Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
File: RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft (raw, json)
Hash identifier: Y7GoEp5apX8PquX+FJQC5XFdGZgqJmvjzB/dPVm7FhM=
Subject key identifier: 9E:E0:4B:ED:1C:D0:93:1D:51:89:E5:3E:FB:77:14:DB:95:53:C3:C3
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial: 019D38D3C4C6F2F5A5D87F8E5D93B020EC2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
Manifest number: 189B
Signing time: Sun 29 Mar 2026 09:01:35 +0000
Manifest this update: Sun 29 Mar 2026 09:01:35 +0000
Manifest next update: Mon 30 Mar 2026 09:01:35 +0000
Files and hashes: 1: 2iOxvtLJRmqeCCs6jsBCnhsmuMk.roa (hash: xSNUQ0HB9QKxYzPdIeyT3O6eENXbIaUd/nPbY1Wjb78=)
2: EfsvGGiWagU_0mzeylXRaksRn_8.roa (hash: KEPOuFM2LSKDwp8tR2Mp0dmeSc6fJlmHWiPoO6jvt04=)
3: RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl (hash: niuQ9IhUxcwowrpRyWwoyuouGqSWMYPQ0KI1Kj2NGG0=)
4: zT3qRTo_Bh_Y4PRUIgbcM4_OPhI.roa (hash: DLHVLGVEeEcowvlPfROsXYSKn9EL35p8lKZcaisVJ0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c4:c6:f2:f5:a5:d8:7f:8e:5d:93:b0:20:ec:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Validity
Not Before: Mar 29 09:01:35 2026 GMT
Not After : Mar 30 09:01:35 2026 GMT
Subject: CN=9ee04bed1cd0931d5189e53efb7714db9553c3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:09:db:14:9a:53:78:be:ea:b9:ea:52:40:
5d:48:14:b4:01:3a:85:0f:a6:ec:68:ec:c0:e6:1d:
3b:28:ce:93:57:fc:7a:4b:c3:93:51:7f:fb:b1:35:
54:9b:3c:63:c5:e0:33:3e:6c:35:eb:5e:70:77:3c:
e2:a8:dc:96:f5:65:df:13:f3:d3:c2:ef:7c:99:60:
3f:c9:ef:40:e8:e3:67:0b:d9:e2:48:4b:d7:09:3f:
ac:3d:e0:b1:9f:68:92:01:d9:2b:dc:4b:09:7f:bd:
20:66:e3:77:f2:26:18:11:9a:ee:57:eb:93:bb:1a:
54:f0:ee:d3:7e:18:b5:84:0f:84:2c:1d:af:4e:d5:
3c:9c:05:62:16:e0:98:97:25:a5:61:85:6d:b2:28:
18:d4:74:04:7b:4f:a8:6e:ad:6e:68:92:45:cb:aa:
c5:9d:e1:aa:01:f5:aa:7a:42:89:38:61:13:dd:b0:
95:28:6c:ef:c2:b2:6f:f9:60:5e:e9:c1:65:93:75:
89:40:08:0f:2a:38:63:47:3b:23:28:6f:0d:00:20:
09:cc:10:62:96:b2:0e:4a:07:b8:1a:63:14:f9:52:
d4:6f:cf:25:52:70:06:c7:4f:6d:d9:63:9f:62:75:
2f:a2:c3:8e:c6:b1:0e:55:9e:f5:d8:fb:e6:8d:34:
35:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E0:4B:ED:1C:D0:93:1D:51:89:E5:3E:FB:77:14:DB:95:53:C3:C3
X509v3 Authority Key Identifier:
keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:24:e5:8f:c5:1a:2a:9e:be:c4:c9:18:67:0f:2a:9e:ba:c8:
b5:aa:e8:d5:fc:55:10:ff:f9:26:76:46:d4:f4:b1:38:b9:a9:
bf:ce:b8:f4:b5:3a:85:93:c1:b7:24:df:1e:fb:9d:00:de:53:
0a:0a:e6:bd:94:a9:7b:7c:26:3c:3b:31:88:82:ef:cf:1a:1a:
77:10:52:de:f3:25:da:3a:f0:c9:49:f3:c6:7f:ae:fd:a7:96:
1b:91:5d:8d:c1:d8:b8:9b:1a:0e:8a:22:a5:5d:24:7e:52:b9:
02:aa:e1:56:25:ad:ac:28:5b:62:d1:58:07:03:ac:da:5a:42:
59:32:41:ae:e9:60:e0:04:61:27:57:b2:76:ca:27:49:95:ca:
f8:78:7c:b1:dc:b5:5c:06:54:66:b1:eb:47:2c:30:2b:ce:68:
00:51:f8:dd:3b:d0:2f:4c:76:1a:92:54:39:b7:02:2a:4d:ae:
3c:27:fd:fd:a9:b7:4b:5a:1d:dc:78:f3:c9:f8:44:9a:07:f2:
b2:94:3d:9d:7c:51:fd:8a:ff:39:d6:ae:74:d9:0f:cc:41:25:
93:5e:ed:cd:9f:07:69:2b:ea:ea:34:7b:9d:06:cd:f7:88:c9:
50:35:80:c8:11:2a:95:13:13:1e:96:bb:b9:64:13:ff:8b:d1:
3a:87:ce:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:47 2026 by rpki-client