
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File: RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier: 1bn3Cc5xgPuHjrrZz3S5vHilfKUrEPybETGE1dchejk=
Subject key identifier: FA:60:A8:48:C2:43:7B:22:A9:B2:92:C6:CD:0F:6D:BB:B5:46:B8:5B
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019CDDD7B360C5C18C58963153FB5EEC5EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number: 188C
Signing time: Wed 11 Mar 2026 17:00:26 +0000
Manifest this update: Wed 11 Mar 2026 17:00:26 +0000
Manifest next update: Thu 12 Mar 2026 17:00:26 +0000
Files and hashes: 1: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
2: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: JwWiYdHFuqtWNGsYTN5LDnxt0ZkwN80zaQWKDTQwIi4=)
3: UVZSH-qjnUODxApJvnuBt-EAJoY.roa (hash: qEeNRBoEnR3OhUU2I8brudlBLMuFLZh8jyPrCOjJSRQ=)
4: eTMmIm9zv_0o9KEz3EHntctKzoc.roa (hash: tXT+SzZWIzmmd4kK5abXulIyd/8wtzj4Rs+S9xwYZIg=)
5: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
6: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
7: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
8: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 15:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dd:d7:b3:60:c5:c1:8c:58:96:31:53:fb:5e:ec:5e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Mar 11 17:00:26 2026 GMT
Not After : Mar 12 17:00:26 2026 GMT
Subject: CN=fa60a848c2437b22a9b292c6cd0f6dbbb546b85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:da:76:15:58:6f:52:41:26:fb:7d:21:99:59:
7a:b6:fe:84:36:91:1c:81:67:c4:5e:4b:1f:e9:15:
b3:cb:1a:21:82:b7:73:54:81:65:98:aa:63:3d:07:
ea:16:53:35:20:92:bb:a6:e8:38:23:07:cd:b5:c5:
a8:ea:ab:69:8f:d1:de:d4:e5:a9:9c:10:a8:15:3a:
19:b8:a4:cc:f9:dc:94:b9:f9:c8:ff:a8:81:c9:51:
9c:96:4c:05:ce:77:8c:e3:54:b1:27:b5:16:2e:e3:
4c:bf:19:3f:2c:5f:98:be:af:04:49:bf:be:67:ef:
b5:f7:49:3e:ac:70:13:66:de:50:e5:73:de:ec:d6:
f9:31:d3:96:fc:1a:bd:fd:f5:39:23:d5:97:55:36:
0c:26:a8:01:3c:60:ad:23:4e:b7:84:bd:5e:c5:65:
13:6d:19:33:fa:d1:99:51:31:e7:e1:93:9f:ab:40:
47:67:66:84:6c:82:6b:d5:99:d7:b6:43:a1:ab:d5:
9e:86:b6:c5:ef:b2:01:6e:e1:27:8b:79:52:fa:dd:
27:d6:c5:f0:ae:11:ba:7c:37:bf:0c:96:00:ce:95:
92:c1:22:da:00:04:4a:73:8e:05:64:fa:05:3c:46:
77:83:14:9b:12:62:df:b4:e2:d9:42:fc:8d:37:4f:
b2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:60:A8:48:C2:43:7B:22:A9:B2:92:C6:CD:0F:6D:BB:B5:46:B8:5B
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:63:a7:79:1c:21:b8:1c:43:64:e5:91:b9:06:16:81:fc:a3:
08:0a:ed:4f:7a:90:73:f6:d8:4c:03:29:ef:60:ff:5d:7c:ac:
25:a8:74:b3:26:bd:b2:44:7a:d7:9a:2b:2d:8c:30:11:8f:ba:
0a:ab:4b:1f:a8:b0:4d:3e:9f:e6:24:be:60:45:d2:fe:0a:10:
eb:cf:37:ae:52:d8:62:8c:9f:d2:29:2f:35:ef:21:e7:8f:76:
36:1e:93:b8:ad:42:48:a1:5e:1c:33:bf:9f:06:f8:ce:f8:7a:
46:7b:7a:6a:8e:f0:92:03:bd:b8:7d:3b:75:d5:59:07:7b:e3:
9d:86:5e:dc:4e:2b:67:26:b7:ee:ae:87:d4:1f:b6:bf:f6:a0:
dc:3f:65:04:7f:3b:15:4a:f6:85:52:45:69:15:de:c4:05:67:
e5:08:90:41:5d:4f:dc:4e:cb:48:60:8f:3d:70:d9:26:ba:fd:
ba:2d:34:68:2c:f5:85:12:85:52:9c:bf:84:db:3a:3a:2c:e4:
3d:e9:3f:bb:39:f5:c1:f2:32:72:6f:2a:f9:df:8b:10:f3:8d:
6c:98:1a:d9:88:d1:1d:0f:b3:39:80:14:be:c9:13:e7:5a:4c:
a8:43:a7:d5:bb:ec:54:e9:94:7f:21:b4:d3:28:a6:16:b0:10:
2f:4b:52:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 19:42:53 2026 by rpki-client