Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
File: RyyyiCCZANGvGpmLsDnsdX5JPdU.mft (raw, json)
Hash identifier: EtsgKZrkaEu4PPqe3JpXGm5XPKzmxZcf7fLqHq8sYVM=
Subject key identifier: EA:6B:41:46:40:0B:A6:74:18:96:8F:9D:46:B9:04:E2:6D:00:FE:44
Authority key identifier: 47:2C:B2:88:20:99:00:D1:AF:1A:99:8B:B0:39:EC:75:7E:49:3D:D5
Certificate issuer: /CN=472cb288209900d1af1a998bb039ec757e493dd5
Certificate serial: 019D992B80EAAE98030F267F4B37093D75CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
Manifest number: 0AEA
Signing time: Fri 17 Apr 2026 02:00:58 +0000
Manifest this update: Fri 17 Apr 2026 02:00:58 +0000
Manifest next update: Sat 18 Apr 2026 02:00:58 +0000
Files and hashes: 1: JJzMSTrLw8Mj9A-jTJgxuAcpCQg.roa (hash: bTN07ZSVj23jINcVNw98RDlf14ha9z+H0npRvmlsk8E=)
2: RyyyiCCZANGvGpmLsDnsdX5JPdU.crl (hash: 7f5nS2GVch4XKI4qZJFQAhwcJeez6o0sq2bDS3OG044=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:80:ea:ae:98:03:0f:26:7f:4b:37:09:3d:75:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472cb288209900d1af1a998bb039ec757e493dd5
Validity
Not Before: Apr 17 02:00:58 2026 GMT
Not After : Apr 18 02:00:58 2026 GMT
Subject: CN=ea6b4146400ba67418968f9d46b904e26d00fe44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2b:cc:55:5d:3c:56:ad:31:b5:54:10:ed:a4:
57:7f:b0:4f:12:ed:12:1b:ad:63:c2:88:73:d6:e7:
b1:48:2e:d2:66:23:c9:bf:d4:15:6b:d0:e2:06:19:
c2:63:fe:27:30:d4:8d:e7:1a:6f:b5:10:9f:b3:6d:
31:9a:45:68:5e:54:8f:ee:68:31:15:bd:89:a9:84:
bd:a8:82:1d:f0:55:cc:b1:65:f8:34:89:32:86:2a:
25:77:88:e7:0a:43:03:ff:b6:50:9e:50:cf:5c:60:
dd:1b:b6:76:3c:9e:2b:eb:a9:45:44:98:02:f5:b9:
9d:ff:30:f4:af:85:13:ef:25:56:0a:b7:2d:11:e5:
eb:e1:9c:64:74:72:99:eb:50:3e:b2:47:d4:2f:f3:
c1:33:da:42:3a:ed:0b:df:a2:f3:21:01:ab:ea:72:
e4:40:4e:5b:bb:58:af:55:f5:5d:f8:60:41:10:dc:
5b:41:eb:1d:bd:91:3b:0d:28:07:40:35:07:03:0b:
1e:98:60:18:4a:2c:c4:c7:89:12:5a:1e:44:93:8a:
61:0f:0b:8d:15:67:76:9e:15:8e:b9:ba:72:ac:53:
68:6e:c4:db:e9:d4:a5:26:f1:d2:2d:f1:65:9f:50:
05:36:54:47:34:ea:4b:72:66:ee:d9:0b:53:f1:bc:
a6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6B:41:46:40:0B:A6:74:18:96:8F:9D:46:B9:04:E2:6D:00:FE:44
X509v3 Authority Key Identifier:
keyid:47:2C:B2:88:20:99:00:D1:AF:1A:99:8B:B0:39:EC:75:7E:49:3D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d5:04:ed:c3:9b:8d:ca:71:8c:3f:87:16:93:7b:fb:63:0a:
c6:d8:4f:12:08:c7:69:3a:9c:42:65:7d:91:5f:e9:85:cb:a6:
86:42:6f:cb:8d:c1:39:eb:d2:b7:3c:96:b7:a6:4a:25:5e:7c:
d3:5a:51:c5:78:d4:1f:de:da:9a:3f:5b:23:3c:dc:e1:fa:fd:
4f:b9:6d:91:e3:82:80:5a:17:67:90:7f:c3:20:b7:5a:5b:bd:
d9:cc:20:cb:62:b7:be:53:be:e7:5f:a9:8b:a0:84:e8:3c:14:
f9:e2:f7:22:53:21:31:a6:33:e7:f5:3a:fe:e4:99:08:0e:fc:
da:f3:1b:b2:8a:ad:c3:84:f4:3b:b9:26:10:5e:c4:0c:4b:b6:
cb:99:7e:d5:a2:f2:ce:2b:82:67:41:f0:0e:80:3f:6a:e0:24:
46:76:93:0c:12:ac:89:ab:be:ed:79:5d:75:4c:93:c5:69:18:
05:2b:1c:45:98:ef:04:67:91:57:ff:cc:b0:08:27:5f:06:c1:
0a:54:29:90:f2:7a:e8:bb:5b:73:07:6c:d1:06:d5:f5:96:23:
d9:1b:bd:04:62:7d:f4:34:69:79:6e:25:9f:2f:cf:4e:dd:78:
f2:74:ef:9f:12:e0:60:85:6d:2f:69:d9:8d:aa:bd:bb:ef:bb:
05:bd:50:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:01:12 2026 by rpki-client