Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
File: ryto8Mg63Zo6O4arJPuRCpYCYsY.mft (raw, json)
Hash identifier: qNxnqzvymXgF+y6QCm9Z/tCgYtAH5y+pO6n2QkmNIK0=
Subject key identifier: 73:80:79:0D:F3:0A:37:E1:00:8A:92:F6:4F:9F:D5:16:A2:D5:03:C9
Authority key identifier: AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
Certificate issuer: /CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Certificate serial: 019D2BF2D4E2449C50A00E66BEE143A23061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
Manifest number: 13FB
Signing time: Thu 26 Mar 2026 21:00:27 +0000
Manifest this update: Thu 26 Mar 2026 21:00:27 +0000
Manifest next update: Fri 27 Mar 2026 21:00:27 +0000
Files and hashes: 1: h-PWIeDfQLuLQns6H59eVXIlTEw.roa (hash: a2RfFAyHbTGC+LHQhF0hKAuxj7Am0hNvyjuE9TNtMKs=)
2: ryto8Mg63Zo6O4arJPuRCpYCYsY.crl (hash: JmR6mlN3i4Qf5urqHFPd1yiM6GrnLYy+Vowj2J8gi9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f2:d4:e2:44:9c:50:a0:0e:66:be:e1:43:a2:30:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Validity
Not Before: Mar 26 21:00:27 2026 GMT
Not After : Mar 27 21:00:27 2026 GMT
Subject: CN=7380790df30a37e1008a92f64f9fd516a2d503c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b0:56:e2:23:84:5d:54:2e:b8:7b:52:06:76:
48:c5:b3:c7:88:ff:18:98:b4:d4:f3:cc:24:53:e7:
8d:64:23:f8:e5:ce:f3:03:d8:8f:36:e5:3c:bc:42:
77:0d:6f:eb:64:7c:58:e7:d9:a8:d4:00:51:77:a2:
19:50:3b:91:b6:7f:67:e3:36:98:b1:06:87:69:50:
ae:f2:70:b9:89:f6:90:1d:7c:4d:94:d0:f0:9b:b9:
65:92:6e:8b:53:37:64:f8:99:ab:62:54:b6:88:75:
e6:e8:44:99:e4:dc:e6:83:a3:97:d6:f9:b6:97:9a:
8d:cd:45:08:c8:3d:e5:cd:24:c7:f1:63:14:3b:25:
4b:2a:55:05:b1:e6:75:f3:cb:3b:8c:ec:16:b6:43:
ec:a3:86:8d:91:ad:ad:c6:de:6d:fb:5f:4a:ba:03:
59:af:a5:ee:21:73:3c:ee:88:a8:f5:cd:11:b5:f8:
96:97:7f:1f:65:48:d4:ac:bd:5b:35:fd:e5:b5:50:
f9:1e:3d:a3:85:84:f0:3e:d3:69:30:52:8f:99:8c:
bc:54:95:df:90:d7:92:98:67:32:97:79:ed:45:c2:
ff:23:d6:60:ab:25:15:15:d7:2e:06:5b:16:45:04:
a3:58:2f:15:a7:00:64:3d:21:ce:ec:24:ec:36:a6:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:80:79:0D:F3:0A:37:E1:00:8A:92:F6:4F:9F:D5:16:A2:D5:03:C9
X509v3 Authority Key Identifier:
keyid:AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:24:ba:2c:2b:bf:f3:2d:e3:46:c5:5b:1f:4b:f3:6e:cd:c6:
1b:12:d4:2b:31:bb:f1:1a:da:54:d8:9a:df:b7:2f:5c:7e:3d:
42:fb:d3:89:1a:d4:26:c2:1c:19:72:e4:3a:51:0a:ab:01:0c:
4a:1d:2f:75:ad:76:01:2f:39:9c:ec:9f:86:4e:17:3a:36:0f:
fa:3f:39:b1:45:6d:d1:1d:91:86:30:03:2e:d1:00:16:44:64:
57:15:08:4e:93:95:67:50:ac:1e:c5:4c:64:4e:be:f9:0d:a4:
72:b4:10:46:1f:5c:f0:99:05:c6:5f:46:04:cd:38:ca:a3:04:
5c:43:73:33:13:80:36:1b:07:65:32:9d:4f:01:e7:81:a8:c8:
ac:47:f7:da:ef:74:f0:fc:89:48:4f:5e:89:c7:9d:89:ed:9d:
16:f0:2a:40:37:47:79:33:18:36:7d:46:04:9c:b9:71:ea:9a:
03:3a:8e:90:8e:3b:af:8c:1c:30:0d:54:fe:da:4b:57:21:31:
8f:f5:7c:0c:5b:c5:9f:ae:04:c0:5e:73:f7:cc:86:97:11:25:
4a:34:5a:a2:5a:4c:85:42:e4:ed:fc:80:7c:9b:f6:5a:36:5d:
1f:5e:00:98:16:68:54:d6:7e:0c:e0:c5:f7:d8:31:f0:91:16:
98:b4:8a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:40:06 2026 by rpki-client