Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
File: ryto8Mg63Zo6O4arJPuRCpYCYsY.mft (raw, json)
Hash identifier: ZqhHJPozVc6WXDueIQwPr9IIoiW4LYL6CZSPizhjLPg=
Subject key identifier: 64:E6:1E:F9:FF:7F:80:BB:41:64:87:A2:B2:85:4E:BC:2D:9D:13:64
Authority key identifier: AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
Certificate issuer: /CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Certificate serial: 01A02AA21338E31A7034DCF98FE3194C48DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
Manifest number: 1588
Signing time: Sat 22 Aug 2026 18:00:59 +0000
Manifest this update: Sat 22 Aug 2026 18:00:59 +0000
Manifest next update: Sun 23 Aug 2026 18:00:59 +0000
Files and hashes: 1: h-PWIeDfQLuLQns6H59eVXIlTEw.roa (hash: a2RfFAyHbTGC+LHQhF0hKAuxj7Am0hNvyjuE9TNtMKs=)
2: ryto8Mg63Zo6O4arJPuRCpYCYsY.crl (hash: /aqWjwiI/TQmFJSmlXGobvTksVh3lXay0dRpD719X+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2a:a2:13:38:e3:1a:70:34:dc:f9:8f:e3:19:4c:48:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Validity
Not Before: Aug 22 18:00:59 2026 GMT
Not After : Aug 23 18:00:59 2026 GMT
Subject: CN=64e61ef9ff7f80bb416487a2b2854ebc2d9d1364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:7c:af:2e:3d:9d:17:3b:e4:d5:4a:06:e9:
d9:05:c0:db:16:c6:c8:ba:63:87:56:6d:2b:64:cb:
07:fc:c9:39:ae:16:56:35:e4:8d:37:1f:8f:51:3c:
28:75:ff:12:2c:8e:56:ec:79:df:64:93:c0:ee:11:
0a:a0:17:e8:60:ee:e8:bb:e9:2f:a9:0e:0d:94:6b:
07:e6:da:16:b0:de:73:05:7d:de:37:3d:eb:f9:b1:
e3:64:63:b2:1a:f4:6b:e9:65:17:cc:9f:a4:49:83:
c7:69:c7:89:ef:8a:97:2f:14:0e:d0:e2:38:7a:10:
3f:fe:f3:af:b0:f2:f0:4d:0f:0c:45:07:56:82:a2:
7f:89:8a:71:4b:4e:fe:4d:da:d2:46:46:db:f7:ed:
7f:5e:83:98:2d:f8:84:00:4c:c0:54:bc:cd:c7:43:
f0:63:fa:f0:0a:36:c0:cc:71:67:3e:3d:de:32:3a:
46:02:09:bc:83:95:b8:22:48:0d:54:c9:5b:67:37:
7e:77:91:e6:46:93:b6:81:13:88:fe:ee:0b:ac:64:
c4:6e:44:80:63:c8:5d:94:39:68:97:f5:5b:7d:d9:
4b:f0:ea:60:f3:ea:ce:a3:ce:67:75:b6:31:f3:30:
39:7a:ab:d6:f1:e3:e8:42:f8:d3:0e:21:60:ff:e4:
0c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E6:1E:F9:FF:7F:80:BB:41:64:87:A2:B2:85:4E:BC:2D:9D:13:64
X509v3 Authority Key Identifier:
keyid:AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:4d:ee:10:c0:21:b3:64:dd:d8:c9:cb:9d:ef:d4:7f:14:1a:
51:30:e3:1c:e1:ea:11:6b:95:33:cb:54:e8:7b:f4:0b:b3:33:
ab:28:1a:cf:dc:78:34:b0:a3:de:5a:78:18:0e:63:29:1b:cb:
b0:da:67:09:fe:0b:f9:01:87:d3:31:2c:cf:4d:9f:54:4b:24:
41:5a:68:59:43:8c:20:f7:08:fd:39:e4:1d:67:0e:38:c5:a9:
82:0c:ab:20:28:bd:a0:60:3a:0f:cd:ee:04:93:60:80:01:9e:
40:f4:88:57:15:24:2b:b0:0c:c3:fd:58:99:5c:ba:0e:8b:6c:
f4:75:95:1b:e4:86:53:f2:61:19:08:b6:6d:ac:d1:62:db:88:
82:61:c0:cb:31:bb:c7:2f:80:5c:90:76:bd:10:bc:1b:89:45:
0e:73:e4:4f:1b:26:a9:17:d6:f4:6a:10:9b:6a:b1:ff:89:af:
06:c6:43:4b:36:99:09:28:cb:e3:e6:3c:a9:d9:7b:cd:80:cb:
9d:b9:80:e8:7e:63:f2:76:da:8c:3a:e9:4e:c2:ca:37:38:4c:
83:55:6c:34:d4:ca:df:f2:0e:05:d3:91:27:35:2e:9a:82:29:
92:29:b6:f6:c3:e5:88:ad:df:5d:b9:87:15:52:9a:c8:2f:43:
38:0d:1b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 20:33:58 2026 by rpki-client