Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File: RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier: W6baSqc0MhsKEiNx81QZ3Z0IqwyKif1h2WHhr0PeQYA=
Subject key identifier: DD:12:01:6A:94:17:94:31:17:7D:32:1B:DD:0E:34:18:E3:E3:81:90
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019D40555E6A94CFB5AA5404AD6941477046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number: 18BF
Signing time: Mon 30 Mar 2026 20:00:29 +0000
Manifest this update: Mon 30 Mar 2026 20:00:29 +0000
Manifest next update: Tue 31 Mar 2026 20:00:29 +0000
Files and hashes: 1: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
2: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: svqqc3H8m5wG6laCvq37C0wmdw8DSHdr+xqv4AOcwuI=)
3: UVZSH-qjnUODxApJvnuBt-EAJoY.roa (hash: qEeNRBoEnR3OhUU2I8brudlBLMuFLZh8jyPrCOjJSRQ=)
4: eTMmIm9zv_0o9KEz3EHntctKzoc.roa (hash: tXT+SzZWIzmmd4kK5abXulIyd/8wtzj4Rs+S9xwYZIg=)
5: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
6: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
7: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
8: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 19:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:40:55:5e:6a:94:cf:b5:aa:54:04:ad:69:41:47:70:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Mar 30 20:00:29 2026 GMT
Not After : Mar 31 20:00:29 2026 GMT
Subject: CN=dd12016a94179431177d321bdd0e3418e3e38190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:91:1b:b7:65:29:88:c3:54:70:62:45:b0:7d:
62:8c:00:44:a4:99:8c:62:62:f8:21:77:22:0c:3e:
9a:0d:4a:de:1c:4d:9d:2c:6b:52:23:c7:55:70:6a:
0e:3f:22:1a:c6:40:5e:3c:78:8d:08:7f:aa:bc:6f:
0e:3a:43:4a:a1:24:f8:a8:5c:80:88:c7:a5:d1:82:
ab:c1:e4:c7:92:19:39:14:1e:36:15:16:43:3e:f2:
dd:b5:20:50:fe:09:35:8d:b7:6f:10:b3:8e:fc:bf:
32:79:37:8f:9a:ce:21:0c:fb:66:5e:ea:21:31:2d:
bd:8c:62:ea:1e:f4:65:13:84:c8:68:72:c9:ac:98:
7e:b3:b4:bd:00:d0:b1:0f:f9:7a:95:ea:d2:6f:4e:
e7:f0:36:df:4f:3b:59:da:57:35:46:aa:a9:6b:28:
e5:24:8e:19:e9:0c:67:33:62:c6:d9:e6:26:63:fe:
18:f4:48:34:9f:14:bf:ce:86:3d:c7:11:9e:87:be:
34:90:f1:ab:e7:36:1e:c1:b9:2f:06:92:53:be:68:
82:d0:dd:21:b3:47:8e:b5:c8:9b:f6:e2:eb:db:5b:
cb:ea:7e:ff:e7:53:89:8f:7a:b6:4a:92:d6:cd:49:
ff:81:f3:08:25:76:4d:30:6e:43:8c:11:20:69:07:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:12:01:6A:94:17:94:31:17:7D:32:1B:DD:0E:34:18:E3:E3:81:90
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:f5:1f:30:00:8e:c2:81:2a:49:ff:39:98:8b:ad:99:c9:85:
ff:22:e8:9d:66:57:90:b5:8f:5c:39:c9:8f:d7:5e:04:32:eb:
c0:eb:9e:95:3f:86:f5:c7:3c:36:c6:23:4a:a5:2d:5e:05:47:
80:ce:ca:63:91:2f:76:f6:f4:59:b9:02:7a:36:e9:ec:b8:4d:
28:a4:ee:5d:72:e9:cb:ae:6f:75:9a:1b:03:5f:ed:a7:01:ab:
5b:39:ff:ff:1e:d0:4d:1d:be:1b:db:10:38:68:44:d2:c7:02:
1d:9a:b1:34:02:a5:55:b4:bd:9e:9a:12:44:c6:48:b2:27:3b:
a5:e8:4c:55:29:c7:ee:44:ab:93:d8:32:9a:e7:6b:a3:eb:93:
b2:b1:f7:64:c5:02:44:1b:be:68:87:2b:f8:ea:ba:ec:c2:d1:
06:fd:5b:d7:15:29:5a:82:dd:c8:1f:b8:f2:4b:9c:64:4d:f8:
ea:14:68:27:e3:ad:30:44:f8:d6:d0:3b:90:97:c3:9e:4f:7d:
bc:dd:b0:90:ed:50:67:e7:ed:7f:0d:be:cb:9a:30:95:2e:fe:
81:46:03:ca:5d:c9:c7:30:d4:ec:7a:51:29:7e:66:42:ce:bf:
48:76:35:79:b5:e7:64:12:a8:3e:93:b2:75:9d:df:d8:ed:85:
e7:67:c9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 02:13:07 2026 by rpki-client