Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File: RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier: x7bNiNcao/7OjBp3zNUyDuCrVdMkGPCJ1GQDPAs2SIM=
Subject key identifier: 8A:4E:B9:33:DE:CB:1D:DE:2B:7D:70:B1:E6:42:E1:4F:C3:77:EB:61
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019D612A90C34DDB616976DA8933CD06384C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number: 18D0
Signing time: Mon 06 Apr 2026 05:01:12 +0000
Manifest this update: Mon 06 Apr 2026 05:01:12 +0000
Manifest next update: Tue 07 Apr 2026 05:01:12 +0000
Files and hashes: 1: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
2: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: owp8lYTILG9m5SYKSSVpTAarbP17kYdKfpmUIPD+v7U=)
3: UVZSH-qjnUODxApJvnuBt-EAJoY.roa (hash: qEeNRBoEnR3OhUU2I8brudlBLMuFLZh8jyPrCOjJSRQ=)
4: eTMmIm9zv_0o9KEz3EHntctKzoc.roa (hash: tXT+SzZWIzmmd4kK5abXulIyd/8wtzj4Rs+S9xwYZIg=)
5: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
6: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
7: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
8: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Apr 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:61:2a:90:c3:4d:db:61:69:76:da:89:33:cd:06:38:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Apr 6 05:01:12 2026 GMT
Not After : Apr 7 05:01:12 2026 GMT
Subject: CN=8a4eb933decb1dde2b7d70b1e642e14fc377eb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:02:93:f1:2c:96:c6:87:9e:29:ef:5d:e6:72:
db:36:35:5c:95:84:ff:37:30:6e:50:2e:79:50:9e:
5c:8d:d7:38:3e:f3:01:00:13:18:17:c0:2b:3e:6f:
cb:c5:9e:cd:91:7a:2a:90:fd:dc:a5:3c:bb:95:af:
09:84:c1:ec:dc:1a:76:eb:7b:53:ba:dd:ff:a6:19:
ef:5e:c6:3f:00:6c:ab:00:8e:c5:44:ed:87:57:b8:
0e:57:db:fa:7a:f9:eb:a2:d1:bb:86:13:3e:87:f4:
ca:f1:49:0b:a1:8c:52:f6:b3:54:86:b9:96:91:7e:
6a:55:05:c6:d8:e4:01:df:09:e2:d2:4c:e6:29:ca:
21:f2:37:54:05:f5:0b:f1:4b:12:86:dc:17:bf:6e:
ea:d4:de:5e:b9:a5:e3:c8:f7:f2:8b:61:ef:a9:5d:
f2:d9:7b:ed:67:5f:d8:07:e8:05:4e:ea:b2:bc:62:
48:95:25:54:8b:84:38:a9:56:d4:50:75:10:12:40:
99:02:56:1f:75:3e:49:27:95:9d:d1:96:c7:49:e9:
2a:9d:0a:bc:82:c7:75:59:92:52:2a:69:93:9d:07:
c1:6c:08:d6:85:1c:5b:a0:95:06:21:f2:ee:11:3b:
85:8a:b4:a5:d6:97:31:b1:94:6e:0e:b7:f2:3f:f5:
2b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4E:B9:33:DE:CB:1D:DE:2B:7D:70:B1:E6:42:E1:4F:C3:77:EB:61
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d4:8d:23:46:98:95:8b:e7:7c:d0:a3:fd:34:d4:d1:07:f4:
2b:79:93:39:68:94:3f:e0:ef:f3:26:4a:86:28:cf:d5:63:b5:
74:e3:cf:92:4c:21:33:d3:96:d7:0a:62:95:5b:fd:0a:5d:f1:
09:29:0d:df:f4:f9:bb:b7:93:5b:59:a3:9c:10:bc:e3:7b:3c:
76:5c:3c:11:29:be:cb:ea:0b:c9:cf:52:b4:05:62:be:98:dd:
a9:15:c0:61:66:7c:f3:b5:40:7c:ff:76:2c:11:82:45:0b:c3:
aa:b7:7d:af:d3:89:bf:30:41:bd:b8:76:d2:6f:0a:85:82:8c:
6d:5a:e1:82:e7:1e:c5:68:3f:77:bb:fb:15:cf:88:57:03:e1:
6b:31:be:54:65:cc:14:4b:7f:ad:a0:0a:54:8b:f7:8a:8b:d2:
31:67:d0:37:16:63:88:3a:4c:8c:73:b5:b3:06:84:d2:13:2e:
67:06:c7:09:f0:c3:0c:6f:01:e7:3d:f4:c6:b0:eb:e1:c6:5f:
5b:34:0d:cb:4c:86:13:c9:5d:f5:b2:65:be:85:ba:ed:3d:89:
cb:05:e4:75:7d:a4:07:33:ce:eb:b5:53:53:0c:95:b9:51:ab:
ea:be:6f:5b:a3:55:75:30:ba:b3:98:18:b7:96:c5:23:1a:81:
ae:06:51:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:19:54 2026 by rpki-client