Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
File: RyjroAE1nN1Bg0b2UcChh8ifur8.mft (raw, json)
Hash identifier: Tc3NLbOgQf4zF+cRiLp1h2bgxdeXv0friHPgegdtyNY=
Subject key identifier: 96:71:28:7D:FD:FC:85:17:14:E0:DB:35:32:5C:76:88:AC:4F:2E:80
Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf
Certificate serial: 019D3752D10B656FC8B905B3BA36AF8F24F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 02:01:07 +0000
Manifest this update: Sun 29 Mar 2026 02:01:07 +0000
Manifest next update: Mon 30 Mar 2026 02:01:07 +0000
Files and hashes: 1: GUkWGU-5YSSWyPrOwq-ARQkvPxM.roa (hash: zDxdPWOaOyVyBd2CSMyYPVbN3CHQHLMBOzpB+fsTOpQ=)
2: RyjroAE1nN1Bg0b2UcChh8ifur8.crl (hash: 7roWONWUWZWReX8zoM+PE/TbwLAQfJ5wK0Sp+c81wiQ=)
3: u599xzfE-EX9olnz8cBJD6oZ2j8.roa (hash: rUizvq/CWTmc6UMWj8ItfZ7+jtqd5XX0DhV70/3vEUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:d1:0b:65:6f:c8:b9:05:b3:ba:36:af:8f:24:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf
Validity
Not Before: Mar 29 02:01:07 2026 GMT
Not After : Mar 30 02:01:07 2026 GMT
Subject: CN=9671287dfdfc851714e0db35325c7688ac4f2e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:62:78:1d:bb:c1:60:52:e3:52:c7:9a:9c:
1c:dc:94:75:eb:24:0a:25:fe:56:46:40:2a:4a:37:
35:f8:f2:f1:11:16:30:8e:c8:72:67:46:2b:c5:ad:
38:8b:7a:3d:cd:a6:66:00:e0:23:20:b2:26:ab:9c:
ab:70:05:53:0c:3e:fa:1a:bc:ca:e4:ae:e3:75:59:
3e:b0:fa:c6:f2:69:fe:55:30:5d:3a:7e:76:99:d2:
55:f5:96:6f:0b:93:22:2f:6b:ac:2b:56:e0:14:a9:
03:93:34:4f:b3:88:f0:ec:28:0f:96:e1:f8:94:c6:
af:1d:45:1c:5a:88:08:0f:e4:e9:17:3a:aa:e3:8c:
14:05:b1:bc:6f:94:fb:06:c3:b5:38:e0:d6:00:35:
02:a6:c0:30:d7:3e:52:73:e3:5b:a2:3b:3e:f2:4a:
b3:2e:4c:05:17:2f:d7:bb:49:a5:78:19:12:a1:f9:
78:82:2c:2d:b8:a0:71:ab:6e:29:6f:1e:8b:e2:32:
00:3c:cd:b8:0d:c9:35:88:44:32:ef:82:96:70:2d:
4e:fb:9d:65:30:ee:68:25:8b:ba:2a:e0:82:8e:87:
c0:c6:4e:3c:18:8e:0b:10:3d:81:41:1e:1f:22:26:
31:ef:23:f0:23:69:8d:c7:9a:a5:8a:5f:7c:6f:08:
0b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:71:28:7D:FD:FC:85:17:14:E0:DB:35:32:5C:76:88:AC:4F:2E:80
X509v3 Authority Key Identifier:
keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:eb:20:58:65:1c:ab:f0:ad:ec:04:97:db:44:3a:ed:3d:02:
22:64:1e:6d:f9:99:8a:53:33:ec:b2:54:c3:e7:6a:e4:a6:29:
a9:44:de:10:30:1e:e5:cc:8a:bb:1c:f8:c8:53:d8:e6:eb:5e:
a0:39:fd:f2:81:f2:ea:f6:e6:78:37:db:bb:41:e4:24:5c:5a:
e0:8e:af:cf:a7:55:1b:8c:b1:0d:d1:89:16:df:47:91:3e:08:
2a:64:43:bd:c4:20:fa:f7:b3:07:f7:73:fa:1d:e5:ab:bf:28:
df:2b:ed:8d:11:f0:ee:d9:2b:2b:01:23:81:4e:a3:20:22:7f:
77:4d:e8:79:a8:3a:17:e8:53:f6:a4:66:55:58:6d:e8:74:c0:
c5:74:2a:3e:62:b8:ae:e9:22:70:33:b6:11:65:4f:98:b4:43:
41:71:73:ca:c2:d1:9b:bb:5b:86:ac:4b:ed:e9:b1:79:ea:eb:
24:2e:0f:ba:9d:c7:3e:83:6a:ec:24:f2:98:0e:e1:21:67:3d:
7f:b4:a0:fb:7c:58:e8:5b:d6:b0:7a:f3:c5:e1:69:4d:9e:28:
35:79:4d:7b:b2:9f:40:4a:c8:4d:9a:1a:28:da:d2:15:5a:c5:
ab:f4:c4:5a:d9:89:cd:12:ad:83:c6:08:8d:23:7d:b7:a7:20:
d9:c2:32:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UtELZW/IuQWzujavjyTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MjhlYmEwMDEzNTljZGQ0MTgzNDZmNjUxYzBhMTg3Yzg5
ZmJhYmYwHhcNMjYwMzI5MDIwMTA3WhcNMjYwMzMwMDIwMTA3WjAzMTEwLwYDVQQD
Eyg5NjcxMjg3ZGZkZmM4NTE3MTRlMGRiMzUzMjVjNzY4OGFjNGYyZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne1ieB27wWBS41LHmpwc3JR16yQK
Jf5WRkAqSjc1+PLxERYwjshyZ0Yrxa04i3o9zaZmAOAjILImq5yrcAVTDD76GrzK
5K7jdVk+sPrG8mn+VTBdOn52mdJV9ZZvC5MiL2usK1bgFKkDkzRPs4jw7CgPluH4
lMavHUUcWogID+TpFzqq44wUBbG8b5T7BsO1OODWADUCpsAw1z5Sc+Nbojs+8kqz
LkwFFy/Xu0mleBkSofl4giwtuKBxq24pbx6L4jIAPM24Dck1iEQy74KWcC1O+51l
MO5oJYu6KuCCjofAxk48GI4LED2BQR4fIiYx7yPwI2mNx5qlil98bwgLoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZxKH39/IUXFODbNTJcdoisTy6AMB8GA1UdIwQY
MBaAFEco66ABNZzdQYNG9lHAoYfIn7q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnlqcm9BRTFuTjFCZzBiMlVjQ2hoOGlmdXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yOGM1YjYtMjNmMC00NWZiLTliMjEt
Mjk0ZDljZjc5ZTJlLzEvUnlqcm9BRTFuTjFCZzBiMlVjQ2hoOGlmdXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8yOGM1YjYtMjNmMC00NWZiLTliMjEtMjk0ZDljZjc5ZTJl
LzEvUnlqcm9BRTFuTjFCZzBiMlVjQ2hoOGlmdXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACesgWGUc
q/Ct7ASX20Q67T0CImQebfmZilMz7LJUw+dq5KYpqUTeEDAe5cyKuxz4yFPY5ute
oDn98oHy6vbmeDfbu0HkJFxa4I6vz6dVG4yxDdGJFt9HkT4IKmRDvcQg+vezB/dz
+h3lq78o3yvtjRHw7tkrKwEjgU6jICJ/d03oeag6F+hT9qRmVVht6HTAxXQqPmK4
rukicDO2EWVPmLRDQXFzysLRm7tbhqxL7emxeerrJC4Pup3HPoNq7CTymA7hIWc9
f7Sg+3xY6FvWsHrzxeFpTZ4oNXlNe7KfQErITZoaKNrSFVrFq/TEWtmJzRKtg8YI
jSN9t6cg2cIyNw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:32 2026 by rpki-client