Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
File: ryfUX8GLqRerHomhfvC2NgmEgiQ.mft (raw, json)
Hash identifier: W9h37iNEeg9JFSibhUKHMMESkqJpxLjKmDjgJ7IOKdA=
Subject key identifier: E1:3D:24:1A:6E:50:88:11:D9:C4:88:17:67:35:9E:B3:6B:66:31:98
Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
Certificate issuer: /CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Certificate serial: 01A0F90ED08909B6B67A04611A4BED402304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
Manifest number: 172A
Signing time: Thu 01 Oct 2026 20:01:32 +0000
Manifest this update: Thu 01 Oct 2026 20:01:32 +0000
Manifest next update: Fri 02 Oct 2026 20:01:32 +0000
Files and hashes: 1: UPdd3G2KcdZS3e0YMWJ1mdET7ug.roa (hash: fLa6myDFK6r7xHzOqHrp8ZBgZdrk6WJWWDhaOtDKTYI=)
2: ryfUX8GLqRerHomhfvC2NgmEgiQ.crl (hash: M5xlV2ffCuMGUrOOmfoIBvadRRMPmRg6OlYqLnBod6c=)
3: tIyhjPYpgahql1s3g33PvZ8ic6Q.roa (hash: 2D85U464zzyXnN6q09EGipP8N8nVNvilmezlcS8OLVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:0e:d0:89:09:b6:b6:7a:04:61:1a:4b:ed:40:23:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Validity
Not Before: Oct 1 20:01:32 2026 GMT
Not After : Oct 2 20:01:32 2026 GMT
Subject: CN=e13d241a6e508811d9c4881767359eb36b663198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:48:30:1c:37:92:fc:1d:35:ee:3b:c6:97:
08:6d:dc:ae:9e:c0:a7:9a:f1:1a:29:e3:5b:27:ac:
ef:d7:a6:eb:3c:68:62:b2:38:f8:b3:d2:3f:81:0a:
25:18:fb:e6:7c:24:88:96:18:49:5c:87:c4:2d:56:
77:9f:08:92:da:57:21:0e:f6:56:f3:6c:0f:a7:c8:
16:13:21:59:31:83:fe:54:23:e2:7b:12:20:39:38:
62:c0:ea:dc:c2:2c:68:2a:27:9e:e8:d5:ba:75:02:
b8:c3:99:c2:97:3f:e6:b0:7a:c2:4b:e1:93:8a:be:
af:29:61:47:67:f3:3e:e0:9c:3b:0d:8b:fe:4b:3d:
b7:4c:f9:f7:59:7d:9e:3e:9a:f9:d6:25:7d:3d:64:
62:2c:64:01:f2:f8:93:78:5c:de:fb:c8:ad:8a:6e:
db:7b:32:30:59:38:04:b7:30:03:de:73:51:9d:4f:
30:3f:7f:65:01:ae:13:45:97:c1:06:b4:21:24:06:
ed:0b:56:c6:69:33:29:12:f5:ac:20:39:09:e4:35:
15:be:7c:d8:3b:1f:70:a6:ff:c8:43:8e:dc:0c:bf:
fa:ff:b7:8a:f7:a7:b0:dd:8d:d9:fd:7c:6d:c7:da:
ad:b9:e2:9d:1a:a1:69:a5:ed:ef:e4:45:df:9a:e3:
ee:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3D:24:1A:6E:50:88:11:D9:C4:88:17:67:35:9E:B3:6B:66:31:98
X509v3 Authority Key Identifier:
keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:99:73:f3:a7:46:0c:ec:8b:dc:fc:28:2b:6a:c1:de:46:08:
52:89:7c:aa:a2:24:0d:a1:32:c4:4d:06:3e:92:6a:e9:f5:4a:
49:8d:56:92:f4:4c:ca:47:bb:18:7d:69:18:00:08:6e:0a:b1:
90:27:64:2c:ac:d3:79:10:6f:85:66:8a:fc:07:0d:05:88:23:
08:16:90:5b:89:bb:58:6c:56:67:98:e6:24:f5:8c:0b:bd:4a:
2c:81:63:06:ec:19:34:7d:b3:7a:68:13:e9:f1:b8:ff:a5:af:
03:d6:8a:2c:41:b3:0a:b2:37:5f:90:73:21:a9:a4:be:c3:fb:
cb:0b:e5:7a:66:96:08:16:69:37:ed:18:59:c9:a1:7d:0c:e5:
41:cd:75:57:a1:bb:ad:a1:3e:87:58:7c:a1:de:27:70:d7:e0:
3b:f9:11:97:8d:a6:09:15:17:2a:88:e3:56:bd:a1:6a:f6:8a:
e2:e2:ed:75:d3:84:08:f0:25:a4:14:68:a6:40:10:c4:dc:0c:
1e:f6:8a:34:1f:3f:9d:31:2a:40:2b:4c:f4:58:56:2d:1d:ef:
26:68:c7:38:d3:e5:eb:dc:2f:4c:27:cf:89:27:87:58:3f:18:
0b:36:51:24:d1:9c:6c:5a:d2:9f:ea:7c:b1:9a:32:ff:88:42:
9f:ff:fc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 02:49:17 2026 by rpki-client