:93:04:eb:9d:be:eb:b2:8d:39:db:e4:15:5c:28:
60:bd:97:2f:9b:27:5a:74:a1:e6:4c:b5:96:fc:38:
9e:87:f9:05:48:9f:d0:07:03:dc:7b:b6:8e:2b:89:
99:80:3e:3b:fb:1b:08:01:bf:7b:e4:d5:5f:2a:b0:
a0:ab:b9:46:c2:99:4e:e8:ca:b4:40:e6:8a:38:68:
4e:eb:0f:1f:8a:bb:05:f5:0c:5e:a8:c6:1c:17:0d:
dc:0a:09:c5:e7:a0:b4:32:92:14:48:27:d2:29:a2:
6b:94:e5:47:ba:95:24:c0:be:de:4e:5d:9e:f3:8e:
96:10:2a:ad:45:7e:2f:79:cf:91:c3:17:16:3f:b4:
f1:ea:bd:e0:c1:0b:30:da:ff:22:e2:9d:4a:96:ff:
ae:6b:af:64:36:9c:01:78:ce:24:44:fc:c2:8f:aa:
e5:d7:27:39:74:90:04:0a:ce:2d:48:f2:cb:49:56:
b1:4c:d1:2b:94:7f:11:a1:55:46:03:c3:0d:ce:61:
8a:ac:82:1d:5a:4c:0e:ec:01:b5:7a:ce:82:1a:74:
e0:61:c6:a2:c1:35:19:ec:8f:e3:ee:5a:e3:15:11:
0f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F5:38:7A:B5:B2:2E:4D:60:56:70:95:1C:DE:F4:36:D9:37:92:61
X509v3 Authority Key Identifier:
keyid:AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0f:50:17:da:60:4e:30:dc:af:63:a2:21:dd:72:26:75:01:
b0:5c:7c:46:85:85:c3:cf:c9:c4:47:ee:f9:bd:32:c2:2f:8c:
4e:0d:10:5c:6b:33:e8:67:47:0d:f1:3b:e8:3a:e7:c1:48:b1:
82:12:69:9c:aa:4d:bb:0d:df:27:74:bd:d1:5e:eb:65:7b:44:
bb:62:51:bb:bf:ce:94:68:df:c4:13:83:99:1e:d4:95:f8:1a:
ec:d8:fc:a9:ef:5f:3f:da:4b:45:a5:a8:f5:dd:e0:ca:45:21:
83:7c:a7:05:cc:c7:2b:f1:e1:f7:d0:bb:41:97:70:c0:89:a1:
06:0f:d1:31:6c:59:94:d3:f3:b2:53:28:e0:cf:b5:9e:46:22:
6f:6c:57:fc:be:9d:19:60:99:e8:9e:cf:e3:c0:27:f9:80:66:
40:2e:93:da:39:e5:9a:90:92:9f:c9:46:69:17:38:0b:52:89:
b8:3a:91:08:16:76:e5:f6:02:48:f1:60:af:ca:c4:13:c1:c2:
1d:62:1f:03:0e:7d:67:22:2a:ba:76:1a:39:47:fd:94:b4:55:
5d:ad:b6:4c:40:47:e8:24:8b:c1:24:66:c2:d1:81:66:59:86:
35:da:5c:ba:d0:ea:38:91:d2:3c:9d:17:87:dc:e3:e0:14:10:
33:bc:37:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:51 2026 by rpki-client