Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
File: Rych442ItIUuLgmCd6L7IKsMgbM.mft (raw, json)
Hash identifier: 7h7U5ndAT3M1qmlNyEhvPWxDmd0CKddBtlbB9OunEnM=
Subject key identifier: 1D:44:08:37:A3:69:B3:38:A3:74:D1:9F:15:1D:A2:4F:91:4F:B0:A0
Authority key identifier: 47:27:21:E3:8D:88:B4:85:2E:2E:09:82:77:A2:FB:20:AB:0C:81:B3
Certificate issuer: /CN=472721e38d88b4852e2e098277a2fb20ab0c81b3
Certificate serial: 01A08A8C71CEEFB1C9B35C187DEF4304B55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:00:54 +0000
Manifest this update: Thu 10 Sep 2026 09:00:54 +0000
Manifest next update: Fri 11 Sep 2026 09:00:54 +0000
Files and hashes: 1: Rych442ItIUuLgmCd6L7IKsMgbM.crl (hash: Q6a1sMmRokyHukcuRv4Mid3lR8N6E0rkFYc7a+DUoEE=)
2: Sh6wUutUQFoAhZbyc9mJ5TkoVys.roa (hash: jlA4qWWIetKLdd6pQUmLfLeRwFINjNkS5gKXoUmiZho=)
3: ZsYV7B7rXiV9Sd4d1WORwRKLc0M.roa (hash: ZZC9xuQEACqHh/6sNaCAxnay+gwuPiQeRofUXPKfCak=)
4: ndXtEXhaQsCV3FdMrXZs6wJq0fw.roa (hash: AhakacNqL0L3QNvTgK4DkPjXfP1L2yY1VMxHtjyhGWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:71:ce:ef:b1:c9:b3:5c:18:7d:ef:43:04:b5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472721e38d88b4852e2e098277a2fb20ab0c81b3
Validity
Not Before: Sep 10 09:00:54 2026 GMT
Not After : Sep 11 09:00:54 2026 GMT
Subject: CN=1d440837a369b338a374d19f151da24f914fb0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:97:ca:60:a1:2e:4e:05:9a:4a:b0:1e:8f:79:
1d:f9:9b:3b:0d:44:0f:3d:82:d6:62:d2:51:30:21:
9d:0d:d1:c9:34:2f:76:6f:52:a8:5f:f5:bc:fa:a0:
7a:05:94:c2:10:c2:af:e7:bc:df:89:9b:67:e0:67:
1d:6b:c3:88:4e:a8:fa:c7:83:8c:c4:83:e4:56:de:
41:04:2c:6d:46:01:4e:26:c8:b7:5b:54:ac:84:22:
bc:49:e9:3e:31:8a:ea:76:c4:4d:30:67:a0:d8:46:
09:40:6f:a2:3d:e6:47:5c:5e:bb:9d:9b:f5:48:25:
53:57:c8:12:d8:9e:d8:90:9c:e5:7f:b1:8c:58:92:
a7:36:d2:4b:c0:5b:4a:3d:5f:22:55:df:d2:5a:66:
bd:69:e7:cd:15:b9:72:b8:42:66:74:99:14:4d:54:
23:70:cb:b4:c1:11:98:d8:8b:69:b3:af:37:cb:41:
18:b4:8e:71:dc:db:88:f7:3c:2b:a6:3c:e5:dd:0b:
40:32:1b:2c:3a:a8:a5:63:a0:36:18:cd:41:2d:be:
df:03:0a:a6:eb:6c:f8:cd:84:40:e4:f8:6a:01:8f:
eb:9b:ae:89:65:89:47:a3:46:11:06:15:07:2e:a0:
7e:eb:b3:dc:a7:e3:4f:10:e9:43:c2:fa:5b:8d:af:
df:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:44:08:37:A3:69:B3:38:A3:74:D1:9F:15:1D:A2:4F:91:4F:B0:A0
X509v3 Authority Key Identifier:
keyid:47:27:21:E3:8D:88:B4:85:2E:2E:09:82:77:A2:FB:20:AB:0C:81:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:ed:97:d3:61:d6:40:9d:3b:43:30:35:8c:4c:f9:86:62:ab:
67:45:b2:e5:ae:97:96:ac:4c:54:f5:44:04:1c:78:4a:b4:91:
73:87:96:3c:ef:08:43:f5:b8:f5:f5:ab:d6:30:83:76:d1:c0:
8c:f5:c9:c4:40:29:5a:19:1d:39:45:3d:dd:fd:86:cf:ad:d3:
62:88:ef:01:83:56:b7:c9:06:58:bf:98:c3:5c:7e:70:31:5b:
fc:dc:57:c0:f3:f6:12:26:95:a0:aa:63:48:7a:f5:bb:f1:d8:
72:63:67:a2:aa:f2:73:45:5e:1d:f8:65:a4:12:c2:33:56:c3:
b0:84:66:b4:8f:7a:c1:9e:41:de:79:8d:7c:c1:df:6d:f2:38:
2b:21:b2:a9:9c:61:6c:ef:59:61:d8:35:ba:ba:41:61:ca:49:
24:9a:23:7d:78:ad:a0:46:11:fc:bc:64:f6:6a:f7:88:c1:9b:
3a:ff:5b:88:bf:5c:2c:91:07:b8:44:ee:3c:2b:2e:3b:85:64:
0e:43:c5:7f:ad:ec:63:61:58:66:1a:09:8d:61:73:4b:e5:66:
9c:45:91:4f:df:0f:e4:88:cf:53:31:c3:cf:ba:21:c7:44:92:
6a:42:29:43:1b:aa:90:8c:40:a9:71:e9:81:c2:83:d0:ba:e2:
5a:c4:0b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:05:49 2026 by rpki-client