Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
File: RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json)
Hash identifier: waLV+teTzP37icmRLLB/OK1zkCJ0ra7LnlfQrVWkxtc=
Subject key identifier: FF:18:E9:DF:54:FC:66:D6:D9:54:17:55:4D:74:8C:CA:9A:A2:6F:14
Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Certificate serial: 019DD01A28FC1CB508DE1CF1D60DD4656948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
Manifest number: 0A37
Signing time: Mon 27 Apr 2026 18:01:08 +0000
Manifest this update: Mon 27 Apr 2026 18:01:08 +0000
Manifest next update: Tue 28 Apr 2026 18:01:08 +0000
Files and hashes: 1: Q3uvcJk1aivu7ToH0eZwM2MePrY.roa (hash: j0i6DOSkvpYiLwStrAAsU53hjHyyfEDy63fjeik32sA=)
2: QBmUJCRtL8qMx8nsM_8h7M8Ntmk.roa (hash: oRqg090yxLTopHF59OGl/QFkoOTyNIVLSNChAWZxm8c=)
3: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: Ql6Dy88z6xpvm51juNP4bqqM+f7KDK96ZPhUSwkeTXU=)
4: _6K6ekLgN63ACFr7Nc4QqX8mO9Q.roa (hash: GR7VM23RiAdX5cDnkEi212fYKZ9tRoD66kVKX08kLSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:1a:28:fc:1c:b5:08:de:1c:f1:d6:0d:d4:65:69:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Validity
Not Before: Apr 27 18:01:08 2026 GMT
Not After : Apr 28 18:01:08 2026 GMT
Subject: CN=ff18e9df54fc66d6d95417554d748cca9aa26f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:63:11:cc:d0:c2:b1:2b:ce:1e:86:3b:9e:
58:d5:be:f7:b6:e4:d8:2b:fa:3c:ab:b2:56:c0:24:
05:ca:5d:d9:f4:63:ba:2d:16:74:68:fd:5b:eb:0b:
ef:ba:c4:20:fb:65:ae:f1:9b:92:63:f4:00:15:98:
ef:56:80:36:e0:f8:01:f3:cb:5b:2d:8d:02:c8:95:
74:e8:b3:fe:7c:6a:99:a2:6c:ca:b0:4e:c0:b7:03:
a0:30:40:f0:2a:4e:36:1b:7d:bc:b3:1f:85:55:da:
57:9b:39:92:43:2d:8d:75:8a:be:a7:1d:39:3c:f5:
63:65:9c:80:af:75:bc:c3:0f:bf:4f:44:03:08:2a:
7b:23:eb:4e:d5:2c:85:9c:d3:32:a9:f2:07:b4:41:
f2:55:62:48:e8:f5:97:8d:5e:0f:24:0b:28:2c:7a:
f1:25:4e:28:ca:16:2c:b4:9e:06:89:68:67:5d:b8:
72:20:a6:9f:58:5e:cf:4b:d6:f0:66:55:09:a0:a6:
ce:3f:9b:d5:c2:ff:1b:86:9d:42:4c:ba:cb:24:cc:
8e:c6:ae:e1:ae:51:3a:b3:9d:ee:e9:af:59:33:52:
d4:07:64:29:ec:03:cf:b8:ea:a3:41:6c:ab:10:fe:
97:e5:4a:53:66:8f:9e:69:9f:3c:af:b2:9b:25:f4:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:18:E9:DF:54:FC:66:D6:D9:54:17:55:4D:74:8C:CA:9A:A2:6F:14
X509v3 Authority Key Identifier:
keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d8:a2:49:5c:5b:4c:e7:55:52:dc:d3:6b:c8:ce:b6:77:f9:
46:86:ac:c0:49:0e:ef:06:4d:07:19:5d:4a:ba:f9:be:3a:e2:
30:ee:1f:7b:ef:90:f4:40:a9:6b:56:94:ff:61:fa:26:47:2f:
4c:25:10:b3:f7:cd:13:f3:5b:b4:10:51:55:aa:97:b0:c1:7f:
39:6d:6b:7d:7d:f9:bb:80:67:26:4f:57:9d:1c:2e:7d:f3:e5:
f9:1f:af:42:09:c5:9d:14:5f:dc:1f:6d:43:46:70:b8:4e:fe:
6f:29:39:f8:d1:f9:23:a0:4c:e6:25:49:be:b5:a7:10:68:fd:
bb:2a:01:94:71:ed:39:29:d6:fd:4c:6a:69:47:c9:bc:3d:93:
81:7b:6a:03:82:26:d0:8e:d8:d8:09:9b:44:36:f4:40:e3:bc:
6c:21:f2:d1:92:bf:a4:ed:74:74:f8:60:9d:6c:7d:e2:90:ca:
dc:8f:1d:fb:cb:8d:d1:72:21:ba:ef:ba:58:fc:a0:21:00:10:
62:63:e9:f7:b1:bf:a2:d0:a8:2d:8c:a4:c3:f2:dc:e0:05:0a:
78:71:30:cf:41:48:ba:a1:2c:56:a8:ae:e1:1a:a4:c4:c2:62:
b3:24:3c:23:68:4a:a0:44:33:96:d4:94:8e:af:56:07:00:32:
7a:25:5c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:31:14 2026 by rpki-client