Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
File: RYg0xSq-MEJ_CiKqRv09CAntRYU.mft (raw, json)
Hash identifier: QRhpOhEK4EnIp2d4g7T/JJ6oyTJR3c3k4RqLq6rLIso=
Subject key identifier: 31:48:10:8C:2F:38:AD:EC:F4:3B:F3:23:1E:27:5E:03:3C:C0:23:65
Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
Certificate issuer: /CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Certificate serial: 019D3A1CC2E8995DDA44146FCD003DB02AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 15:00:56 +0000
Manifest this update: Sun 29 Mar 2026 15:00:56 +0000
Manifest next update: Mon 30 Mar 2026 15:00:56 +0000
Files and hashes: 1: 1urLz8sI-D-U1DWR00K73cOQtJw.roa (hash: h9FTShSF6pUVjdu4OolKEkCN6zMb2Hm/ugBT1eJvw3M=)
2: RYg0xSq-MEJ_CiKqRv09CAntRYU.crl (hash: XvwsqHPFdPEuQJ8+IeojqI1JC9G2GfNl6mj8jS9qiZU=)
3: cQXpdp-3wdqJlOzPKIgd4leRkno.roa (hash: voWCMVgfvUJ+YC+Z4yIk4orQRD3bQ3xmCc1/ZJDuxG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:c2:e8:99:5d:da:44:14:6f:cd:00:3d:b0:2a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Validity
Not Before: Mar 29 15:00:56 2026 GMT
Not After : Mar 30 15:00:56 2026 GMT
Subject: CN=3148108c2f38adecf43bf3231e275e033cc02365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:3c:65:b4:30:03:e6:09:e3:7a:24:c0:8e:
45:cd:e6:92:43:b0:0c:94:5b:c3:ff:b4:c6:75:c7:
e8:03:25:02:61:9f:4e:d6:9b:68:07:6f:5a:27:08:
8b:c3:dd:b9:28:e4:6b:83:48:14:13:8d:b6:26:7b:
59:ca:64:11:70:8e:e8:99:b5:bb:38:50:c2:c4:fb:
10:14:af:e2:c8:ce:2a:dc:5e:9b:49:e0:bd:1b:64:
44:5a:60:58:a8:cf:64:1f:9f:8a:a5:1e:f0:8f:81:
22:4f:b3:e1:48:01:49:0d:78:af:6f:eb:54:39:f7:
e8:c6:70:32:9d:a3:37:4f:c1:f8:8b:a9:d3:39:62:
67:b8:56:95:47:1f:e9:cd:c6:c3:33:cf:87:dc:59:
79:37:ef:43:6a:b8:b6:0a:7a:73:41:4c:50:2f:5a:
4e:fc:06:fb:74:59:0b:e1:da:f6:12:e8:a1:3d:a6:
f1:83:b2:05:3f:90:de:0b:19:06:28:bf:e9:3b:1d:
f4:c7:5f:0b:e9:b8:ad:e0:3b:0e:fc:cb:a5:cc:81:
b4:f8:8a:1d:d4:98:c1:42:d5:26:8f:e2:e5:de:99:
1b:3b:e0:1f:43:cc:0a:ae:d0:28:f3:02:2c:31:ff:
21:50:15:16:fa:8a:e1:73:9c:92:24:73:6b:40:5b:
29:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:48:10:8C:2F:38:AD:EC:F4:3B:F3:23:1E:27:5E:03:3C:C0:23:65
X509v3 Authority Key Identifier:
keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9c:de:df:0d:f8:60:a1:a8:bc:fb:1b:f6:42:1c:35:1f:86:
77:90:f3:ac:de:0a:78:3f:29:a1:b7:f8:cf:26:af:9f:98:76:
17:bb:3c:99:a5:6b:e7:3f:68:30:0d:f2:5a:4d:39:90:35:94:
34:f2:c3:d7:7d:80:bb:50:ff:a3:71:33:e7:dd:f8:7c:54:4c:
6f:a6:ce:0b:18:c2:0a:3c:68:26:d5:b3:57:af:18:f9:f7:40:
e6:57:23:d5:b9:41:46:00:01:36:b6:ec:09:c2:d3:5d:b5:c7:
8d:fb:9e:d2:07:6a:a0:fa:8a:13:8e:ca:c6:bc:e9:65:ef:5e:
0f:87:4d:fb:7d:58:06:e7:c5:69:ab:eb:95:0a:5e:eb:5e:4b:
dc:35:7e:db:33:12:df:9d:1a:17:b8:b2:82:dc:ca:2c:d1:cd:
da:24:f5:e7:4b:67:0b:b7:65:c7:4c:58:98:d1:0d:48:f0:cc:
7d:f9:18:af:79:e4:dd:a9:f7:3c:1c:8f:c1:0d:84:95:44:00:
ca:52:42:09:5f:ac:e2:e0:0b:40:bc:42:10:89:57:77:c4:13:
96:c9:96:01:1d:1f:3e:31:4a:fa:ec:74:29:79:9e:4c:ad:cd:
5b:7c:a9:58:ff:15:0e:c6:60:c5:f8:bf:cf:2b:43:57:d3:48:
01:ef:94:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:50 2026 by rpki-client