Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File: RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier: MSStdyYlE/IdfqS1/IvgJ8njcn5lC9mvNUJtcugBqZ4=
Subject key identifier: 71:2E:83:E1:49:6B:E8:6F:C5:9F:45:40:47:19:2E:64:AC:67:DF:53
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 01A18FB05F239C52D1D6A8BD27C552E03327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number: 1AFD
Signing time: Sat 31 Oct 2026 02:01:02 +0000
Manifest this update: Sat 31 Oct 2026 02:01:02 +0000
Manifest next update: Sun 01 Nov 2026 02:01:02 +0000
Files and hashes: 1: 7Ev4pPLmsyvYerb0on_2ycPvjhY.roa (hash: gLjOH0/LgfDmhdEX2dqo2Y4R5qiWj5EqAr1S6u4t4/o=)
2: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
3: BBqB0S2BZ1MiprBp-ZbU8XCJFuM.asa (hash: Kt6PxLaHA8KqzdMw5yzTBeC2Dt7pKSQXeeJoIQjj8h4=)
4: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: 2jd53LPE4Z5hqjFN+HKkVJcZ7j/U7sVDpcMFVGlGMoo=)
5: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
6: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
7: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
8: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:b0:5f:23:9c:52:d1:d6:a8:bd:27:c5:52:e0:33:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Oct 31 02:01:02 2026 GMT
Not After : Nov 1 02:01:02 2026 GMT
Subject: CN=712e83e1496be86fc59f454047192e64ac67df53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:fb:c1:ca:62:98:c9:40:59:1b:f7:02:a1:
4f:fd:4c:c9:0a:8f:9d:1f:0d:d8:93:9a:d2:32:8f:
ec:83:83:a7:e4:e2:90:38:3b:f4:62:25:53:88:f7:
ee:23:b3:53:35:dc:65:65:e2:e5:93:3b:9a:0b:44:
56:c3:4a:ca:c0:2e:d6:52:99:2c:bd:5d:d0:37:e1:
b3:be:27:87:2e:92:76:b9:cf:0c:96:98:92:ee:1a:
39:bd:38:69:32:00:6b:c4:73:b2:d1:05:a5:26:3f:
91:83:2b:21:19:ca:34:e3:33:a2:aa:3d:0b:86:9a:
64:f1:07:52:6c:b9:7c:74:56:78:65:1a:6a:8b:e5:
8d:de:b5:5b:da:d4:c9:fc:df:40:01:76:2c:bf:0c:
95:bd:39:d1:d5:7b:aa:fa:81:9f:3b:38:9c:69:0a:
a6:5a:63:48:61:ce:f5:89:e8:83:5e:5e:03:cc:83:
a6:fb:9f:e5:58:a6:b6:ac:58:4c:08:a6:12:49:d7:
8a:43:d9:83:cd:e0:e6:df:b2:da:9a:22:d9:fb:db:
a6:79:85:64:3d:7e:e7:17:92:3c:ca:c2:af:6f:99:
66:8d:64:9d:e5:55:8b:1e:78:ab:b4:bb:3c:a0:06:
f5:1b:bb:54:84:a0:23:fb:28:20:40:d2:a0:49:4e:
eb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2E:83:E1:49:6B:E8:6F:C5:9F:45:40:47:19:2E:64:AC:67:DF:53
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:2d:50:95:02:91:07:74:ee:41:81:41:78:43:43:78:b2:54:
77:15:b1:bf:b5:ff:e1:3c:a6:e8:c8:da:91:c2:72:ca:e1:b3:
b4:a2:33:b2:6e:d5:cb:35:52:28:29:d5:8c:71:fa:04:d4:32:
e1:01:89:45:eb:e0:e9:8b:95:3e:cd:ce:80:dd:b8:43:4a:96:
e7:51:b5:f5:d6:78:4a:1b:ba:c6:1e:07:ec:33:db:f7:14:9a:
26:5e:82:10:e6:ba:78:b1:34:3f:d3:74:1f:aa:1e:a7:f9:ca:
c9:49:ad:1a:99:08:2b:aa:a6:a7:6b:e3:b6:01:5f:c0:b8:0d:
90:1d:e8:6c:71:8d:6d:51:89:54:39:fc:cc:39:ad:f6:d0:47:
85:c1:11:de:8d:12:93:f5:ef:ed:55:83:3b:d4:d8:f3:7d:bc:
d6:9f:8c:a6:f1:15:a7:eb:3e:15:de:7c:94:55:55:01:55:df:
27:bb:0b:e8:03:41:33:82:80:de:89:3a:88:0b:fb:a7:3e:d5:
68:3a:f2:bb:08:ff:52:2c:c8:40:80:6e:24:9d:d3:07:22:f0:
d0:2f:0c:1e:e5:45:20:08:a3:4d:76:d5:1f:38:9e:4a:a4:a9:
ea:cc:ea:f5:b7:f2:a2:2d:b8:d4:fc:6f:1e:00:3a:f1:17:54:
0e:fb:35:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:43:57 2026 by rpki-client