Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
File: ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft (raw, json)
Hash identifier: YYUKi2/M0MVyra17WKxjGLTRBw3/Nw3fMbrS3lOubuY=
Subject key identifier: 73:03:D0:2D:FB:87:1D:8C:ED:D0:95:AE:61:78:E5:A2:DC:A2:49:26
Authority key identifier: AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1
Certificate issuer: /CN=af21dd2f772a5bb47925c28bb5d16cd930f206b1
Certificate serial: 019D3A1CC3DC772D55EB4D462F2DE29B72CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
Manifest number: 0C9E
Signing time: Sun 29 Mar 2026 15:00:56 +0000
Manifest this update: Sun 29 Mar 2026 15:00:56 +0000
Manifest next update: Mon 30 Mar 2026 15:00:56 +0000
Files and hashes: 1: aM4m7Oc6NIzyqSxndNoY0r_8S2M.roa (hash: 775mbRNMV7kdlBzbryoJnSCHY7z/GhaIJplZrGCXfAY=)
2: ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl (hash: qgEH8XesQQPLVHLaskQuisNoOANUUp/qc44uhIYBrow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:c3:dc:77:2d:55:eb:4d:46:2f:2d:e2:9b:72:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af21dd2f772a5bb47925c28bb5d16cd930f206b1
Validity
Not Before: Mar 29 15:00:56 2026 GMT
Not After : Mar 30 15:00:56 2026 GMT
Subject: CN=7303d02dfb871d8cedd095ae6178e5a2dca24926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:46:e1:2d:d6:fd:aa:10:f7:3b:f7:e1:48:
2a:a8:a3:ca:c5:bd:cd:8e:ca:cd:6e:d0:be:51:2a:
89:e8:0e:94:12:fd:e5:6a:a2:a3:6b:d7:95:96:60:
5d:f2:08:48:d1:7e:20:2d:c5:0c:15:d9:0d:1c:3c:
9c:cf:80:86:fe:7c:f7:48:f0:e7:6a:37:65:84:65:
a4:9a:69:10:80:dc:7b:b2:4a:15:41:88:9b:6e:bd:
ae:f6:cd:6e:93:d2:68:0e:3f:7d:df:d8:dd:0d:c9:
03:d8:c9:16:22:1e:39:10:e2:52:07:72:23:0f:a7:
99:fc:ce:bb:5c:c3:ae:fd:e5:2f:8f:68:bf:3d:27:
c7:44:0d:e7:3b:b9:40:42:64:70:e7:7d:10:80:14:
2c:2e:e3:34:9d:84:04:f6:ae:aa:72:ef:6d:12:5f:
e3:cf:ef:64:0c:f8:7e:8e:8e:c8:82:53:88:08:65:
67:77:d6:5b:79:79:e5:57:64:45:ef:40:b4:72:cb:
af:c4:bc:ce:9b:d5:4b:80:05:36:ab:a9:17:a0:a9:
63:1e:fd:f5:95:99:46:83:08:59:71:81:f6:f0:b6:
c1:d7:f7:0f:05:79:75:1a:b1:e9:5a:6c:f1:75:cb:
a7:fe:7b:a7:11:33:26:48:a7:1a:72:67:bc:8d:e2:
47:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:03:D0:2D:FB:87:1D:8C:ED:D0:95:AE:61:78:E5:A2:DC:A2:49:26
X509v3 Authority Key Identifier:
keyid:AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:37:f3:88:76:19:1d:73:08:46:3d:eb:18:fe:0f:98:f0:94:
b0:2e:4a:06:30:d1:1c:3a:a5:d4:8f:ca:41:01:71:bf:f7:44:
19:dc:a0:df:7b:a6:7c:33:9f:be:ae:80:58:04:f1:7e:fb:b8:
ff:0d:46:08:6e:e1:5c:f1:8a:0b:d9:5b:83:c2:40:79:12:38:
03:df:25:ac:b7:35:d0:09:ac:be:0f:73:ae:bd:13:ad:19:f5:
d2:98:69:05:13:29:de:4c:30:44:61:a6:bd:1a:fc:1f:b6:c3:
97:db:c3:c2:a6:22:ce:3e:6b:a4:56:9e:cd:fc:3d:e2:78:05:
58:24:44:37:b5:dc:71:79:68:2b:85:c7:bb:44:71:16:0c:d5:
ab:4d:bd:42:e8:4b:f1:fd:f0:47:cf:0d:75:14:3e:09:ce:1f:
d9:25:bc:41:7a:d9:74:5f:dc:83:62:56:21:68:1a:a3:2f:e4:
b7:9d:00:8d:03:f7:8f:c3:aa:52:44:bc:48:5d:14:9e:d7:18:
76:6a:69:1d:f5:29:19:54:e9:20:6b:16:ba:ec:e0:27:8e:5c:
51:18:0c:6b:76:11:5c:88:dd:c7:55:b1:99:c9:64:18:ef:50:
49:63:ef:7a:2e:e1:09:b1:45:e2:c9:c1:23:78:16:d8:34:5a:
6f:1e:1f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:18 2026 by rpki-client