Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
File: RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft (raw, json)
Hash identifier: 1ZC5m05cfmSRdzKtBj+0kG1Z7yHPzGUj21uQHNL6wpo=
Subject key identifier: 78:04:17:CD:1A:64:BB:A6:89:DE:03:85:B5:44:FC:95:6A:DD:25:15
Authority key identifier: 45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0
Certificate issuer: /CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0
Certificate serial: 019D3866A2823B22EC9BB144E4EEA5889E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
Manifest number: 0FC1
Signing time: Sun 29 Mar 2026 07:02:23 +0000
Manifest this update: Sun 29 Mar 2026 07:02:23 +0000
Manifest next update: Mon 30 Mar 2026 07:02:23 +0000
Files and hashes: 1: RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl (hash: 2lkIaaCggsyWPRZlw+xYyrECNjuov5qCvmVDkVWltQE=)
2: iG_jpL5evYKdvaSXMweO07u-LZE.roa (hash: bAZcm3e4oR8RQlmgma0fN3YtSn8DFyr4KMu8blXi4D0=)
3: pMLFHgvr97zNskO8YN_sDv0Y-aU.roa (hash: OO8vYGJ08onKRzkSKXfvr1cztRsM4kZCRCHxKVslWRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:a2:82:3b:22:ec:9b:b1:44:e4:ee:a5:88:9e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0
Validity
Not Before: Mar 29 07:02:23 2026 GMT
Not After : Mar 30 07:02:23 2026 GMT
Subject: CN=780417cd1a64bba689de0385b544fc956add2515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:52:fc:7f:8d:81:af:c6:2b:b3:2d:80:65:
82:27:37:e9:8d:a3:8b:d3:0c:24:c3:61:c8:da:c5:
eb:1a:89:94:25:08:c0:88:08:3a:ec:2c:58:c5:d7:
d5:65:88:c0:b5:e0:00:fe:bd:3e:8c:9d:2e:d3:1e:
ca:85:23:d0:fb:6a:0a:7c:d6:12:57:72:53:f0:39:
c3:0b:b2:3c:77:ce:c8:a3:c8:f3:00:15:ec:da:ed:
19:26:6d:7f:ac:67:34:a2:d6:1c:ea:bd:4c:92:64:
8c:bf:6e:72:82:a6:7c:cf:78:30:2b:0d:0c:f4:98:
5a:1c:09:8f:a1:a2:70:68:98:73:4f:ac:9e:52:06:
07:94:b7:f5:3e:93:a0:56:71:5a:d1:e1:45:cd:a3:
0d:3d:a4:36:be:e4:e6:46:b1:d1:ad:d5:5a:da:67:
09:51:12:81:d8:2a:bd:15:8c:98:ed:83:78:7c:72:
77:26:00:e4:02:a2:79:4f:74:36:2d:67:dd:b2:b6:
8e:6d:63:01:0c:c9:68:92:5c:6c:75:ca:b1:67:71:
57:2e:39:dc:a8:53:8a:3e:bc:0b:95:16:fa:65:9c:
32:00:93:d8:80:fe:28:c1:32:40:2a:61:9b:8e:4c:
c6:44:51:c6:98:4f:70:f0:83:43:75:76:8f:9a:35:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:04:17:CD:1A:64:BB:A6:89:DE:03:85:B5:44:FC:95:6A:DD:25:15
X509v3 Authority Key Identifier:
keyid:45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e8:28:c1:e8:6e:55:59:a0:b0:b2:d5:f0:64:c3:17:8e:2e:
82:1c:07:f5:4a:52:57:45:c0:d5:38:52:d8:a5:55:e4:7b:df:
29:3c:6c:1f:60:69:55:85:4d:fa:18:6b:9a:7c:93:f5:97:6f:
4b:1f:e9:1a:3d:f4:74:f2:e3:db:c3:11:3b:28:f0:b0:b9:34:
02:6a:6a:07:4e:d4:6a:fe:c6:aa:b1:3d:30:73:15:5d:cd:27:
ad:e5:32:20:34:d2:c2:85:fe:ef:48:92:25:85:7d:51:de:68:
cf:34:38:91:ac:09:0e:2e:83:bc:0f:70:cb:27:3e:4a:cd:76:
1d:1d:32:a7:e9:ac:b2:99:52:90:9c:69:ed:41:6a:2d:65:7b:
f1:ea:fb:05:4b:54:96:a4:2c:2c:01:32:15:43:96:23:79:11:
b3:45:69:58:29:d8:4d:27:2b:c3:81:1d:e0:6d:bf:1b:7d:12:
77:67:f2:19:04:79:0b:56:3e:09:95:57:b5:d5:49:42:fe:cc:
da:c8:96:12:98:79:b7:71:ef:a0:9b:e2:58:82:31:a3:88:a1:
77:4b:b1:82:fe:78:a9:df:b0:dc:64:79:f9:d7:a4:de:dd:ee:
2d:b0:6d:b9:59:30:77:db:e4:15:91:be:69:a0:88:96:e5:2d:
c9:f7:ed:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZqKCOyLsm7FE5O6liJ4QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OGI2NzU5YzFhMGNmNWFkODJkYTVjMzkzYmNkMGZmZjdj
N2UyZjAwHhcNMjYwMzI5MDcwMjIzWhcNMjYwMzMwMDcwMjIzWjAzMTEwLwYDVQQD
Eyg3ODA0MTdjZDFhNjRiYmE2ODlkZTAzODViNTQ0ZmM5NTZhZGQyNTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLBS/H+Nga/GK7MtgGWCJzfpjaOL
0wwkw2HI2sXrGomUJQjAiAg67CxYxdfVZYjAteAA/r0+jJ0u0x7KhSPQ+2oKfNYS
V3JT8DnDC7I8d87Io8jzABXs2u0ZJm1/rGc0otYc6r1MkmSMv25ygqZ8z3gwKw0M
9JhaHAmPoaJwaJhzT6yeUgYHlLf1PpOgVnFa0eFFzaMNPaQ2vuTmRrHRrdVa2mcJ
URKB2Cq9FYyY7YN4fHJ3JgDkAqJ5T3Q2LWfdsraObWMBDMloklxsdcqxZ3FXLjnc
qFOKPrwLlRb6ZZwyAJPYgP4owTJAKmGbjkzGRFHGmE9w8INDdXaPmjXd0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgEF80aZLumid4DhbVE/JVq3SUVMB8GA1UdIwQY
MBaAFEWLZ1nBoM9a2C2lw5O80P/3x+LwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUll0bldjR2d6MXJZTGFYRGs3elFfX2ZINHZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wMWEyODUtZmM4MS00YjA2LTgwYjIt
MDBjOTEzY2IwNTU3LzEvUll0bldjR2d6MXJZTGFYRGs3elFfX2ZINHZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8wMWEyODUtZmM4MS00YjA2LTgwYjItMDBjOTEzY2IwNTU3
LzEvUll0bldjR2d6MXJZTGFYRGs3elFfX2ZINHZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVegowehu
VVmgsLLV8GTDF44ughwH9UpSV0XA1ThS2KVV5HvfKTxsH2BpVYVN+hhrmnyT9Zdv
Sx/pGj30dPLj28MROyjwsLk0AmpqB07Uav7GqrE9MHMVXc0nreUyIDTSwoX+70iS
JYV9Ud5ozzQ4kawJDi6DvA9wyyc+Ss12HR0yp+mssplSkJxp7UFqLWV78er7BUtU
lqQsLAEyFUOWI3kRs0VpWCnYTScrw4Ed4G2/G30Sd2fyGQR5C1Y+CZVXtdVJQv7M
2siWEph5t3HvoJviWIIxo4ihd0uxgv54qd+w3GR5+dek3t3uLbBtuVkwd9vkFZG+
aaCIluUtyfft4g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:37 2026 by rpki-client