
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
File: ryfUX8GLqRerHomhfvC2NgmEgiQ.mft (raw, json)
Hash identifier: xH4PByTCSmujY1WIW0W3sivhqqoIsxHfeQFkN1zwCj0=
Subject key identifier: 0F:92:1F:4E:74:24:29:0F:94:A2:E2:5F:44:5E:E9:5F:E0:A2:6D:B4
Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
Certificate issuer: /CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Certificate serial: 019D265F2CA0408DB6AC4AF24BB7303F4F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
Manifest number: 152F
Signing time: Wed 25 Mar 2026 19:01:04 +0000
Manifest this update: Wed 25 Mar 2026 19:01:04 +0000
Manifest next update: Thu 26 Mar 2026 19:01:04 +0000
Files and hashes: 1: UPdd3G2KcdZS3e0YMWJ1mdET7ug.roa (hash: fLa6myDFK6r7xHzOqHrp8ZBgZdrk6WJWWDhaOtDKTYI=)
2: ryfUX8GLqRerHomhfvC2NgmEgiQ.crl (hash: QgMhzXfn/wJ47FMLy18g4mUdrSHpkc3bB2VWNSW92z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:2c:a0:40:8d:b6:ac:4a:f2:4b:b7:30:3f:4f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Validity
Not Before: Mar 25 19:01:04 2026 GMT
Not After : Mar 26 19:01:04 2026 GMT
Subject: CN=0f921f4e7424290f94a2e25f445ee95fe0a26db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dd:d9:43:34:8a:55:b4:3a:81:8a:dd:82:7f:
4c:c6:61:a9:1e:95:9d:14:14:a6:0f:0b:4e:22:48:
25:11:24:06:e7:f0:5b:1d:56:b9:a6:0c:c4:1c:61:
23:8a:ea:00:22:8f:47:aa:e7:62:d2:78:75:4e:ea:
2c:97:3f:e0:83:1c:e4:5c:ce:50:ec:2a:b8:83:93:
46:b8:5d:65:54:99:94:c3:b9:fa:9a:cc:0e:3d:c2:
28:87:db:b7:94:f2:dd:a7:45:e7:cd:f7:06:03:67:
d1:a1:a1:9b:fb:04:85:69:3f:a8:2d:4c:66:cf:ff:
da:1d:22:c8:18:52:6d:96:7f:c2:1b:76:19:95:75:
56:b2:c1:e2:43:b7:9e:c0:5e:80:b9:4f:9f:2a:2e:
38:f6:81:d6:9a:1f:1e:40:d3:63:c9:4d:f3:cc:8f:
87:c2:8e:39:dc:88:cc:a0:af:c6:74:4b:17:3a:d0:
51:dc:43:2d:1d:2e:1b:de:a5:23:16:0e:b3:4d:33:
55:b7:18:14:1f:27:44:fa:0d:dc:b8:c6:b3:0b:b3:
83:6d:c9:8f:2b:a7:7e:12:53:22:3a:9c:61:fc:f2:
1f:a6:81:d4:2d:13:98:f0:f7:43:41:7f:94:e6:c8:
1e:c0:54:3f:62:08:e3:d7:aa:6f:78:35:e3:4e:ed:
09:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:92:1F:4E:74:24:29:0F:94:A2:E2:5F:44:5E:E9:5F:E0:A2:6D:B4
X509v3 Authority Key Identifier:
keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:95:88:c0:8a:bd:e2:a6:ae:5e:54:fe:23:58:3d:46:ba:ee:
30:1e:56:32:82:ba:7e:d5:e8:e2:1f:dc:bd:8d:f7:79:b0:a0:
b8:38:65:49:5c:74:9a:ee:c4:8f:fa:cb:5e:2b:ec:92:92:26:
ce:6f:6e:10:31:b2:0b:08:c2:cc:f2:63:f6:0d:78:e7:14:57:
d6:5b:99:38:44:c5:21:9e:dd:f9:e0:02:ef:e0:0d:ee:db:16:
bf:05:f1:c2:9f:99:5b:dc:b6:89:be:d1:47:13:76:59:0e:af:
9b:fd:e6:1f:c2:dd:3a:84:5a:63:c6:5b:c2:4b:94:d3:a3:5a:
c4:23:f1:5b:b3:18:74:b8:c6:19:57:55:d2:16:df:65:81:d1:
f4:fa:97:42:1d:9b:b8:30:bd:80:0f:40:91:6f:15:81:1d:54:
b5:75:d3:c0:02:fd:62:3c:34:ae:2c:ec:2a:2e:de:f3:73:b4:
74:ea:5d:ac:39:2b:df:4e:66:52:9c:39:df:90:06:f6:86:8f:
db:bd:68:ad:e9:0c:38:be:ac:05:b0:3a:fd:f6:ba:3a:38:5e:
97:a3:1d:c7:5f:fe:14:02:7d:1e:03:c1:6a:bd:b4:59:14:3c:
42:32:00:be:4d:76:8e:3a:ac:76:d2:63:64:ed:d6:08:6c:fe:
c7:ce:81:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:48 2026 by rpki-client