Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File: RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier: ZPeL8lZIY2ZpxDD1/QcJRZkqaFWA3XN6bOwfvQOHZks=
Subject key identifier: D9:98:57:0F:AD:42:ED:EC:FB:AA:58:6D:CE:28:E8:FC:BC:B9:48:68
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019D3A8A939D3AA9F1620C9B801A904EAC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number: 18BC
Signing time: Sun 29 Mar 2026 17:00:53 +0000
Manifest this update: Sun 29 Mar 2026 17:00:53 +0000
Manifest next update: Mon 30 Mar 2026 17:00:53 +0000
Files and hashes: 1: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
2: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: sAticZyWV7IdgMfijfyKBPCuq/igUthTSrpY47OfQ9A=)
3: UVZSH-qjnUODxApJvnuBt-EAJoY.roa (hash: qEeNRBoEnR3OhUU2I8brudlBLMuFLZh8jyPrCOjJSRQ=)
4: eTMmIm9zv_0o9KEz3EHntctKzoc.roa (hash: tXT+SzZWIzmmd4kK5abXulIyd/8wtzj4Rs+S9xwYZIg=)
5: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
6: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
7: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
8: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:93:9d:3a:a9:f1:62:0c:9b:80:1a:90:4e:ac:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Mar 29 17:00:53 2026 GMT
Not After : Mar 30 17:00:53 2026 GMT
Subject: CN=d998570fad42edecfbaa586dce28e8fcbcb94868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:c6:a8:90:88:5e:7d:ce:51:86:63:5f:c4:
05:76:05:11:3b:af:59:df:e0:04:7a:07:1e:7c:72:
31:4c:88:db:04:46:69:f6:bb:09:90:df:a4:b9:e7:
99:59:ff:9f:a6:67:f3:4b:d9:c2:43:bd:86:95:ea:
50:1c:ba:cf:39:4a:dd:ce:d5:f9:39:41:41:9d:a2:
0f:26:30:87:44:34:7b:c6:89:41:5c:d6:f8:6f:6e:
a8:4d:e2:da:bd:38:8a:37:44:3a:f0:2d:27:6c:26:
0c:5b:ba:b9:d0:c1:35:1d:87:1f:c9:88:d8:99:2a:
b0:f1:cd:87:91:f0:b1:27:9b:d6:db:f9:6f:6d:2d:
27:74:33:3b:aa:a7:82:86:94:d2:7d:2f:ec:1e:29:
48:f2:57:fc:1c:1a:fc:4a:7e:3c:67:8f:18:53:1b:
d5:2a:da:28:20:63:e1:84:8e:1b:2d:7d:bf:06:6e:
9f:b6:af:ca:22:d2:24:2a:25:d4:0b:29:bf:88:79:
e2:b7:7d:72:72:3b:4b:6a:24:df:ea:1f:7f:4d:91:
1b:3e:fa:86:88:99:c8:fc:7a:00:fa:8e:11:a9:71:
c4:dd:9d:cb:cc:55:a6:e7:18:50:bf:71:4d:da:b7:
cf:d3:25:b2:ba:67:7e:77:7d:95:67:cb:8c:a6:2c:
6d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:98:57:0F:AD:42:ED:EC:FB:AA:58:6D:CE:28:E8:FC:BC:B9:48:68
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:60:a0:67:fb:10:32:f9:35:5e:a1:35:9d:61:79:05:ec:97:
ee:8f:5a:23:79:23:c2:0b:f6:46:71:6c:6f:f1:9a:b4:11:d6:
5b:47:83:50:db:99:a0:04:f4:f3:7f:97:e2:67:1a:25:2c:05:
85:e2:4d:38:38:7b:e8:79:2b:0d:83:84:b8:eb:79:ec:d9:59:
56:ea:7d:91:e5:d0:55:c6:d2:95:6c:12:5c:b6:66:9e:52:5a:
fc:53:e1:7b:0f:66:c8:f9:0c:32:4f:ed:c8:7b:c4:82:b4:a2:
7f:ce:e3:38:d9:0e:f0:5e:ce:15:98:90:a0:15:e1:12:2d:75:
ab:e2:ff:27:2c:5e:61:55:4c:96:9a:26:2d:d2:9f:b0:03:17:
74:a3:b4:78:ef:9c:2a:2f:be:b8:35:7d:2d:50:21:c6:3b:d4:
78:0b:63:5c:e2:c4:7c:ce:16:d5:b2:79:26:a8:a0:e9:f6:31:
90:48:e9:a0:b7:72:7d:12:e3:20:de:58:f7:46:a3:bf:04:d3:
c9:de:c8:6a:58:53:26:70:2f:f6:af:6f:e2:4d:ca:34:47:f6:
cb:14:37:25:24:c5:87:b2:43:78:13:1d:e5:d2:5e:a5:4f:be:
d5:f3:13:19:11:ee:22:e8:bf:9f:ed:a6:9d:30:55:c6:97:cc:
bb:ed:c2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 00:03:30 2026 by rpki-client