Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File: RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier: QeU0fBukxKLb3RNeI/sTp+3hUaAKQCmpr+FVYzBcZDM=
Subject key identifier: 35:64:D3:1A:BE:F7:B6:B3:93:CB:29:10:D1:17:79:95:64:26:63:0E
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019D254CF4BD9878305A8BDCD0432368DA65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number: 18B1
Signing time: Wed 25 Mar 2026 14:01:33 +0000
Manifest this update: Wed 25 Mar 2026 14:01:33 +0000
Manifest next update: Thu 26 Mar 2026 14:01:33 +0000
Files and hashes: 1: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
2: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: EQcTGYBceRilJjvzr0qmUThZMYp+RaDaX/mGlm00+Nw=)
3: UVZSH-qjnUODxApJvnuBt-EAJoY.roa (hash: qEeNRBoEnR3OhUU2I8brudlBLMuFLZh8jyPrCOjJSRQ=)
4: eTMmIm9zv_0o9KEz3EHntctKzoc.roa (hash: tXT+SzZWIzmmd4kK5abXulIyd/8wtzj4Rs+S9xwYZIg=)
5: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
6: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
7: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
8: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:f4:bd:98:78:30:5a:8b:dc:d0:43:23:68:da:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Mar 25 14:01:33 2026 GMT
Not After : Mar 26 14:01:33 2026 GMT
Subject: CN=3564d31abef7b6b393cb2910d11779956426630e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1f:0e:a4:28:fc:ac:14:19:f2:e9:b9:3d:36:
29:ef:a0:ae:88:e4:97:4f:1a:45:f4:89:19:63:2b:
51:bf:77:0a:02:0e:94:93:25:85:ff:f3:e9:fc:cf:
4b:04:03:e9:9b:ec:dc:86:82:1c:b4:a8:a6:8b:d7:
09:c2:3a:17:a3:f4:83:86:31:b1:85:89:97:b1:85:
72:e2:ca:85:84:25:f5:4a:fa:cd:65:50:07:50:a1:
79:ff:3f:fc:04:7d:29:70:ed:32:ce:5e:09:ea:d3:
8f:6c:19:bb:56:a7:b9:22:ec:0b:25:9d:59:db:63:
3b:13:cc:ff:e9:1c:90:93:04:89:2e:0c:f2:37:9c:
6b:43:8c:e7:5a:21:ae:33:c9:21:59:9d:09:b9:86:
cb:bd:c7:ea:e3:62:2b:bb:be:73:99:89:a3:11:7c:
e8:0e:ef:36:b7:35:1f:36:2e:67:54:54:b3:0a:73:
b0:0a:ce:15:3c:56:a5:33:4c:7f:9a:b2:75:68:2d:
cc:f5:ee:7c:dd:a4:78:a3:93:54:3f:32:81:be:d2:
1a:51:1a:e9:78:b2:26:2a:6c:82:58:ae:ca:02:a8:
7c:54:f4:9a:2f:86:18:9f:af:8f:d9:fb:4c:ba:1e:
93:c5:ab:fa:d6:3f:1c:54:8e:78:2e:33:d3:00:cc:
36:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:64:D3:1A:BE:F7:B6:B3:93:CB:29:10:D1:17:79:95:64:26:63:0E
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:5b:b5:d5:46:ca:94:d5:95:71:4b:12:4a:80:b8:76:11:92:
74:1d:ac:15:40:ce:34:e9:81:fb:a6:36:df:2b:29:0f:29:d9:
c8:98:63:7b:12:e0:f9:07:30:21:d7:49:89:2b:b4:ae:ad:4c:
19:fc:70:f8:28:64:fa:df:e3:ba:8c:1e:64:c3:7d:92:b5:5d:
3c:c1:bf:5e:a3:88:c5:b4:b6:a2:50:96:68:b1:39:6b:ef:f4:
4a:24:02:1d:66:d1:d4:7f:b5:9e:7d:e0:cb:b0:ba:b9:39:15:
89:fe:c3:dd:3e:bc:12:9b:b4:3e:f6:b7:75:f0:18:87:02:8c:
d0:9f:ae:43:bf:97:b2:fb:f0:08:87:79:69:aa:6e:61:a0:27:
b4:bd:61:ff:7e:73:76:40:34:8e:8e:fb:ff:38:b7:0b:f9:f3:
ec:2c:12:ca:a1:5c:a8:04:13:97:3d:c2:a2:13:b7:42:9e:cc:
5a:ca:10:ce:7d:95:59:11:fa:68:e9:ce:00:00:0a:34:63:b1:
b0:45:1c:05:c0:c3:98:58:db:79:ed:37:d2:bb:a1:75:74:a7:
d7:22:42:a8:72:4c:5f:01:c2:0e:0a:29:90:dd:6f:97:2d:f5:
ab:22:b7:ef:94:5a:d2:20:70:67:6c:6d:f7:ed:89:3d:fc:fc:
85:68:19:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:31 2026 by rpki-client