Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
File: Rych442ItIUuLgmCd6L7IKsMgbM.mft (raw, json)
Hash identifier: Ubdi0ceofVzDrGOWxNShBdpuNGHkEp/HfOZhFXghPSs=
Subject key identifier: 33:83:BD:2F:88:88:40:D9:DB:0E:09:D4:5E:F3:4E:B3:02:7E:41:49
Authority key identifier: 47:27:21:E3:8D:88:B4:85:2E:2E:09:82:77:A2:FB:20:AB:0C:81:B3
Certificate issuer: /CN=472721e38d88b4852e2e098277a2fb20ab0c81b3
Certificate serial: 01A17FCF90028E1B02436F50967E06AB6A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
Manifest number: 0140
Signing time: Wed 28 Oct 2026 00:01:11 +0000
Manifest this update: Wed 28 Oct 2026 00:01:11 +0000
Manifest next update: Thu 29 Oct 2026 00:01:11 +0000
Files and hashes: 1: Rych442ItIUuLgmCd6L7IKsMgbM.crl (hash: zHyzqdNjFMhY3iD3/+ZjtG+wDN+GxUudTBYM9Aceh9Y=)
2: Sh6wUutUQFoAhZbyc9mJ5TkoVys.roa (hash: jlA4qWWIetKLdd6pQUmLfLeRwFINjNkS5gKXoUmiZho=)
3: ZsYV7B7rXiV9Sd4d1WORwRKLc0M.roa (hash: ZZC9xuQEACqHh/6sNaCAxnay+gwuPiQeRofUXPKfCak=)
4: ndXtEXhaQsCV3FdMrXZs6wJq0fw.roa (hash: AhakacNqL0L3QNvTgK4DkPjXfP1L2yY1VMxHtjyhGWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:90:02:8e:1b:02:43:6f:50:96:7e:06:ab:6a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472721e38d88b4852e2e098277a2fb20ab0c81b3
Validity
Not Before: Oct 28 00:01:11 2026 GMT
Not After : Oct 29 00:01:11 2026 GMT
Subject: CN=3383bd2f888840d9db0e09d45ef34eb3027e4149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:bf:0e:5e:a0:79:32:2b:24:63:f9:41:bc:
93:65:48:96:f3:67:d4:ba:b7:06:05:53:82:af:46:
f5:21:61:1f:1e:a8:88:5e:c1:8a:3f:62:bd:7b:57:
1c:e7:04:c4:c5:ea:b2:09:fb:b7:3d:85:03:20:26:
97:0d:06:15:ea:12:60:e0:12:e6:ee:e6:44:78:f5:
b8:75:ef:d3:8d:0b:97:ee:84:f8:fe:f2:57:4a:27:
51:1a:1d:24:03:9f:06:6c:f5:c7:9d:e2:74:49:61:
21:f9:21:61:6d:ac:67:b9:2f:ec:e8:36:f0:f8:67:
60:12:e0:95:fe:eb:f8:92:b0:1c:db:42:83:57:7b:
ff:cf:00:af:29:6d:11:b4:b7:06:c5:03:20:8d:7b:
4e:c2:01:ca:aa:77:6b:38:84:ac:09:08:d1:b4:c8:
c3:ad:40:51:5c:91:6a:2e:e0:e9:89:cc:d8:99:68:
c6:aa:27:a5:2d:17:a8:3a:e4:b0:d0:3f:f1:e8:76:
69:e5:cd:c9:9f:33:99:97:ba:7a:c4:f4:54:c0:53:
c5:ce:a8:29:af:2f:ba:14:fa:30:19:66:fd:e6:c0:
3d:50:3e:9d:3f:94:da:3a:1b:00:e6:90:ef:c5:a5:
e6:8a:d4:b7:ce:d1:a3:40:99:2a:b4:e4:c8:97:0a:
71:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:83:BD:2F:88:88:40:D9:DB:0E:09:D4:5E:F3:4E:B3:02:7E:41:49
X509v3 Authority Key Identifier:
keyid:47:27:21:E3:8D:88:B4:85:2E:2E:09:82:77:A2:FB:20:AB:0C:81:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:72:9e:a4:c1:34:91:1f:6f:f9:a1:c6:0a:79:be:0c:89:8e:
88:49:79:ea:55:30:69:d8:a9:16:f2:34:f1:16:c7:4d:11:d3:
99:c2:b5:e0:41:fb:f7:9f:7d:7a:d5:fd:c5:5e:33:70:2f:83:
6a:1c:f3:ee:dc:ef:ad:21:f0:e8:ac:81:78:73:8f:fd:88:e5:
2e:40:49:09:4a:76:ea:95:b4:4d:7f:2a:32:4f:48:45:c3:15:
b9:b1:4a:01:e0:ab:d6:24:38:b2:2a:d3:43:2c:91:67:ec:a8:
45:95:81:e2:5e:b1:34:21:d0:cb:1e:5f:ed:85:aa:14:ab:f8:
41:06:46:18:09:52:a1:18:e7:2c:db:d2:17:a3:86:1e:26:e2:
95:df:f9:24:ab:ab:6b:fd:da:5c:c1:1e:d9:68:55:b1:50:69:
17:d7:b6:14:b7:2f:0e:ac:20:cd:c3:e3:cd:e9:99:37:90:ce:
ca:e5:5c:2c:7e:7b:c2:92:ee:a8:af:5f:65:9f:5e:c8:a3:a8:
4e:4b:c0:8e:77:22:fd:1e:cb:96:52:b6:25:bb:f2:a6:64:61:
0b:a3:a2:f4:15:ef:35:5e:ed:57:de:f6:f4:a8:d2:24:e6:62:
50:41:f1:36:96:fd:ba:dc:05:ff:29:45:9b:e5:97:80:db:47:
e0:be:ff:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:39:59 2026 by rpki-client