Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File: RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier: JctSnttrvhuJruw6mqrzae8WqUZtv7x2qc4CZj7sZX8=
Subject key identifier: D1:7B:8D:09:B2:36:4E:C2:DB:0D:7F:94:43:91:73:CE:CB:C9:14:9C
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019CA9B3FB8F518BAA408976D6A59D76022E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number: 1871
Signing time: Sun 01 Mar 2026 14:01:10 +0000
Manifest this update: Sun 01 Mar 2026 14:01:10 +0000
Manifest next update: Mon 02 Mar 2026 14:01:10 +0000
Files and hashes: 1: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
2: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: iTIds8/BLNRxcVD1reZZpw6KGMT4kxSsJGFvwsmIGGs=)
3: UVZSH-qjnUODxApJvnuBt-EAJoY.roa (hash: qEeNRBoEnR3OhUU2I8brudlBLMuFLZh8jyPrCOjJSRQ=)
4: eTMmIm9zv_0o9KEz3EHntctKzoc.roa (hash: tXT+SzZWIzmmd4kK5abXulIyd/8wtzj4Rs+S9xwYZIg=)
5: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
6: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
7: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
8: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:fb:8f:51:8b:aa:40:89:76:d6:a5:9d:76:02:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Mar 1 14:01:10 2026 GMT
Not After : Mar 2 14:01:10 2026 GMT
Subject: CN=d17b8d09b2364ec2db0d7f94439173cecbc9149c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2f:5a:41:af:1e:6d:fb:7f:f9:84:61:44:95:
d9:19:28:d3:69:d7:43:10:d9:bf:74:a0:bc:65:64:
ad:37:6f:92:ed:da:7f:66:24:68:04:ba:66:77:19:
1a:ce:f6:bf:e6:a8:11:4b:7b:fa:77:d0:f8:be:f2:
10:72:af:18:8d:0f:51:bc:9b:a1:ef:70:10:cc:e5:
b0:13:2d:29:54:13:89:7c:a8:48:88:34:63:3f:b4:
a0:95:7a:df:4d:2b:39:c9:3f:40:f9:d7:3d:39:d1:
7b:6d:3a:1c:96:b0:f2:c1:ae:df:90:d3:be:f8:0e:
f5:83:ce:12:64:11:6d:9b:fd:36:72:78:08:cf:68:
6f:d3:b7:29:82:24:1e:6f:20:02:f6:12:ab:01:02:
39:b6:d9:9c:54:25:c9:0d:50:57:bc:90:3e:45:d0:
fe:a3:39:54:ea:5e:af:e3:d1:e5:90:e9:b5:17:13:
ec:d4:fb:f3:e4:7c:d9:05:07:a8:3e:bf:70:f6:74:
c8:eb:f8:c2:bc:25:53:b9:ac:6e:f6:1d:3a:2e:ed:
55:c6:4d:7c:5e:55:a3:f0:64:d8:64:af:a3:5e:63:
09:eb:97:31:c0:32:b2:83:0f:d9:a5:ac:c6:05:d4:
c8:34:cc:ff:71:bf:8c:d8:bd:0d:85:75:81:e8:c5:
c7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7B:8D:09:B2:36:4E:C2:DB:0D:7F:94:43:91:73:CE:CB:C9:14:9C
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e3:12:64:0a:b4:e0:4f:ae:32:b9:77:52:0c:fa:bd:b1:d2:
e4:f3:36:aa:df:c6:57:c3:30:5d:a9:7c:02:6b:63:2f:a8:ee:
57:3b:67:79:ec:d3:00:a4:39:45:21:25:83:5b:72:47:63:a1:
a1:64:8c:cd:66:2c:42:fb:15:30:d0:94:c7:69:84:cb:a5:9e:
f3:16:fa:c4:54:1a:2c:ea:53:4f:9b:39:09:bc:32:a5:f5:d5:
06:50:d7:93:7a:d0:a4:72:b0:97:c7:99:98:c1:fd:9e:b6:e1:
ce:e5:3c:7c:a9:d3:db:1d:2a:7b:e1:0e:9e:88:72:91:b8:ac:
11:ed:4c:93:6d:bb:1f:0c:95:5a:97:95:a9:5d:4b:18:e5:a7:
bf:a3:86:04:f4:f1:97:89:de:b5:3f:53:66:4c:f5:1a:0a:83:
da:cf:64:cf:39:b5:22:b0:35:fc:b2:34:88:19:25:29:b6:db:
74:2a:a6:3a:f6:57:dd:09:1a:30:67:f1:ae:40:2a:f2:66:06:
d3:37:62:03:41:c8:99:85:94:6e:79:f3:3a:6f:3f:0b:cb:1d:
ee:b7:a9:71:49:22:84:d8:9b:2e:b1:67:99:61:d6:52:f5:c7:
2a:a2:62:eb:57:6e:dc:f5:bd:21:98:94:d1:31:8d:de:bb:7b:
88:3c:91:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:05:25 2026 by rpki-client