Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File: RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier: +nQJwJR9HEpKQLHi9MYaZTgeVDH+hF9PDehZVKcXP0o=
Subject key identifier: 2E:A5:3B:70:B7:C3:E5:46:4A:39:DC:01:0C:1F:12:4A:81:B0:DE:39
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019D2B17B28F3FD6CA1C5104CECD14DE4FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number: 18B4
Signing time: Thu 26 Mar 2026 17:01:06 +0000
Manifest this update: Thu 26 Mar 2026 17:01:06 +0000
Manifest next update: Fri 27 Mar 2026 17:01:06 +0000
Files and hashes: 1: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
2: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: bLbSpPwRDKbDsT/ORKca2gFzrCh77Fq4yQVy43/xd4Y=)
3: UVZSH-qjnUODxApJvnuBt-EAJoY.roa (hash: qEeNRBoEnR3OhUU2I8brudlBLMuFLZh8jyPrCOjJSRQ=)
4: eTMmIm9zv_0o9KEz3EHntctKzoc.roa (hash: tXT+SzZWIzmmd4kK5abXulIyd/8wtzj4Rs+S9xwYZIg=)
5: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
6: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
7: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
8: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:b2:8f:3f:d6:ca:1c:51:04:ce:cd:14:de:4f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Mar 26 17:01:06 2026 GMT
Not After : Mar 27 17:01:06 2026 GMT
Subject: CN=2ea53b70b7c3e5464a39dc010c1f124a81b0de39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:1d:4f:de:a1:1e:84:d8:a1:79:fb:ee:24:
d2:41:23:ec:ff:90:d9:f6:4a:d4:90:9a:6d:f3:98:
c5:06:e3:98:86:36:50:73:db:45:14:4c:f2:73:99:
f3:97:df:e6:a5:7b:0b:f1:92:75:e5:b9:b3:5b:a0:
6a:12:dc:0f:7b:6d:34:ce:d8:c2:20:67:f0:ab:96:
c6:20:c3:0f:a1:ca:2a:54:b9:eb:51:e7:0c:37:d5:
35:1f:5a:aa:34:88:c3:aa:62:11:19:ab:4f:59:b2:
97:52:f0:fa:36:e1:43:69:fe:11:9e:06:48:cf:5c:
cb:25:33:56:7e:dc:b3:ca:f5:64:9b:70:29:66:53:
b3:e8:76:43:95:d8:33:31:08:91:38:5d:0e:07:4e:
41:e6:6f:a4:77:8f:db:8c:ac:69:44:dc:24:92:f1:
ac:28:66:80:3f:3f:31:16:a0:0f:63:41:62:fe:50:
6d:1c:58:3d:14:a3:1b:ac:8c:e8:18:86:ce:cb:01:
96:0c:eb:85:9a:f2:65:00:fd:08:f3:26:fb:47:86:
87:26:d2:83:74:0c:29:e4:a9:97:2c:ec:b6:14:99:
73:f1:fe:88:5a:64:b6:d3:6c:88:8f:d4:67:82:e2:
03:fd:8e:96:d2:7c:c8:c8:b5:44:dd:7c:cd:7e:70:
a6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A5:3B:70:B7:C3:E5:46:4A:39:DC:01:0C:1F:12:4A:81:B0:DE:39
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:e1:6a:9a:75:9b:61:e1:bb:97:64:06:0d:71:0a:df:d1:88:
cb:73:a8:65:50:54:9a:55:9f:9f:27:06:56:ee:f0:ac:87:74:
7e:8b:1e:ab:3f:a5:6b:35:ea:b7:6b:f6:f2:5c:fe:0a:dd:a8:
c8:a6:83:44:fa:46:8c:ac:fc:e6:94:51:d5:b4:19:2c:f2:1b:
dc:2d:82:4c:6e:a8:22:df:ed:71:2e:d3:7d:5a:24:af:0e:26:
21:28:42:21:2e:e5:77:d4:23:98:94:41:3d:9e:15:f9:49:cf:
2b:6b:5c:6f:b8:07:68:e2:f1:35:29:7b:e9:94:c7:60:97:7d:
9b:e8:f4:b3:2b:61:6e:42:bf:33:9f:f4:f0:97:0e:20:79:61:
e7:2b:85:5f:10:cf:97:72:ca:f5:b3:ab:11:11:48:a5:f0:f4:
a9:5f:5b:5b:c7:25:af:6a:bf:bd:69:c9:b0:82:e4:67:f4:3c:
aa:d1:9b:8d:e1:83:e3:89:cc:cd:94:42:da:e9:3c:f3:d5:e2:
12:0c:63:6c:96:55:64:c0:25:2c:59:bb:ea:fd:bd:1f:56:87:
88:33:7f:dc:4e:f5:d6:14:b1:0e:2d:e7:50:e9:d0:5a:68:fc:
93:01:0e:d0:a0:39:76:62:aa:28:79:a6:ad:8a:37:b7:f4:b0:
57:c8:97:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rF7KPP9bKHFEEzs0U3k/iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZmM4ODdjOTc3MzkzNTc1ZGU2MjU3ZTc1ZmE5OWNkZTIw
MzdjNmMwHhcNMjYwMzI2MTcwMTA2WhcNMjYwMzI3MTcwMTA2WjAzMTEwLwYDVQQD
EygyZWE1M2I3MGI3YzNlNTQ2NGEzOWRjMDEwYzFmMTI0YTgxYjBkZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAEdT96hHoTYoXn77iTSQSPs/5DZ
9krUkJpt85jFBuOYhjZQc9tFFEzyc5nzl9/mpXsL8ZJ15bmzW6BqEtwPe200ztjC
IGfwq5bGIMMPocoqVLnrUecMN9U1H1qqNIjDqmIRGatPWbKXUvD6NuFDaf4RngZI
z1zLJTNWftyzyvVkm3ApZlOz6HZDldgzMQiROF0OB05B5m+kd4/bjKxpRNwkkvGs
KGaAPz8xFqAPY0Fi/lBtHFg9FKMbrIzoGIbOywGWDOuFmvJlAP0I8yb7R4aHJtKD
dAwp5KmXLOy2FJlz8f6IWmS202yIj9RnguID/Y6W0nzIyLVE3XzNfnCm0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6lO3C3w+VGSjncAQwfEkqBsN45MB8GA1UdIwQY
MBaAFET8iHyXc5NXXeYlfnX6mc3iA3xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMt
YzM2OWMxZDRjMzM3LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMtYzM2OWMxZDRjMzM3
LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv+FqmnWb
YeG7l2QGDXEK39GIy3OoZVBUmlWfnycGVu7wrId0foseqz+lazXqt2v28lz+Ct2o
yKaDRPpGjKz85pRR1bQZLPIb3C2CTG6oIt/tcS7TfVokrw4mIShCIS7ld9QjmJRB
PZ4V+UnPK2tcb7gHaOLxNSl76ZTHYJd9m+j0sythbkK/M5/08JcOIHlh5yuFXxDP
l3LK9bOrERFIpfD0qV9bW8clr2q/vWnJsILkZ/Q8qtGbjeGD44nMzZRC2uk889Xi
EgxjbJZVZMAlLFm76v29H1aHiDN/3E711hSxDi3nUOnQWmj8kwEO0KA5dmKqKHmm
rYo3t/SwV8iXAQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:03:39 2026 by rpki-client