Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
File: ryfUX8GLqRerHomhfvC2NgmEgiQ.mft (raw, json)
Hash identifier: +0YcXv6md8vD9kgtmXZHL0FMdxVUbcEnKrgTmCTaPEc=
Subject key identifier: 58:93:C5:3D:47:32:39:12:F4:30:47:17:B9:F7:56:3A:AC:E3:AD:99
Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
Certificate issuer: /CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Certificate serial: 019F826770A91C3D2657713789FA4C36B6F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
Manifest number: 1668
Signing time: Tue 21 Jul 2026 02:00:44 +0000
Manifest this update: Tue 21 Jul 2026 02:00:44 +0000
Manifest next update: Wed 22 Jul 2026 02:00:44 +0000
Files and hashes: 1: UPdd3G2KcdZS3e0YMWJ1mdET7ug.roa (hash: fLa6myDFK6r7xHzOqHrp8ZBgZdrk6WJWWDhaOtDKTYI=)
2: ryfUX8GLqRerHomhfvC2NgmEgiQ.crl (hash: +GshBc4l++H8yoQw0pdsTOgLxJL4fvQxr3bQiodqKNc=)
3: tIyhjPYpgahql1s3g33PvZ8ic6Q.roa (hash: 2D85U464zzyXnN6q09EGipP8N8nVNvilmezlcS8OLVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:67:70:a9:1c:3d:26:57:71:37:89:fa:4c:36:b6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Validity
Not Before: Jul 21 02:00:44 2026 GMT
Not After : Jul 22 02:00:44 2026 GMT
Subject: CN=5893c53d47323912f4304717b9f7563aace3ad99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f9:df:0b:df:b1:9a:17:b0:52:8d:8f:91:67:
b4:82:96:07:d5:3a:55:33:80:39:84:25:1d:1c:75:
3c:55:5d:d2:12:0b:84:48:cf:7d:36:41:b0:64:a2:
95:3c:fc:96:cd:fd:41:64:22:a3:1c:dd:b0:05:cb:
3b:c0:72:11:08:c8:aa:ed:44:f1:2d:df:f4:67:f9:
7c:c6:69:95:5e:b4:0e:30:67:91:6c:a1:87:88:ad:
69:15:cc:06:13:8d:5d:38:3b:8f:cc:3c:51:19:92:
85:8d:01:52:77:07:ce:da:72:4d:56:6a:1e:4a:ee:
30:f2:fe:b8:8d:b1:3c:82:43:26:c4:57:b1:78:18:
81:2a:ce:44:6c:a1:c7:b5:1c:14:bc:fd:a5:13:da:
3f:1c:24:2b:69:6f:78:df:af:7d:b8:3a:b4:71:f2:
0a:80:4d:c1:50:4f:26:48:91:f7:c9:0a:4e:92:6d:
54:7a:68:60:ed:fc:a6:1b:6a:19:ea:bc:ab:a7:f5:
b4:cf:d1:12:2c:e6:10:83:c8:36:6c:6c:c6:f9:7a:
6e:1e:69:d1:fa:a1:27:2d:98:42:34:ed:01:4d:a6:
0f:2c:64:de:de:bd:e8:f0:90:c3:c8:96:08:8c:4b:
46:c4:0f:c2:7d:3d:52:83:4d:57:a9:dd:c9:36:63:
f5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:93:C5:3D:47:32:39:12:F4:30:47:17:B9:F7:56:3A:AC:E3:AD:99
X509v3 Authority Key Identifier:
keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ef:11:4d:e6:49:73:bc:bb:cd:68:5a:04:5c:22:2e:0c:6c:
88:9c:c6:09:71:cd:ec:33:5b:31:23:59:2a:02:8d:dc:0b:d6:
f7:5e:f7:50:e7:dd:9a:6f:03:f2:79:06:4b:9e:6e:4e:4d:79:
f1:fa:9c:72:e8:58:ec:27:33:68:8a:d2:46:4a:6d:30:3b:ad:
92:76:45:bc:af:c9:76:d8:63:a2:63:b2:9f:3e:4d:f6:72:69:
f6:8f:2d:f4:3c:b9:d1:c5:44:30:ac:83:df:23:99:0a:98:bd:
d0:a1:f1:db:75:fa:33:24:7a:57:3d:fa:38:43:0f:f5:13:f6:
fc:c6:de:b5:3f:3b:da:a0:ad:83:fe:6e:8f:5b:80:23:68:ce:
de:fa:fe:02:c4:99:8c:76:56:95:3c:cc:6e:d7:b4:ff:51:ba:
0b:18:21:ab:37:75:13:60:85:a8:2a:53:df:b8:5c:45:5b:24:
38:f7:84:65:f3:cf:c8:39:12:16:24:32:54:6a:cc:40:11:39:
e2:92:bd:4d:c7:db:c8:73:a3:a7:3e:f0:6b:a0:7d:ea:88:ed:
cb:f2:d6:9b:2a:59:6d:be:43:fc:0b:0e:ad:b0:22:d2:e8:f6:
ce:7f:35:bf:7f:77:3e:5c:a4:72:70:da:d1:cb:84:d5:cf:44:
02:f2:30:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:15:40 2026 by rpki-client