Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File: RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier: hi+3jFWc+YoiX4ZqJsU9KL+9rL2ekKJPuYc+ReL+I2o=
Subject key identifier: 9E:48:49:34:2C:71:9C:B1:40:20:95:00:B0:F8:B3:71:A4:8E:25:35
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019D15D9662A25430FE5DD9D7AB9D77D1873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number: 18A9
Signing time: Sun 22 Mar 2026 14:01:02 +0000
Manifest this update: Sun 22 Mar 2026 14:01:02 +0000
Manifest next update: Mon 23 Mar 2026 14:01:02 +0000
Files and hashes: 1: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
2: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: opgjRgJ9W4QOHdxdZ62gzZiX6W4CWYwF4ABBGkcwYGA=)
3: UVZSH-qjnUODxApJvnuBt-EAJoY.roa (hash: qEeNRBoEnR3OhUU2I8brudlBLMuFLZh8jyPrCOjJSRQ=)
4: eTMmIm9zv_0o9KEz3EHntctKzoc.roa (hash: tXT+SzZWIzmmd4kK5abXulIyd/8wtzj4Rs+S9xwYZIg=)
5: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
6: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
7: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
8: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:15:d9:66:2a:25:43:0f:e5:dd:9d:7a:b9:d7:7d:18:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Mar 22 14:01:02 2026 GMT
Not After : Mar 23 14:01:02 2026 GMT
Subject: CN=9e4849342c719cb140209500b0f8b371a48e2535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:fa:13:3c:7c:50:cc:0b:22:37:28:c9:91:
c4:3f:fe:d8:78:c3:ea:3f:aa:bf:46:89:0e:76:f9:
f3:5f:06:96:33:34:17:16:1d:a3:05:3c:a7:39:00:
29:f9:64:b7:b0:cb:fe:9c:ef:bb:dd:c5:c0:48:97:
d2:ee:68:dc:1c:81:84:ec:62:08:a4:1e:c1:23:31:
05:55:0b:1b:8e:7b:a6:08:a8:06:dc:09:24:4c:85:
cf:dd:3f:bc:57:74:18:c7:00:f7:69:bf:b3:22:fd:
0c:ce:bf:eb:27:b8:1e:2c:83:37:28:94:23:d9:ba:
b8:67:82:82:83:25:12:da:b0:bb:ee:66:e8:92:aa:
d2:56:83:41:22:8d:43:f6:0d:fd:ec:bf:3e:7e:98:
49:8d:66:c5:29:a1:0e:0e:47:76:d8:18:9b:34:d3:
8b:7d:46:aa:f9:6b:4c:5a:27:9f:3a:f0:07:4d:b9:
6b:29:00:75:ad:fa:98:de:7c:a2:e0:8a:8f:77:71:
7c:1f:72:90:3e:1c:b8:81:87:a7:71:81:c0:36:98:
d5:48:da:8f:5d:43:d6:23:d7:de:1f:99:cf:05:77:
da:f8:f3:3a:4f:79:22:af:c8:73:34:d8:5a:61:f1:
26:ae:99:ca:43:2b:91:64:bf:b2:cc:9b:a1:8b:80:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:48:49:34:2C:71:9C:B1:40:20:95:00:B0:F8:B3:71:A4:8E:25:35
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:7e:df:51:4e:be:75:be:26:fe:db:b6:20:8d:5e:ef:4f:23:
05:e4:9e:d4:c0:26:84:16:04:de:ac:b6:ab:6b:c8:22:2d:e5:
21:87:28:04:bf:26:2a:7c:84:ed:66:23:cd:c1:ff:d5:06:40:
04:10:98:e5:53:aa:48:43:cd:e5:19:1c:56:d0:5b:7d:f1:51:
b7:a0:ec:13:99:e9:c4:5f:c7:63:01:c4:ac:f9:99:27:fb:86:
fd:33:df:24:ad:d8:5d:d1:98:61:bf:c4:c5:4b:ae:ca:e4:57:
2b:27:19:b4:43:b2:42:1a:3f:54:67:ef:d4:d5:24:60:6d:f7:
34:fb:28:b2:58:ab:53:07:26:57:65:cb:0a:cc:92:e7:ea:5c:
6f:06:8f:c3:f3:9b:97:d1:ac:ad:0f:4e:8b:11:18:78:fc:8a:
dc:91:dc:ef:2e:63:ee:d1:50:1a:89:54:63:e6:3c:d9:1b:13:
dc:4e:d4:2c:45:4c:b6:8d:30:12:54:77:34:ec:bc:23:c6:30:
8e:9f:34:20:82:bc:d7:dc:0d:e0:04:08:3c:70:53:13:48:4f:
1e:d0:31:c6:9a:1e:59:c3:86:d5:5f:a7:be:12:d1:70:6d:a1:
23:72:ac:fc:cf:44:0d:97:50:bd:f1:c8:fb:fb:bc:01:6d:f7:
1b:1d:53:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0V2WYqJUMP5d2dernXfRhzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZmM4ODdjOTc3MzkzNTc1ZGU2MjU3ZTc1ZmE5OWNkZTIw
MzdjNmMwHhcNMjYwMzIyMTQwMTAyWhcNMjYwMzIzMTQwMTAyWjAzMTEwLwYDVQQD
Eyg5ZTQ4NDkzNDJjNzE5Y2IxNDAyMDk1MDBiMGY4YjM3MWE0OGUyNTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy836Ezx8UMwLIjcoyZHEP/7YeMPq
P6q/RokOdvnzXwaWMzQXFh2jBTynOQAp+WS3sMv+nO+73cXASJfS7mjcHIGE7GII
pB7BIzEFVQsbjnumCKgG3AkkTIXP3T+8V3QYxwD3ab+zIv0Mzr/rJ7geLIM3KJQj
2bq4Z4KCgyUS2rC77mbokqrSVoNBIo1D9g397L8+fphJjWbFKaEODkd22BibNNOL
fUaq+WtMWiefOvAHTblrKQB1rfqY3nyi4IqPd3F8H3KQPhy4gYencYHANpjVSNqP
XUPWI9feH5nPBXfa+PM6T3kir8hzNNhaYfEmrpnKQyuRZL+yzJuhi4B3UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5ISTQscZyxQCCVALD4s3GkjiU1MB8GA1UdIwQY
MBaAFET8iHyXc5NXXeYlfnX6mc3iA3xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMt
YzM2OWMxZDRjMzM3LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMtYzM2OWMxZDRjMzM3
LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvX7fUU6+
db4m/tu2II1e708jBeSe1MAmhBYE3qy2q2vIIi3lIYcoBL8mKnyE7WYjzcH/1QZA
BBCY5VOqSEPN5RkcVtBbffFRt6DsE5npxF/HYwHErPmZJ/uG/TPfJK3YXdGYYb/E
xUuuyuRXKycZtEOyQho/VGfv1NUkYG33NPsoslirUwcmV2XLCsyS5+pcbwaPw/Ob
l9GsrQ9OixEYePyK3JHc7y5j7tFQGolUY+Y82RsT3E7ULEVMto0wElR3NOy8I8Yw
jp80IIK819wN4AQIPHBTE0hPHtAxxpoeWcOG1V+nvhLRcG2hI3Ks/M9EDZdQvfHI
+/u8AW33Gx1T3Q==
-----END CERTIFICATE-----
Generated at Sun Mar 22 18:43:16 2026 by rpki-client