Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
File: ryto8Mg63Zo6O4arJPuRCpYCYsY.mft (raw, json)
Hash identifier: hap2VUxhdZwFykrokdL5Sh0KzhoIyPG9cZCVJQtwdCA=
Subject key identifier: 91:8B:6A:7E:12:AA:A6:8C:44:31:A9:C0:9E:F4:D1:B1:73:54:E8:F9
Authority key identifier: AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
Certificate issuer: /CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Certificate serial: 019F95EE117991B5BFF69EE2951AA87DEFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
Manifest number: 153B
Signing time: Fri 24 Jul 2026 21:00:34 +0000
Manifest this update: Fri 24 Jul 2026 21:00:34 +0000
Manifest next update: Sat 25 Jul 2026 21:00:34 +0000
Files and hashes: 1: h-PWIeDfQLuLQns6H59eVXIlTEw.roa (hash: a2RfFAyHbTGC+LHQhF0hKAuxj7Am0hNvyjuE9TNtMKs=)
2: ryto8Mg63Zo6O4arJPuRCpYCYsY.crl (hash: VvHDR7G2771JGv+Kjx6SmwXUYxXQr1iscvlYrDcnDmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ee:11:79:91:b5:bf:f6:9e:e2:95:1a:a8:7d:ef:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Validity
Not Before: Jul 24 21:00:34 2026 GMT
Not After : Jul 25 21:00:34 2026 GMT
Subject: CN=918b6a7e12aaa68c4431a9c09ef4d1b17354e8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ea:44:25:fe:0a:86:5b:68:a1:ca:53:6a:3f:
06:02:33:d6:52:6d:61:34:e7:2f:65:36:8c:35:d3:
82:e9:97:4f:83:ba:da:d4:76:1e:d1:79:7f:b4:7b:
c0:b6:c9:73:36:c3:06:8c:35:fd:ac:79:df:9b:f2:
9a:b6:b3:66:32:1c:c4:c0:e3:93:f4:b7:98:20:dc:
70:b4:85:89:a6:c4:b9:a4:69:0e:97:2f:0e:f1:e2:
c0:87:b3:c2:9a:e2:0e:38:8b:3f:9f:92:c2:d4:a5:
47:19:52:53:e1:35:57:d3:eb:4e:1b:38:12:16:6e:
3a:fa:09:16:5f:d4:35:81:63:76:77:b5:17:de:cb:
ab:8a:a6:08:97:68:7a:fd:6d:e5:b9:63:53:40:66:
63:1f:e6:a3:61:fa:3e:d5:a0:85:60:d0:83:df:d1:
d6:84:ee:a4:39:c9:03:60:2a:e5:3f:e5:6e:d7:53:
49:b1:38:2b:12:70:9b:4e:57:1c:aa:3f:eb:74:d5:
74:54:de:df:3b:0e:83:76:c5:d0:bc:8e:6f:6e:59:
d7:19:3c:e6:4a:5d:53:be:f9:c5:6c:7a:72:3a:ed:
f5:cf:f2:bd:79:07:a9:a6:c1:16:af:68:06:09:43:
a0:ef:4c:4c:3d:6c:a6:a6:2f:fc:b0:49:15:07:d3:
55:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8B:6A:7E:12:AA:A6:8C:44:31:A9:C0:9E:F4:D1:B1:73:54:E8:F9
X509v3 Authority Key Identifier:
keyid:AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e4:d2:df:bd:68:38:e5:cc:8b:3f:ff:f8:5a:88:96:0b:75:
e0:00:44:47:9d:06:90:e4:ae:9d:5b:4e:55:59:b4:56:55:a8:
44:dd:37:40:b4:77:08:46:be:91:24:ef:14:83:45:11:7e:f1:
d9:8b:5a:f9:93:73:a0:06:3b:68:dd:80:f4:61:cf:51:9e:6d:
7d:c6:64:4e:3b:75:e6:8a:46:10:89:29:eb:f0:0e:1c:8a:f3:
69:11:d2:89:34:a5:f7:f8:31:8f:f4:e3:d4:c9:d7:76:91:6c:
2f:40:85:d7:7f:dd:80:9c:ca:bd:29:eb:fb:c3:30:9a:ad:04:
b6:50:39:6f:f6:88:ef:f6:88:d6:63:31:88:08:5f:c1:27:f5:
87:d9:2a:aa:78:de:ab:30:7c:7a:50:b2:68:20:73:66:d0:48:
0d:b0:2e:06:c3:e6:41:77:36:bd:df:ab:91:8d:82:14:cd:a1:
64:f1:96:90:62:31:c5:92:34:d9:4b:10:7a:97:8d:bf:92:e9:
d9:bb:74:d1:65:1e:de:4d:b2:94:f0:0a:d3:7f:de:e5:35:84:
d4:16:b1:f3:d0:7b:c5:c8:4e:e3:a6:fe:a2:1e:23:97:7f:2a:
b5:03:90:c0:2a:6f:91:29:7c:fd:fd:6d:07:da:a8:d9:40:0b:
aa:b9:4a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:48 2026 by rpki-client