Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File: RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier: bE8qZQIHFYoFXh4RO0Vso0IZZAgrO1tV8NlRf8NuwS8=
Subject key identifier: E5:A9:4F:CD:A6:5D:06:4F:B0:07:D0:FF:13:80:C0:DD:6C:61:25:71
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019CD9FAF2E9DD6497968150AF2BD7E05EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number: 188A
Signing time: Tue 10 Mar 2026 23:00:27 +0000
Manifest this update: Tue 10 Mar 2026 23:00:27 +0000
Manifest next update: Wed 11 Mar 2026 23:00:27 +0000
Files and hashes: 1: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
2: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: nE8NjtzxguN5TejTDGLu36YD6DbENgYrkPEt8IHRbrs=)
3: UVZSH-qjnUODxApJvnuBt-EAJoY.roa (hash: qEeNRBoEnR3OhUU2I8brudlBLMuFLZh8jyPrCOjJSRQ=)
4: eTMmIm9zv_0o9KEz3EHntctKzoc.roa (hash: tXT+SzZWIzmmd4kK5abXulIyd/8wtzj4Rs+S9xwYZIg=)
5: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
6: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
7: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
8: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d9:fa:f2:e9:dd:64:97:96:81:50:af:2b:d7:e0:5e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Mar 10 23:00:27 2026 GMT
Not After : Mar 11 23:00:27 2026 GMT
Subject: CN=e5a94fcda65d064fb007d0ff1380c0dd6c612571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:fa:44:8c:b6:04:83:46:f1:3b:89:e0:b3:
d5:0e:6d:8a:47:cf:8c:46:cc:1c:62:3a:9d:d3:ea:
4f:de:f4:02:d7:1d:1a:36:a3:75:48:5d:4c:1c:a2:
2e:f4:be:7d:ce:94:a2:4d:39:ed:df:db:cc:4a:b4:
cc:97:93:f0:29:82:ee:21:97:fd:96:9c:76:25:52:
c9:86:6f:f3:4b:d4:aa:5d:47:21:4c:4d:d5:70:76:
9f:03:7f:a6:c5:74:e6:bf:8a:55:e2:c9:3c:65:8c:
26:17:67:f4:fd:cd:ad:84:9f:b6:6a:47:54:85:ae:
d6:79:a7:2b:1f:19:fc:0d:f2:75:f7:ad:7f:73:2c:
75:88:d1:42:d5:02:ac:d5:11:b6:fb:d4:b4:1c:67:
5d:fe:99:eb:17:a9:5f:eb:fe:6d:57:4c:c5:3b:30:
95:18:27:a2:3a:cf:b4:8f:07:ec:28:8e:76:10:24:
c1:49:4b:d4:44:14:f4:60:60:ce:40:36:1b:8f:37:
02:c0:fd:be:e1:74:9a:c5:d7:2d:e0:28:dc:7c:a6:
98:b9:14:43:02:b1:1f:5a:df:8e:5d:85:87:cd:66:
f4:e2:e9:39:69:63:fd:d6:8e:7b:d0:c8:cf:c7:4a:
33:04:e0:4a:c7:5b:87:7d:20:30:d1:21:d5:39:36:
27:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A9:4F:CD:A6:5D:06:4F:B0:07:D0:FF:13:80:C0:DD:6C:61:25:71
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ec:91:12:c7:a3:ac:87:ec:33:e9:08:1a:05:bf:1d:a0:e5:
b8:40:84:48:3f:1c:a5:c3:f7:ee:c6:a0:01:ef:11:30:4c:a1:
51:81:76:ef:c7:64:a0:01:97:ca:3e:88:2d:ad:6c:a0:8c:05:
20:07:30:67:d7:17:92:0f:ac:1c:29:ab:d9:a8:b8:ec:31:d2:
0b:7e:f7:ee:35:5b:bb:82:fb:7e:b9:b2:67:4c:e9:80:eb:a9:
4d:de:80:af:a3:44:b2:6d:51:4c:f8:55:81:f8:bb:3a:83:15:
bc:8f:b7:00:fc:80:64:e9:96:92:a0:93:31:1b:71:2b:c8:b3:
06:61:29:cd:54:09:da:90:c7:1e:9f:61:87:d6:56:1c:74:f5:
fc:86:28:bc:dc:bf:a8:9a:7e:a6:36:05:fe:fc:46:b0:94:be:
9b:4c:5e:df:53:25:35:ee:b0:67:53:47:3f:80:13:a5:20:53:
56:eb:da:6a:36:cc:f2:c7:54:62:ec:b7:91:ed:a8:46:5a:49:
ed:d0:5a:ac:e9:11:7b:29:0c:d9:bf:88:2f:69:79:81:ee:fd:
87:e7:c4:c7:f4:d5:13:10:3f:f7:5f:13:33:26:bc:73:a1:3c:
e1:80:b8:0f:a0:e0:e1:53:37:a0:b6:52:ce:ed:37:20:b3:0e:
95:87:b2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 09:19:08 2026 by rpki-client