Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/92a128-c5b2-42f7-8928-630557f7fc6e/1/Riay6l06oyYHq9GNYiFFa0zNs4g.mft
File: Riay6l06oyYHq9GNYiFFa0zNs4g.mft (raw, json)
Hash identifier: 2/sHeAGgKZwlI3jVlNDAtPPGtkacD6fNyrkNK66J48o=
Subject key identifier: 1C:1C:9D:6C:20:32:52:0A:8D:D1:C7:8D:77:AE:E4:23:4F:99:B6:4F
Authority key identifier: 46:26:B2:EA:5D:3A:A3:26:07:AB:D1:8D:62:21:45:6B:4C:CD:B3:88
Certificate issuer: /CN=4626b2ea5d3aa32607abd18d6221456b4ccdb388
Certificate serial: 019D375327B4859B27954A9B89CC48BB225E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Riay6l06oyYHq9GNYiFFa0zNs4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/92a128-c5b2-42f7-8928-630557f7fc6e/1/Riay6l06oyYHq9GNYiFFa0zNs4g.mft
Manifest number: 54
Signing time: Sun 29 Mar 2026 02:01:29 +0000
Manifest this update: Sun 29 Mar 2026 02:01:29 +0000
Manifest next update: Mon 30 Mar 2026 02:01:29 +0000
Files and hashes: 1: Riay6l06oyYHq9GNYiFFa0zNs4g.crl (hash: cYqcwg4Qm1zQh7xHSbr52gWrG1ubFez6BZ9TXu5QDZE=)
2: YPt-dHjNBE3OqW-bVt7EKdFMZsQ.roa (hash: iVX85Zb3iLd8AnDmD5uCyZr3V0K28Ja3+wsxvcGoNJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/92a128-c5b2-42f7-8928-630557f7fc6e/1/Riay6l06oyYHq9GNYiFFa0zNs4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/92a128-c5b2-42f7-8928-630557f7fc6e/1/Riay6l06oyYHq9GNYiFFa0zNs4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Riay6l06oyYHq9GNYiFFa0zNs4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:27:b4:85:9b:27:95:4a:9b:89:cc:48:bb:22:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4626b2ea5d3aa32607abd18d6221456b4ccdb388
Validity
Not Before: Mar 29 02:01:29 2026 GMT
Not After : Mar 30 02:01:29 2026 GMT
Subject: CN=1c1c9d6c2032520a8dd1c78d77aee4234f99b64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:3a:fd:a7:44:81:3d:a6:93:5e:59:c2:4e:
18:98:1d:e8:64:9d:6c:e3:94:0e:51:7e:6f:a2:06:
49:ab:8e:7f:5d:b1:a1:94:ec:0b:e2:41:db:84:6b:
c0:52:2f:ab:1c:5b:34:0f:30:33:f6:eb:46:34:d7:
51:c3:9c:16:f4:46:16:b5:e7:02:05:e0:10:d7:1e:
56:7e:ab:4c:18:ef:8b:f1:30:02:97:11:67:86:49:
c0:6b:45:69:54:c7:21:77:6c:64:99:3e:bd:e8:38:
29:0a:a8:e0:1a:c6:a9:a8:e1:f7:59:b4:b6:7d:cf:
fd:92:9d:ec:d6:0f:bd:cf:56:d2:0b:11:eb:18:09:
b7:61:33:22:e9:7f:8f:a8:7c:1a:5c:c1:b2:66:7e:
9f:c9:7d:fd:84:ec:e4:8d:c2:fa:44:9b:2e:e6:af:
41:9e:72:4d:74:ab:15:b9:09:af:13:8b:ee:5c:10:
f1:68:e2:bb:db:42:92:05:06:74:e8:13:b4:1b:57:
d0:76:8b:d9:ba:c4:7a:80:5b:10:c5:dc:4f:8a:f0:
d5:dd:b0:e9:37:5b:6d:01:a3:f4:95:c1:5d:ea:e2:
6c:f5:4d:10:83:f0:f9:6b:74:a3:cd:85:61:af:b5:
aa:87:3d:0c:64:f3:7e:74:41:c0:05:dd:9f:7d:ba:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1C:9D:6C:20:32:52:0A:8D:D1:C7:8D:77:AE:E4:23:4F:99:B6:4F
X509v3 Authority Key Identifier:
keyid:46:26:B2:EA:5D:3A:A3:26:07:AB:D1:8D:62:21:45:6B:4C:CD:B3:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Riay6l06oyYHq9GNYiFFa0zNs4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/92a128-c5b2-42f7-8928-630557f7fc6e/1/Riay6l06oyYHq9GNYiFFa0zNs4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/92a128-c5b2-42f7-8928-630557f7fc6e/1/Riay6l06oyYHq9GNYiFFa0zNs4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bf:41:4b:3a:30:7d:9f:e1:d6:c7:45:2f:76:fe:af:bb:4b:
91:e3:db:bb:9a:ce:f7:e0:74:e7:d3:d1:db:cb:8a:a0:96:04:
d5:eb:9b:24:6b:a0:89:46:b6:96:32:13:ce:64:cb:fb:a1:fe:
d5:6c:16:f5:3e:19:b0:bc:65:72:7c:b3:8e:c3:46:83:06:7d:
0c:31:2d:d8:e3:6f:c7:2c:81:1c:2a:9b:bf:5d:50:1e:53:20:
7c:de:c5:6c:2a:0f:8d:9f:99:a7:15:75:81:66:98:2e:b9:80:
f3:2e:11:6e:6b:df:a9:2d:d0:88:a8:6d:90:84:00:8f:b5:3f:
c2:0f:b9:27:fb:aa:a0:f0:d5:40:de:d0:fb:23:ec:78:a3:45:
b3:82:7d:3c:91:fd:11:da:3c:f0:67:b6:39:09:7b:29:89:d0:
37:61:10:e4:20:8c:90:32:36:bc:fd:93:80:79:a2:96:f3:5a:
57:82:c5:48:61:6f:c7:64:ce:d3:f5:d1:e3:23:d3:bc:53:38:
c0:0d:3d:88:2f:0d:85:62:d3:6d:4a:4d:3c:8e:18:6a:74:f1:
64:6f:f0:17:81:1d:a9:a2:93:fe:9c:ac:fc:48:a7:ba:d2:ba:
3c:bb:b7:fc:dd:50:cb:55:94:83:79:86:67:41:45:33:71:74:
6e:48:a3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:12 2026 by rpki-client