Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File: RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier: Al6RMDYtoJWJDUQ2tALuqgvtyV1uQZ5rYAhP62JutsI=
Subject key identifier: 3C:3B:C0:E9:3C:6D:8D:FB:9B:28:A0:94:DE:F6:F4:DC:E0:71:A5:F3
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019D46214F542A701321B3FA9B69544FC364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number: 18C2
Signing time: Tue 31 Mar 2026 23:01:21 +0000
Manifest this update: Tue 31 Mar 2026 23:01:21 +0000
Manifest next update: Wed 01 Apr 2026 23:01:21 +0000
Files and hashes: 1: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
2: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: DqVyuSPnGS0Pd5G7uoyaf05IC5IhNABadDxjiNqjXt8=)
3: UVZSH-qjnUODxApJvnuBt-EAJoY.roa (hash: qEeNRBoEnR3OhUU2I8brudlBLMuFLZh8jyPrCOjJSRQ=)
4: eTMmIm9zv_0o9KEz3EHntctKzoc.roa (hash: tXT+SzZWIzmmd4kK5abXulIyd/8wtzj4Rs+S9xwYZIg=)
5: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
6: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
7: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
8: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Apr 2026 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:46:21:4f:54:2a:70:13:21:b3:fa:9b:69:54:4f:c3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Mar 31 23:01:21 2026 GMT
Not After : Apr 1 23:01:21 2026 GMT
Subject: CN=3c3bc0e93c6d8dfb9b28a094def6f4dce071a5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:e0:d9:49:6a:77:8d:e1:e2:c3:69:d2:69:
53:be:e0:d0:05:1d:fc:98:3e:1a:2a:81:b9:6f:f4:
5a:39:94:d5:a4:7e:f8:b0:e0:e9:37:d6:d3:48:5e:
94:40:b5:07:93:1c:b1:56:bf:a0:60:23:19:b7:e2:
74:86:dc:7c:9d:2c:73:d2:88:3e:45:83:31:85:bb:
e1:26:2f:05:18:00:1b:51:28:f0:6e:17:db:bb:ad:
8a:4f:97:23:a6:c1:1b:b4:dc:f0:64:57:c3:f0:c3:
ae:05:5d:f7:60:e8:8b:bd:6e:c8:e1:bc:cc:c7:67:
27:42:6a:68:33:8f:21:41:35:e5:8a:5c:5b:06:c1:
ef:30:10:5c:76:4f:0b:7e:e0:5c:05:bd:7c:c5:10:
23:e6:51:1c:e6:e6:96:83:3e:b5:df:63:1b:c2:e1:
f8:f7:72:dc:4c:e1:ad:c7:e7:ca:45:2f:34:3e:c5:
28:23:b6:53:1f:a0:c6:e7:c4:fd:86:fe:87:fe:7f:
ed:da:cc:31:b5:84:bf:d4:69:cd:6a:4d:66:54:8a:
9c:c0:af:2a:98:a3:f2:48:b1:95:c4:0d:e4:d0:fd:
64:80:8f:53:c9:77:f8:04:1c:2a:7c:f5:ba:2a:32:
5b:dd:34:51:0f:66:97:08:d7:94:0d:a6:6d:8d:fc:
02:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3B:C0:E9:3C:6D:8D:FB:9B:28:A0:94:DE:F6:F4:DC:E0:71:A5:F3
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:4e:73:eb:f9:41:65:82:88:f6:68:57:0c:7e:3a:63:33:7b:
89:ba:1d:41:3a:96:0e:4a:62:b4:d8:75:b2:8f:c7:5c:3d:69:
e3:2b:fd:c0:e1:dd:26:3c:63:64:20:2a:c6:14:5e:ac:5e:5a:
97:67:21:4a:76:3e:f4:d3:bd:44:ee:ec:ec:f0:49:c8:3c:a3:
f2:57:6f:03:71:dc:85:e9:16:42:24:6c:78:8e:51:55:a1:62:
3f:5a:0a:05:a7:92:03:52:17:c8:1c:aa:42:48:c9:0b:a1:07:
7d:08:d4:5b:25:0f:58:1e:d2:ad:33:77:6f:c5:6c:dd:78:ff:
86:bb:53:e6:70:0c:3b:03:cb:bf:8c:49:dd:39:68:71:04:5f:
3c:9b:9b:2a:77:85:50:96:c3:9b:a4:a0:ee:75:eb:47:b3:de:
1f:45:6e:39:e2:39:be:98:38:b9:76:51:cb:75:6c:cc:6a:23:
4c:ac:a1:b4:19:ba:8a:6c:51:cc:c7:50:09:55:f6:2e:43:a7:
83:d5:5f:25:cc:e1:93:b5:01:d5:1f:34:40:ef:51:de:40:5a:
11:f6:2e:e4:10:2d:55:20:46:33:8a:a6:8b:53:9a:ad:01:ff:
9a:ab:9d:df:1c:30:25:24:c7:7f:c1:8e:20:73:95:72:30:ad:
d5:72:3c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 02:32:13 2026 by rpki-client