Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
File: RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft (raw, json)
Hash identifier: vY22JAHP3Ps8NQvQFOrSvlob78IGCxqoPRNbgFPKrP8=
Subject key identifier: 47:EE:5B:11:F9:0E:B9:A5:DB:F3:E3:C8:25:14:A8:E4:74:DA:76:A1
Authority key identifier: 47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA
Certificate issuer: /CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa
Certificate serial: 019D2960F66A6275AD62F6211482CDCA8C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
Manifest number: 0A1B
Signing time: Thu 26 Mar 2026 09:01:53 +0000
Manifest this update: Thu 26 Mar 2026 09:01:53 +0000
Manifest next update: Fri 27 Mar 2026 09:01:53 +0000
Files and hashes: 1: RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl (hash: AnntjXhiavux88rgPLKTu0zBR+D+jrhOkMv9/D8204c=)
2: aeBUt7IDPZFtCHCeh_1TFRyUYt0.roa (hash: VQrTwZaJ6Y1ce96ZjoBajejiZoxDYWssI1+tZb2f6jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:f6:6a:62:75:ad:62:f6:21:14:82:cd:ca:8c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa
Validity
Not Before: Mar 26 09:01:53 2026 GMT
Not After : Mar 27 09:01:53 2026 GMT
Subject: CN=47ee5b11f90eb9a5dbf3e3c82514a8e474da76a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:77:cb:3c:27:e3:11:59:83:59:13:d9:35:b5:
1c:44:10:3e:cb:51:31:3b:50:2d:ae:4a:00:4f:7d:
30:d1:19:28:48:86:40:cd:a5:b5:39:c0:e0:af:ff:
95:b8:c5:3c:93:5c:8a:02:a0:d3:c7:0a:e5:b4:3c:
90:58:92:ba:f0:35:ac:b5:41:62:dd:88:7f:8d:e1:
1d:19:99:4a:5c:91:b0:c7:6e:2c:cf:aa:7a:05:fa:
88:cc:fe:13:f8:d3:aa:fe:8b:58:78:09:2e:ac:c6:
c1:7c:2c:a5:2f:08:6f:69:c5:9f:ab:6d:da:81:05:
8e:f2:6a:54:71:11:74:2b:59:e7:21:74:73:16:52:
b4:b1:d4:a8:5e:78:24:28:05:00:a6:2e:c4:54:a8:
12:10:d8:1c:e0:28:29:cd:46:03:b2:09:2b:2f:61:
92:78:53:68:6b:76:77:aa:93:99:e3:fd:23:2f:e6:
66:b8:3f:13:9b:fc:89:a2:0a:d3:2a:82:c5:a1:ad:
07:58:d3:ce:84:c4:5b:d5:4d:21:b7:e2:57:1c:f0:
7a:87:9d:2f:71:a3:73:b3:5a:1e:0f:22:ef:00:07:
85:22:07:04:ef:a1:f4:83:03:a3:b3:ee:ee:23:9b:
8b:67:8f:be:c2:0c:08:bb:a4:f5:52:c0:c8:5e:48:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EE:5B:11:F9:0E:B9:A5:DB:F3:E3:C8:25:14:A8:E4:74:DA:76:A1
X509v3 Authority Key Identifier:
keyid:47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e5:5c:88:ce:47:b2:fa:1c:b5:a2:00:fb:5d:5d:9d:eb:0c:
3d:0b:1d:b0:55:c2:6b:fa:aa:98:d3:c0:b2:50:5c:a2:ce:7f:
a2:59:d1:f0:06:bb:7b:e2:89:3b:88:81:e0:84:2b:5f:b2:06:
dc:ac:f3:6c:12:a9:2e:26:75:07:96:0f:7a:a3:89:7b:90:02:
cc:20:a1:6d:8e:d3:e6:67:67:a8:28:be:2b:72:84:56:61:54:
0f:38:06:aa:8c:0f:72:20:88:ac:63:a3:37:fe:05:16:29:5d:
3d:18:27:a4:8b:c6:90:93:e6:2c:2d:a3:20:60:30:67:fb:9f:
4b:f6:7d:78:e9:3f:2f:ec:f0:50:10:a2:81:19:3e:c6:d4:06:
a4:43:5f:d5:51:1a:36:e4:7a:1a:53:e2:c3:09:3f:9f:60:c2:
7e:a0:63:8f:6b:62:73:10:e6:82:26:4d:7a:00:30:0b:73:40:
41:87:3a:2c:02:11:28:fe:36:06:e7:53:12:49:a0:0c:48:72:
f1:a1:8b:9a:14:d5:85:45:0e:82:2a:b6:ac:c8:f3:81:f8:8f:
38:bc:2b:5e:b3:47:64:48:6f:e7:f8:38:bd:a0:6e:87:92:0e:
53:2e:4f:a8:0c:04:5a:69:82:3d:96:34:23:32:3f:9c:41:67:
a0:96:ee:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:01 2026 by rpki-client