Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
File: ryv4L9oo4I9iKUYLouJBQUZDMeU.mft (raw, json)
Hash identifier: THUvfgqlUfwJoMVweuVWjk5nZjUStVwgRLiVzMzM2ww=
Subject key identifier: 8C:DE:D5:C5:0A:62:1E:B6:58:A2:CD:AF:BC:36:0F:4E:28:B1:F6:A4
Authority key identifier: AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
Certificate issuer: /CN=af2bf82fda28e08f6229460ba2e24141464331e5
Certificate serial: 01A0E853A6B8D25DF5B471D2826887B1C22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
Manifest number: 1A66
Signing time: Mon 28 Sep 2026 14:03:11 +0000
Manifest this update: Mon 28 Sep 2026 14:03:11 +0000
Manifest next update: Tue 29 Sep 2026 14:03:11 +0000
Files and hashes: 1: 0EjZecwBBAe7gj4B38NKcAdvVqQ.roa (hash: LrBTNS2rQ9a2kQJTHyUHfQ/3VciR/DEOj3SyOhIuTGk=)
2: ojqmlwhhXFrCH170geti55uM044.asa (hash: 2ItvtmzRux4XPVZnMHD/8EZ3jabau5ok75G2+Um7ykI=)
3: ryv4L9oo4I9iKUYLouJBQUZDMeU.crl (hash: 12Y+4nXBs1JTwmevjHg1xWUbpKn27LCVnTlDg4B0IVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:53:a6:b8:d2:5d:f5:b4:71:d2:82:68:87:b1:c2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2bf82fda28e08f6229460ba2e24141464331e5
Validity
Not Before: Sep 28 14:03:11 2026 GMT
Not After : Sep 29 14:03:11 2026 GMT
Subject: CN=8cded5c50a621eb658a2cdafbc360f4e28b1f6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8c:0d:98:d4:a0:c3:08:ad:cf:79:1f:26:19:
8b:00:78:49:7a:ef:b9:f9:4c:06:ad:76:6d:30:06:
fd:50:fa:bf:c7:2e:39:5b:bb:ac:56:46:26:4c:5c:
9a:f6:9f:97:1b:bb:36:3f:23:75:fb:9e:7d:c6:10:
2e:32:86:4b:0c:60:96:c2:35:ce:11:10:40:2b:f6:
e8:21:4e:d9:18:ec:25:60:2c:4e:f2:e0:3c:75:8c:
70:ed:65:0c:bf:e8:c8:3e:f6:2b:cb:d3:92:9d:33:
7f:bd:68:c3:f0:46:95:31:58:84:09:ad:a6:3d:5f:
b4:06:c4:d9:cc:6f:28:be:5a:fe:e3:29:42:1d:f5:
f8:23:a7:1b:7e:7e:0e:19:9f:e2:eb:66:80:37:b5:
ba:79:73:08:e3:c5:66:7e:29:7f:1b:a7:a6:93:35:
0d:2c:6e:a8:00:d8:85:76:fa:5e:65:8b:8a:7c:09:
91:67:78:fc:1e:b1:d8:45:5a:79:22:94:76:82:c0:
3f:e7:4f:ad:ba:f8:94:58:cc:c2:3d:ad:8e:95:45:
00:38:9f:91:98:65:2e:6a:43:fd:9b:c9:8e:80:a6:
fe:31:d9:9a:8d:b4:52:11:40:01:44:c7:38:46:d4:
8f:6d:24:1c:11:ba:a8:ea:98:db:3e:a8:e2:9b:b4:
63:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DE:D5:C5:0A:62:1E:B6:58:A2:CD:AF:BC:36:0F:4E:28:B1:F6:A4
X509v3 Authority Key Identifier:
keyid:AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:03:d1:0a:35:1d:6a:9b:75:44:21:d7:89:4c:2c:a1:b0:6f:
b1:37:68:70:79:97:89:46:cb:99:5e:85:06:d1:16:17:fc:e4:
4c:41:ed:ef:39:22:35:21:80:0d:d2:1d:20:67:ed:ac:6e:04:
a0:e4:99:91:6f:6c:e1:c1:99:c7:86:ca:0b:68:dc:7a:50:cc:
23:aa:92:3c:f2:b7:b2:c6:61:6b:ee:44:91:d0:cd:5c:c9:58:
1f:5e:69:18:69:e2:78:1a:93:e0:5a:e6:94:5c:07:7d:04:e8:
a6:69:5f:94:b5:5d:1c:56:5c:25:11:d9:cd:6d:89:a3:2e:75:
92:40:06:89:7f:f6:cc:ab:cc:6b:05:66:3c:42:e1:bd:05:5d:
4d:79:a8:e0:7d:5a:ae:69:10:9b:9c:31:5e:09:72:93:da:c6:
0a:2f:6c:1b:46:83:37:60:7f:00:75:ca:0a:6f:47:e9:1c:c9:
f2:e3:52:d9:07:c0:2c:15:36:53:1f:31:c7:11:76:b7:9f:29:
c8:43:e9:9d:9a:27:f8:8c:97:a8:0c:b2:a0:47:c2:77:d2:b1:
a9:61:6c:28:db:af:f7:ef:9f:80:29:ba:35:01:1f:21:fe:b0:
02:a5:8c:2a:41:f5:38:83:8e:7c:19:9d:16:e2:26:87:35:0e:
c3:10:42:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:30:52 2026 by rpki-client