Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
File: 0xryhyw_VQMHOGbf_vSItxeD2rY.mft (raw, json)
Hash identifier: m1nd3ojmGpR1nTyUfKyLzoQQfJLB+q8rk9wxmNJ7W58=
Subject key identifier: AF:28:D7:F7:E2:69:AF:DA:A3:D1:77:D7:5B:8C:42:00:A2:1E:32:A3
Authority key identifier: D3:1A:F2:87:2C:3F:55:03:07:38:66:DF:FE:F4:88:B7:17:83:DA:B6
Certificate issuer: /CN=d31af2872c3f5503073866dffef488b71783dab6
Certificate serial: 019E303B69F486F60CD77F307095B032CEFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
Manifest number: 160F
Signing time: Sat 16 May 2026 10:01:00 +0000
Manifest this update: Sat 16 May 2026 10:01:00 +0000
Manifest next update: Sun 17 May 2026 10:01:00 +0000
Files and hashes: 1: 0xryhyw_VQMHOGbf_vSItxeD2rY.crl (hash: Nz58LHo6eNbMlhGPYso7u7loD5gkzXsW22hP9NQnSQM=)
2: CrO8u8Oq5BkBEcatDjBKbWW3E7M.roa (hash: imrBuoJmOz69UhOC1sn6VQqSOK7SozDwdVoRAOrOv0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:69:f4:86:f6:0c:d7:7f:30:70:95:b0:32:ce:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31af2872c3f5503073866dffef488b71783dab6
Validity
Not Before: May 16 10:01:00 2026 GMT
Not After : May 17 10:01:00 2026 GMT
Subject: CN=af28d7f7e269afdaa3d177d75b8c4200a21e32a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:42:b0:ed:68:e3:35:cc:c5:bc:78:9d:0a:
6d:fc:15:67:75:8e:c0:c8:47:65:a9:cb:2e:0b:0a:
66:e3:73:a6:8b:06:56:fa:00:e8:e5:79:f8:f3:ec:
ee:65:1e:c2:40:7b:6c:65:d8:2e:42:a2:a4:47:9e:
9e:d0:5d:a9:02:87:6c:fc:a5:62:5c:72:b0:68:c9:
16:6e:72:fb:d7:21:af:bd:ca:78:a8:94:8a:6a:15:
77:ab:2d:0c:91:a4:10:73:4b:16:f4:70:cd:cd:b0:
23:c1:b6:44:d7:aa:07:ee:4b:47:9c:44:a4:0b:98:
45:af:00:bf:19:d7:13:a7:8b:bc:aa:91:6b:34:eb:
ec:99:27:8c:7d:f6:38:4a:2a:52:3f:e4:89:1c:f8:
98:fe:fa:c9:03:0d:15:ea:22:d8:78:32:49:37:1e:
3c:aa:9d:bc:3a:e2:43:bd:07:49:df:27:63:e5:4b:
71:83:31:ff:2e:af:42:85:ae:9a:74:03:df:91:8c:
c8:fb:c0:a3:fa:b8:e2:ee:ed:be:54:0d:fa:ad:f9:
14:77:5f:ca:5b:9c:48:9d:b0:25:a8:81:07:f7:94:
5e:7e:9b:f6:7a:55:2d:d7:c1:6f:3f:10:26:d2:1b:
e0:63:13:3a:61:ac:f3:aa:85:4a:1b:a9:50:79:78:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:28:D7:F7:E2:69:AF:DA:A3:D1:77:D7:5B:8C:42:00:A2:1E:32:A3
X509v3 Authority Key Identifier:
keyid:D3:1A:F2:87:2C:3F:55:03:07:38:66:DF:FE:F4:88:B7:17:83:DA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b5:d1:95:bc:d7:b2:0a:ab:7e:cf:5c:31:db:5f:a0:cd:08:
46:c9:17:d1:b2:ba:cc:10:29:8c:2e:c9:1e:35:a6:6c:b3:4d:
61:24:fd:0a:21:10:cc:3b:0c:d6:88:0e:36:59:4d:98:59:e3:
87:f0:7d:80:05:8a:eb:e6:f0:9c:41:b9:59:12:0e:29:ee:51:
94:5f:bb:68:e5:04:15:25:3f:c5:7d:a2:59:4b:99:23:38:a1:
3e:3d:13:e9:4c:7e:c8:fc:1f:49:e0:f0:b9:20:cf:ef:76:88:
bc:fb:8d:88:b5:4d:e6:85:cd:ae:bb:99:8b:1e:f9:ef:2b:e1:
d3:e2:1a:66:75:c3:ad:e9:76:88:a6:56:d0:ae:04:3d:ba:50:
c6:b0:85:4d:80:c7:8c:aa:fd:62:82:8b:8c:ef:2b:14:f5:93:
99:0c:e9:67:1a:d1:8a:fc:0e:d8:31:5b:bf:91:d5:b1:68:ae:
ff:1e:e4:3d:91:60:08:e2:01:a2:12:58:4f:33:d7:8c:7b:d0:
3a:4a:ce:e1:84:ba:68:b2:fb:37:5f:5a:62:a1:e2:3f:46:78:
9b:58:43:7a:00:37:4a:d2:78:14:c2:e6:7d:3f:f4:69:ec:8c:
c9:96:5d:dd:d2:e7:a2:28:a9:4b:9f:1b:44:fc:df:8a:89:86:
5e:c8:2b:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wO2n0hvYM138wcJWwMs7+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMWFmMjg3MmMzZjU1MDMwNzM4NjZkZmZlZjQ4OGI3MTc4
M2RhYjYwHhcNMjYwNTE2MTAwMTAwWhcNMjYwNTE3MTAwMTAwWjAzMTEwLwYDVQQD
EyhhZjI4ZDdmN2UyNjlhZmRhYTNkMTc3ZDc1YjhjNDIwMGEyMWUzMmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBxCsO1o4zXMxbx4nQpt/BVndY7A
yEdlqcsuCwpm43OmiwZW+gDo5Xn48+zuZR7CQHtsZdguQqKkR56e0F2pAods/KVi
XHKwaMkWbnL71yGvvcp4qJSKahV3qy0MkaQQc0sW9HDNzbAjwbZE16oH7ktHnESk
C5hFrwC/GdcTp4u8qpFrNOvsmSeMffY4SipSP+SJHPiY/vrJAw0V6iLYeDJJNx48
qp28OuJDvQdJ3ydj5UtxgzH/Lq9Cha6adAPfkYzI+8Cj+rji7u2+VA36rfkUd1/K
W5xInbAlqIEH95Refpv2elUt18FvPxAm0hvgYxM6YazzqoVKG6lQeXjcYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8o1/fiaa/ao9F311uMQgCiHjKjMB8GA1UdIwQY
MBaAFNMa8ocsP1UDBzhm3/70iLcXg9q2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHhyeWh5d19WUU1IT0diZl92U0l0eGVEMnJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS82OGI3NWMtODNkZi00NzRlLWE5ZmUt
MDFiZjFmMTQ1YzI2LzEvMHhyeWh5d19WUU1IT0diZl92U0l0eGVEMnJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS82OGI3NWMtODNkZi00NzRlLWE5ZmUtMDFiZjFmMTQ1YzI2
LzEvMHhyeWh5d19WUU1IT0diZl92U0l0eGVEMnJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrXRlbzX
sgqrfs9cMdtfoM0IRskX0bK6zBApjC7JHjWmbLNNYST9CiEQzDsM1ogONllNmFnj
h/B9gAWK6+bwnEG5WRIOKe5RlF+7aOUEFSU/xX2iWUuZIzihPj0T6Ux+yPwfSeDw
uSDP73aIvPuNiLVN5oXNrruZix757yvh0+IaZnXDrel2iKZW0K4EPbpQxrCFTYDH
jKr9YoKLjO8rFPWTmQzpZxrRivwO2DFbv5HVsWiu/x7kPZFgCOIBohJYTzPXjHvQ
OkrO4YS6aLL7N19aYqHiP0Z4m1hDegA3StJ4FMLmfT/0aeyMyZZd3dLnoiipS58b
RPzfiomGXsgrNw==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:16 2026 by rpki-client