Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
File: RyyyiCCZANGvGpmLsDnsdX5JPdU.mft (raw, json)
Hash identifier: 5dFwbM4XxkB7UW80jprVT0QTGQbULefscRD7SiWmaxg=
Subject key identifier: E4:96:93:1F:61:B4:90:2F:5A:30:E7:A7:6E:25:C4:8E:85:DA:D8:FC
Authority key identifier: 47:2C:B2:88:20:99:00:D1:AF:1A:99:8B:B0:39:EC:75:7E:49:3D:D5
Certificate issuer: /CN=472cb288209900d1af1a998bb039ec757e493dd5
Certificate serial: 019CA9B38DD945AE5944B8FC0B91FB2A46B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
Manifest number: 0A6E
Signing time: Sun 01 Mar 2026 14:00:42 +0000
Manifest this update: Sun 01 Mar 2026 14:00:42 +0000
Manifest next update: Mon 02 Mar 2026 14:00:42 +0000
Files and hashes: 1: JJzMSTrLw8Mj9A-jTJgxuAcpCQg.roa (hash: bTN07ZSVj23jINcVNw98RDlf14ha9z+H0npRvmlsk8E=)
2: RyyyiCCZANGvGpmLsDnsdX5JPdU.crl (hash: CnLuoA5qRwi4kvL6GdHCawot0pb4UXEWNTQ7sB3QdRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:8d:d9:45:ae:59:44:b8:fc:0b:91:fb:2a:46:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472cb288209900d1af1a998bb039ec757e493dd5
Validity
Not Before: Mar 1 14:00:42 2026 GMT
Not After : Mar 2 14:00:42 2026 GMT
Subject: CN=e496931f61b4902f5a30e7a76e25c48e85dad8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c5:e6:0b:0d:2e:0e:fa:ca:b0:be:86:4c:cd:
65:1d:bf:da:53:6c:da:a5:c5:ec:04:f5:05:c7:81:
07:13:aa:77:2a:f1:28:71:50:dd:dc:64:79:77:3c:
62:19:45:ea:da:80:eb:e1:ff:fe:f8:04:8c:9f:63:
02:cc:6a:86:9d:02:e7:89:84:c8:42:bf:9d:59:7f:
07:68:dd:3b:d4:9a:82:c1:50:99:4d:46:5e:15:e3:
99:7c:7b:f9:98:73:ae:24:5c:14:db:0d:c5:af:c3:
55:7a:a3:5f:0d:b1:b6:36:57:3e:22:ba:d7:a7:43:
16:68:da:5a:6e:1f:72:80:93:97:9d:36:63:a2:32:
21:ee:42:22:a8:aa:c7:00:90:f9:b2:a6:8f:d0:ef:
fd:2d:4e:68:10:ac:b7:e3:d4:65:86:42:65:b6:06:
fb:2f:4f:78:a8:de:cf:cf:4c:6f:22:0d:b9:04:dd:
9a:54:2d:f8:fe:5e:49:f5:ea:fb:0a:a9:21:fd:70:
fa:b2:f1:86:7d:3d:6a:53:17:c7:5b:f2:5e:5d:7b:
20:81:b7:2d:92:22:a4:74:a7:d7:44:83:c6:11:1c:
9a:ab:dc:f6:1c:e5:5e:bb:a0:80:9d:f3:91:4b:58:
7e:d3:40:bc:19:e0:90:ab:12:a8:6e:5a:9f:6a:4f:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:96:93:1F:61:B4:90:2F:5A:30:E7:A7:6E:25:C4:8E:85:DA:D8:FC
X509v3 Authority Key Identifier:
keyid:47:2C:B2:88:20:99:00:D1:AF:1A:99:8B:B0:39:EC:75:7E:49:3D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:18:af:5a:56:e1:a5:07:88:5c:a6:e8:c8:5a:17:c7:fb:23:
db:61:1c:e6:ce:e9:c0:a7:7e:d5:73:4f:1a:30:92:d6:1b:d3:
d4:01:8d:24:fe:6a:80:d5:cd:35:ef:04:2e:cd:ea:6a:89:09:
4d:d8:1c:70:12:79:11:34:8b:5d:04:76:7f:b5:7e:24:a5:01:
ba:8e:c2:0f:d6:da:a1:4c:72:37:f0:95:2a:78:9b:be:39:a4:
27:a4:81:d1:81:97:34:1e:44:e6:bf:91:ea:b0:81:01:a6:7a:
bf:7b:b4:78:5c:91:f2:ba:a5:d4:b7:32:79:05:3b:f2:ac:f3:
97:75:58:29:13:43:a6:29:f8:0e:14:7c:01:53:45:1f:08:99:
f7:22:76:b9:ff:74:0b:b7:d9:75:b6:8e:f3:16:78:47:1b:75:
79:e4:bb:18:b4:d8:e1:d0:fc:ff:74:04:78:fb:1d:29:01:e0:
ce:3e:86:87:7a:1d:07:1e:fa:5e:e6:31:95:cd:b4:0f:35:5d:
1e:4c:c3:6c:82:6a:ca:10:9d:d1:ef:9f:99:e6:3d:b4:61:1c:
a4:f1:55:9c:8d:26:ee:31:9c:d8:ea:37:55:fd:19:eb:67:a2:
af:37:55:3d:78:a1:18:7e:8b:8a:a5:94:37:53:97:0e:de:84:
2e:d3:3a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:31 2026 by rpki-client