Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/92a128-c5b2-42f7-8928-630557f7fc6e/1/Riay6l06oyYHq9GNYiFFa0zNs4g.mft
File: Riay6l06oyYHq9GNYiFFa0zNs4g.mft (raw, json)
Hash identifier: BlYMBAOC/VgU2Pgzs0/1JhYDBNJInSapq1rOOi+23Ic=
Subject key identifier: 07:17:2D:1B:25:70:2B:79:EB:C6:2F:3E:01:10:21:71:4B:9F:9D:FB
Authority key identifier: 46:26:B2:EA:5D:3A:A3:26:07:AB:D1:8D:62:21:45:6B:4C:CD:B3:88
Certificate issuer: /CN=4626b2ea5d3aa32607abd18d6221456b4ccdb388
Certificate serial: 019D29CEDAB7D6ADE23F1EC46B7D6DFB1182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Riay6l06oyYHq9GNYiFFa0zNs4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/92a128-c5b2-42f7-8928-630557f7fc6e/1/Riay6l06oyYHq9GNYiFFa0zNs4g.mft
Manifest number: 4D
Signing time: Thu 26 Mar 2026 11:01:55 +0000
Manifest this update: Thu 26 Mar 2026 11:01:55 +0000
Manifest next update: Fri 27 Mar 2026 11:01:55 +0000
Files and hashes: 1: Riay6l06oyYHq9GNYiFFa0zNs4g.crl (hash: auHg8zKURHXedUS+rAJrW1jrRrgTHCdwxPGN2ruBTTE=)
2: YPt-dHjNBE3OqW-bVt7EKdFMZsQ.roa (hash: iVX85Zb3iLd8AnDmD5uCyZr3V0K28Ja3+wsxvcGoNJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/92a128-c5b2-42f7-8928-630557f7fc6e/1/Riay6l06oyYHq9GNYiFFa0zNs4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/92a128-c5b2-42f7-8928-630557f7fc6e/1/Riay6l06oyYHq9GNYiFFa0zNs4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Riay6l06oyYHq9GNYiFFa0zNs4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:da:b7:d6:ad:e2:3f:1e:c4:6b:7d:6d:fb:11:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4626b2ea5d3aa32607abd18d6221456b4ccdb388
Validity
Not Before: Mar 26 11:01:55 2026 GMT
Not After : Mar 27 11:01:55 2026 GMT
Subject: CN=07172d1b25702b79ebc62f3e011021714b9f9dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6b:f1:b9:a8:0f:9c:60:6b:b0:3b:27:7d:ef:
76:a8:f7:d4:da:10:50:e8:db:43:ee:49:f2:89:8d:
23:1f:8a:cc:86:8e:95:95:50:61:ed:f4:32:76:52:
d1:f1:17:2c:34:af:8d:fd:9d:4b:50:f4:2f:04:57:
39:b5:fe:77:de:56:7c:f3:f6:b6:4f:32:da:46:8c:
ef:f9:f2:8b:f5:a5:ef:6d:0f:23:8c:d0:ce:b5:09:
49:ac:0c:29:42:65:f9:3e:a5:46:ba:07:1a:9b:b0:
17:0f:ac:7e:3d:21:6e:ca:8a:50:72:29:65:ed:3c:
1b:50:80:7e:27:f4:37:14:b0:d6:83:15:ed:34:82:
92:e1:6c:93:fc:54:23:01:13:60:a0:3c:0a:0b:52:
21:f3:4e:fb:64:7c:43:d2:fd:8d:cd:53:23:83:9b:
fe:da:63:4e:4d:96:35:e2:48:a9:9e:6b:18:05:46:
88:bd:ee:7c:21:85:7d:c1:8d:1f:a5:64:f9:98:25:
b2:6a:f3:a1:60:a9:bd:7c:99:c4:ec:6b:54:e0:48:
ac:ad:a3:9a:50:aa:2f:8c:73:63:9c:b9:47:5d:4d:
a4:b8:96:7d:da:cd:98:65:45:f6:98:23:88:53:0c:
95:23:6f:ff:c6:40:2b:e0:1d:59:98:80:14:64:ce:
cf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:17:2D:1B:25:70:2B:79:EB:C6:2F:3E:01:10:21:71:4B:9F:9D:FB
X509v3 Authority Key Identifier:
keyid:46:26:B2:EA:5D:3A:A3:26:07:AB:D1:8D:62:21:45:6B:4C:CD:B3:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Riay6l06oyYHq9GNYiFFa0zNs4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/92a128-c5b2-42f7-8928-630557f7fc6e/1/Riay6l06oyYHq9GNYiFFa0zNs4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/92a128-c5b2-42f7-8928-630557f7fc6e/1/Riay6l06oyYHq9GNYiFFa0zNs4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ce:99:03:72:fb:ae:e7:c9:22:54:60:4a:df:4f:57:d6:98:
3a:46:ba:a6:1f:f3:87:87:bf:08:e5:78:82:57:d3:cb:fc:d1:
bb:c7:e6:17:f8:9f:8b:1f:50:8c:dd:c8:78:c6:0b:d7:29:7c:
7c:06:eb:15:ca:10:2a:00:71:4a:32:96:70:c2:2d:6e:d8:7f:
2f:ec:ac:50:43:b5:55:0d:89:e9:5f:44:18:82:95:85:92:3d:
55:f3:36:54:09:25:a8:a3:02:9f:9f:93:ee:b8:5a:20:fc:a5:
ac:62:e2:b3:e0:e5:fa:f4:bd:89:51:14:34:32:f1:3d:50:46:
4f:54:4d:25:7e:03:ed:6d:3c:c1:d5:53:f9:8a:56:93:64:ef:
a3:0d:8b:0a:b9:f0:e7:58:30:d8:0b:ad:22:52:5b:10:89:72:
62:92:e9:6f:1f:9f:19:d0:1a:e6:c7:37:57:56:42:8c:52:5b:
97:13:e4:e0:a2:44:11:6c:ce:11:9b:a8:4f:6b:65:35:cc:2a:
85:b1:ca:95:eb:df:73:3d:a2:bb:1e:a4:b1:e3:f6:78:bf:07:
42:10:78:5b:76:e7:47:b2:f5:41:ca:a5:62:03:ce:fe:01:fa:
0b:e6:7b:e4:1b:36:6a:9e:46:c9:49:a0:e7:85:ac:90:46:58:
8c:e7:63:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pztq31q3iPx7Ea31t+xGCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MjZiMmVhNWQzYWEzMjYwN2FiZDE4ZDYyMjE0NTZiNGNj
ZGIzODgwHhcNMjYwMzI2MTEwMTU1WhcNMjYwMzI3MTEwMTU1WjAzMTEwLwYDVQQD
EygwNzE3MmQxYjI1NzAyYjc5ZWJjNjJmM2UwMTEwMjE3MTRiOWY5ZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimvxuagPnGBrsDsnfe92qPfU2hBQ
6NtD7knyiY0jH4rMho6VlVBh7fQydlLR8RcsNK+N/Z1LUPQvBFc5tf533lZ88/a2
TzLaRozv+fKL9aXvbQ8jjNDOtQlJrAwpQmX5PqVGugcam7AXD6x+PSFuyopQcill
7TwbUIB+J/Q3FLDWgxXtNIKS4WyT/FQjARNgoDwKC1Ih8077ZHxD0v2NzVMjg5v+
2mNOTZY14kipnmsYBUaIve58IYV9wY0fpWT5mCWyavOhYKm9fJnE7GtU4EisraOa
UKovjHNjnLlHXU2kuJZ92s2YZUX2mCOIUwyVI2//xkAr4B1ZmIAUZM7PKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcXLRslcCt568YvPgEQIXFLn537MB8GA1UdIwQY
MBaAFEYmsupdOqMmB6vRjWIhRWtMzbOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmlheTZsMDZveVlIcTlHTllpRkZhMHpOczRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MmExMjgtYzViMi00MmY3LTg5Mjgt
NjMwNTU3ZjdmYzZlLzEvUmlheTZsMDZveVlIcTlHTllpRkZhMHpOczRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MmExMjgtYzViMi00MmY3LTg5MjgtNjMwNTU3ZjdmYzZl
LzEvUmlheTZsMDZveVlIcTlHTllpRkZhMHpOczRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk86ZA3L7
rufJIlRgSt9PV9aYOka6ph/zh4e/COV4glfTy/zRu8fmF/ifix9QjN3IeMYL1yl8
fAbrFcoQKgBxSjKWcMItbth/L+ysUEO1VQ2J6V9EGIKVhZI9VfM2VAklqKMCn5+T
7rhaIPylrGLis+Dl+vS9iVEUNDLxPVBGT1RNJX4D7W08wdVT+YpWk2Tvow2LCrnw
51gw2AutIlJbEIlyYpLpbx+fGdAa5sc3V1ZCjFJblxPk4KJEEWzOEZuoT2tlNcwq
hbHKlevfcz2iux6kseP2eL8HQhB4W3bnR7L1QcqlYgPO/gH6C+Z75Bs2ap5GyUmg
54WskEZYjOdjgw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:49:53 2026 by rpki-client