Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
File: ryNYW_zdBhypRuLZ6ouX5FucMdY.mft (raw, json)
Hash identifier: hSRxV4IB+IL9NonWDM9KkEc3Wz1zwRHVDYesx4CiyCw=
Subject key identifier: BC:59:AC:40:A9:25:98:F6:1D:5A:F2:F8:C5:3F:6E:EB:47:BA:E7:90
Authority key identifier: AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
Certificate issuer: /CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Certificate serial: 01A002B95F1FA10D2158EE2CD39BC73CC573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
Manifest number: 1967
Signing time: Sat 15 Aug 2026 00:01:37 +0000
Manifest this update: Sat 15 Aug 2026 00:01:37 +0000
Manifest next update: Sun 16 Aug 2026 00:01:37 +0000
Files and hashes: 1: ECi1vnqUM-fxIfMgxs6Z6zPn5G8.roa (hash: vGQVzQW6eOz/ocuImvFOzh/r1Lw9xkrPt/351GBE1Vg=)
2: jkO9BFrCDIzfertRYsapdDM7d60.roa (hash: lSLXPmm7AIqebADnL1CRDBRTEdI7PBQZJXEYwCSAye8=)
3: ryNYW_zdBhypRuLZ6ouX5FucMdY.crl (hash: aLYly9q65yxgWmrvn2d70SU2KncUyXjYaM2KErooz1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b9:5f:1f:a1:0d:21:58:ee:2c:d3:9b:c7:3c:c5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Validity
Not Before: Aug 15 00:01:37 2026 GMT
Not After : Aug 16 00:01:37 2026 GMT
Subject: CN=bc59ac40a92598f61d5af2f8c53f6eeb47bae790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:2c:14:53:19:64:ba:3b:21:c2:7b:e1:0a:
87:22:83:63:4d:18:7c:85:0d:5b:22:d9:90:36:41:
7d:87:87:85:5e:a3:26:ba:84:57:0e:b4:eb:17:d8:
62:63:4e:01:dd:d7:21:24:01:30:ad:e5:74:83:dc:
8f:a4:1a:e6:6b:e4:d0:41:6e:19:78:7b:94:d4:62:
7d:15:f2:e6:9e:c8:b3:73:96:a9:4e:a6:da:66:45:
d1:42:9f:bd:3a:83:15:be:b0:04:62:85:30:22:97:
1d:33:af:ea:66:b9:ea:e7:2b:85:3e:88:77:c9:2c:
6c:50:e8:8e:5f:cc:5e:cf:10:bf:bf:e0:55:cd:1a:
17:c4:66:26:a5:d1:17:1e:6a:93:4f:b3:b9:62:e8:
c0:1d:a5:73:13:61:7c:97:df:68:1f:2d:8f:e0:bb:
12:80:cd:00:35:5d:da:c3:20:6c:8d:f5:36:9c:ac:
e3:6b:13:01:24:a7:20:a6:98:ef:c3:aa:07:d2:94:
6b:17:f0:7c:64:1b:a8:73:9b:6e:cb:3d:e6:60:ff:
98:cf:bf:46:8d:70:6c:ab:28:80:b2:21:f8:6e:08:
f2:a3:fb:fb:d4:c0:5c:83:7a:4a:16:81:c6:7c:0f:
5f:4e:b7:62:e4:fb:17:ba:a7:8e:43:9f:b8:07:2c:
2c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:59:AC:40:A9:25:98:F6:1D:5A:F2:F8:C5:3F:6E:EB:47:BA:E7:90
X509v3 Authority Key Identifier:
keyid:AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a5:3a:de:18:56:16:4f:8a:4d:86:15:9c:cf:d7:16:27:9b:
89:e2:58:07:0b:67:77:10:50:c7:f5:02:28:ca:ea:25:db:54:
b2:4b:e9:40:71:b7:cf:ca:90:22:a6:fe:3e:bd:ef:5d:d4:45:
3d:c5:b0:2d:4b:9f:c6:77:1a:0b:fa:36:4b:d0:d8:ea:14:75:
3c:b1:bb:bd:17:cd:ee:b5:9c:5e:dc:19:81:cd:85:ff:0d:98:
30:02:f7:14:5c:b7:62:3d:c4:71:46:c6:5c:27:3e:fb:51:c5:
64:5b:4e:bc:7d:08:71:5a:5d:73:c3:c0:7d:cd:6b:82:1d:bd:
30:dd:e3:e8:1a:87:14:37:83:cd:62:12:a6:e4:46:d3:d7:fb:
9d:da:59:d0:e4:5f:75:0c:4d:16:ff:35:2b:31:65:9d:59:0d:
0e:c2:71:7d:de:90:d0:b0:71:97:73:49:05:77:23:0c:64:f5:
c4:ba:ba:04:50:99:0c:35:5f:f8:94:82:d1:f2:fe:4a:9d:e4:
dd:42:19:4d:41:44:38:14:79:d0:8c:1a:b1:9c:db:96:5a:d7:
3a:35:3b:72:45:0a:f6:b1:e2:c5:e3:43:dd:f6:b2:3e:68:4a:
b5:ed:e6:07:80:d3:30:89:a7:fd:c7:ae:ef:23:d8:2c:30:6e:
5e:be:67:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:41:29 2026 by rpki-client