Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
File: pyREUNHHhV34SPNDGOHwlIkA2NU.mft (raw, json)
Hash identifier: SvE/KpLlyFRhq1soZKQnPZKa2BPdEnan/DzeX0jKSN0=
Subject key identifier: FE:6A:F3:C7:5A:E2:21:7C:20:88:AD:5D:B8:88:32:FC:57:49:FB:80
Authority key identifier: A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
Certificate issuer: /CN=a7244450d1c7855df848f34318e1f0948900d8d5
Certificate serial: 019D37C12535FA1AD4EF5F99325789EF3AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
Manifest number: 06AF
Signing time: Sun 29 Mar 2026 04:01:37 +0000
Manifest this update: Sun 29 Mar 2026 04:01:37 +0000
Manifest next update: Mon 30 Mar 2026 04:01:37 +0000
Files and hashes: 1: nHQieqZyPaOUuSrsXR7xvDoHvxg.roa (hash: zeyi1Qv46B7/sJB4zwdu9/Bq3e1lVsP+coEZ1xodVu0=)
2: na8XynSGUeG2Sfrn6Chut503AkI.asa (hash: 4qpOnKqUebRhkKVGFa2+gCBYJ66AvyagbWffkXeQIYY=)
3: pyREUNHHhV34SPNDGOHwlIkA2NU.crl (hash: AEqXEx/TgDWjXT0I7riGBk4oKz5bGVOLPr39pIjBoZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:25:35:fa:1a:d4:ef:5f:99:32:57:89:ef:3a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7244450d1c7855df848f34318e1f0948900d8d5
Validity
Not Before: Mar 29 04:01:37 2026 GMT
Not After : Mar 30 04:01:37 2026 GMT
Subject: CN=fe6af3c75ae2217c2088ad5db88832fc5749fb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:c9:30:5d:f5:c1:c4:ea:87:27:58:c9:c4:
1d:a8:45:8b:c9:32:96:f4:b8:37:0c:6e:b3:8f:d4:
24:bd:03:c6:fd:9e:c0:e5:10:0b:62:c6:31:8a:c4:
9c:a9:13:5d:c6:6e:5f:da:08:91:e2:5c:d9:fa:a5:
08:7e:1a:90:bb:b3:7e:1b:a8:04:67:8d:10:04:70:
49:da:4a:1e:ad:72:fc:49:77:4b:cf:c2:c2:bd:3c:
0f:14:8d:71:5e:69:41:10:19:39:b8:32:39:12:08:
fb:26:cf:b9:49:4e:29:da:a3:e1:5f:5b:d8:68:77:
ec:cd:48:95:de:35:e9:6d:93:e2:fa:46:21:a9:5e:
58:4b:d5:0f:c4:5c:2c:a3:cd:d7:48:d5:f7:4a:4e:
4a:43:35:28:cc:02:f2:2d:d0:cf:53:01:c1:bb:2b:
e2:1b:b3:d5:d2:7e:ae:d8:3a:07:b4:03:ce:e4:4f:
56:fc:f9:23:b1:27:92:cf:f2:8a:40:4f:a9:66:6f:
84:a9:0c:31:9c:3c:ba:72:71:43:2b:02:e2:8d:f5:
3f:b8:de:dd:22:40:18:58:f7:c6:69:2d:9c:da:19:
66:1a:53:04:3a:44:c6:72:b7:63:5d:08:2e:bb:a9:
61:4d:8c:21:f2:a3:f2:ff:62:2f:98:75:3f:50:f0:
13:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6A:F3:C7:5A:E2:21:7C:20:88:AD:5D:B8:88:32:FC:57:49:FB:80
X509v3 Authority Key Identifier:
keyid:A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:13:7f:42:88:49:57:60:c6:59:d8:ad:5c:69:59:50:20:9a:
b9:43:38:25:68:23:0c:6b:67:0c:3c:0a:06:b9:b8:7e:3c:e8:
65:84:fe:64:56:28:cd:81:f9:a7:13:47:c3:e1:97:63:a5:1e:
a3:23:cb:04:67:39:a6:c5:70:35:68:32:93:74:fc:c4:1f:5d:
3f:7b:c0:21:9f:1f:a6:24:fe:3d:80:c0:c8:06:4d:d2:97:9f:
e5:47:3d:0a:d5:bc:a5:c2:7b:3d:e5:c6:74:43:8c:6c:9e:f6:
28:37:8f:94:7a:72:86:05:dd:45:20:42:d3:0d:11:7b:25:bd:
65:b9:c3:f6:3a:eb:c1:b0:dd:8f:35:8d:58:a1:b6:14:10:7a:
b7:60:88:9f:66:c8:c8:4a:da:b4:3b:9e:27:55:8a:80:90:2a:
68:8f:87:80:d7:53:d1:b5:28:3a:bb:89:f5:1c:bf:cd:de:66:
76:b7:1c:83:ae:95:69:bd:52:48:7f:e4:da:4a:7e:be:a7:d1:
c5:a0:3d:3f:f6:a4:90:59:ad:c9:11:f8:e0:0e:61:d9:0e:74:
2c:b4:56:cb:af:b8:e4:f5:62:05:31:02:a3:f9:f4:de:cb:10:
d3:fd:b3:86:2d:6e:d2:27:53:0b:e6:98:66:4c:8b:09:b3:dc:
84:53:ef:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:35 2026 by rpki-client