Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
File: ryNYW_zdBhypRuLZ6ouX5FucMdY.mft (raw, json)
Hash identifier: HnJdGfPx15AECI78n2MZg7IgNVcwB1LpH63CYrpwv5E=
Subject key identifier: 8E:E5:20:38:F9:A3:D1:79:66:DE:CB:9B:85:40:39:48:C9:52:34:10
Authority key identifier: AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
Certificate issuer: /CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Certificate serial: 01A15A791D249E939ADF08C111358D29E7A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
Manifest number: 1A19
Signing time: Tue 20 Oct 2026 18:00:49 +0000
Manifest this update: Tue 20 Oct 2026 18:00:49 +0000
Manifest next update: Wed 21 Oct 2026 18:00:49 +0000
Files and hashes: 1: ECi1vnqUM-fxIfMgxs6Z6zPn5G8.roa (hash: vGQVzQW6eOz/ocuImvFOzh/r1Lw9xkrPt/351GBE1Vg=)
2: jkO9BFrCDIzfertRYsapdDM7d60.roa (hash: lSLXPmm7AIqebADnL1CRDBRTEdI7PBQZJXEYwCSAye8=)
3: ryNYW_zdBhypRuLZ6ouX5FucMdY.crl (hash: Wy6NLGqKO5kkjI4+uWdrJY1uPVw5aBzb0P/vrA3j484=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:79:1d:24:9e:93:9a:df:08:c1:11:35:8d:29:e7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Validity
Not Before: Oct 20 18:00:49 2026 GMT
Not After : Oct 21 18:00:49 2026 GMT
Subject: CN=8ee52038f9a3d17966decb9b85403948c9523410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6f:de:51:8b:d1:68:13:5f:99:9b:1d:5a:ae:
83:13:aa:81:9a:4a:ae:e0:4d:f8:25:33:cc:e8:ae:
51:35:f3:26:74:cf:21:fc:83:ca:6e:9e:39:e6:d2:
f1:c7:84:4d:ae:14:05:bc:74:7c:de:7e:b7:f9:cc:
d4:e9:69:a3:b2:ad:91:5e:e2:2d:fc:36:8e:87:b0:
51:a2:1d:cb:91:95:dd:d0:c2:2c:0f:8b:19:7e:69:
f6:df:32:b8:75:81:0e:19:46:42:a8:99:f9:f4:b1:
69:cf:2a:21:ff:ff:cc:c6:3f:6e:c6:ec:95:9b:4e:
f6:1a:34:46:ca:f1:e6:28:39:e7:5b:52:e8:ca:d1:
fa:b1:01:55:59:cf:94:70:ef:b6:6e:86:37:dd:6c:
ec:7d:bf:0c:ef:a7:63:31:22:56:c4:fc:a2:7f:bb:
bd:3d:c8:82:3d:bc:c7:bb:09:05:40:e5:87:08:a6:
5b:c9:21:a5:c1:f4:74:eb:f4:15:17:a8:58:40:ba:
9e:da:c9:c5:7c:1f:92:1c:1b:22:07:6c:1e:06:f8:
8e:c8:a6:b8:02:3e:60:6c:f9:bc:e4:ed:8a:d7:23:
7e:4c:34:3a:b5:04:e3:ce:f4:a7:9a:f5:10:da:85:
a3:04:d2:60:aa:ab:f4:94:5c:e7:86:05:19:c0:97:
31:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E5:20:38:F9:A3:D1:79:66:DE:CB:9B:85:40:39:48:C9:52:34:10
X509v3 Authority Key Identifier:
keyid:AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:36:a1:18:d8:15:dc:bf:bb:a5:60:20:eb:5a:99:0d:4b:71:
55:0a:de:8f:80:a7:4a:fe:1c:8e:bc:b0:bc:e6:02:fc:6e:8d:
0a:50:ab:87:59:49:ce:c0:bd:6c:b5:01:37:86:4f:a0:48:fc:
22:6e:06:92:b6:f3:67:f1:e4:e4:5a:9f:ca:60:a1:fc:b0:1b:
ef:5c:ba:6e:8c:7e:46:a5:8e:12:4e:fe:03:78:0a:41:4b:77:
2f:a0:bd:28:0f:66:37:66:2a:09:60:bb:27:59:8a:70:bb:0d:
2a:5a:50:38:a8:3f:cb:cd:95:7a:e0:57:b0:02:cc:5d:0f:80:
0b:ab:52:dd:99:79:ba:32:a8:a5:26:48:d8:5a:90:24:31:f8:
3b:7b:b9:6e:2a:4a:17:c1:cd:ec:cf:72:e6:fe:ac:2d:51:34:
dd:30:41:ae:51:ae:a1:c3:e4:88:a0:d4:55:b4:a6:9e:e2:c1:
9c:37:8d:5c:35:aa:2f:2e:b8:48:ac:dc:e3:d6:8b:b7:c7:77:
c3:48:08:ae:83:ec:f1:52:a6:3c:1a:79:87:3f:03:d5:85:00:
55:fd:8c:ea:c3:b5:30:d5:ef:f2:85:ec:ee:9c:82:92:4e:f2:
14:02:f5:96:ef:a4:b6:82:e0:d0:5b:8f:6a:36:78:1b:87:5e:
72:1e:5f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:49:52 2026 by rpki-client