Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
File: RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft (raw, json)
Hash identifier: qc0iygZzSX9IB+zLCU+wBYSs/b2L5SevC1uQm8dI6/0=
Subject key identifier: F8:B4:6E:90:C2:1E:18:86:38:2E:30:AF:C5:27:26:9D:9C:56:2B:A9
Authority key identifier: 44:F6:10:F8:72:CF:31:B7:C3:22:4C:D2:C1:66:9C:99:68:35:0B:7A
Certificate issuer: /CN=44f610f872cf31b7c3224cd2c1669c9968350b7a
Certificate serial: 019CAAC61CB6A63C299247CDF7C9522293DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:00:35 +0000
Manifest this update: Sun 01 Mar 2026 19:00:35 +0000
Manifest next update: Mon 02 Mar 2026 19:00:35 +0000
Files and hashes: 1: AT3AwmCGx61Hj5hqdELyQ8fLrSA.roa (hash: XVaOA+4kP/jBW0Nd2clUNIpHrMJJdCt1C6268n4aPw0=)
2: RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl (hash: RP/LVEapTrr1O3haNjFEwP8ZMLVFytAkumXqC0QrpDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:1c:b6:a6:3c:29:92:47:cd:f7:c9:52:22:93:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f610f872cf31b7c3224cd2c1669c9968350b7a
Validity
Not Before: Mar 1 19:00:35 2026 GMT
Not After : Mar 2 19:00:35 2026 GMT
Subject: CN=f8b46e90c21e1886382e30afc527269d9c562ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a5:b8:20:9e:50:62:75:dc:31:66:9d:29:92:
18:ed:dd:ea:b7:1b:14:0c:68:53:05:a6:72:b3:83:
3c:d5:91:8d:1e:9b:20:6e:13:bd:98:86:5c:39:e4:
dc:f6:6a:6c:f2:a7:c5:48:1a:10:b4:45:a4:03:00:
10:39:86:98:be:32:de:eb:48:00:8f:11:64:8a:88:
ae:23:22:a9:80:4b:88:71:e9:64:62:36:e6:cd:34:
d7:93:54:f6:28:af:20:41:7c:3d:86:f2:8b:fa:68:
e5:0a:bd:7e:22:64:ec:a5:3a:48:f1:f5:af:6c:3f:
15:82:77:fa:d7:7e:50:b7:0b:91:47:a4:db:10:5a:
39:a5:28:36:69:94:41:c7:5e:04:2d:c5:d6:03:f2:
f3:e7:ed:50:dd:13:83:43:b6:2d:64:35:11:56:00:
8e:7b:04:b8:57:a8:6c:bc:60:f6:5a:29:67:68:1f:
32:2b:7c:45:ba:9b:3e:83:28:41:e6:b2:86:c9:1d:
da:df:be:e5:03:fc:ac:e6:e2:d3:12:d2:7c:38:fb:
41:9a:d6:65:b1:f3:e5:d8:15:01:5b:c2:91:94:11:
02:06:4e:dc:17:db:62:f4:89:ae:15:b4:9c:4d:2e:
ad:07:7b:2d:ff:5f:24:97:0f:09:d8:81:c5:96:a4:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B4:6E:90:C2:1E:18:86:38:2E:30:AF:C5:27:26:9D:9C:56:2B:A9
X509v3 Authority Key Identifier:
keyid:44:F6:10:F8:72:CF:31:B7:C3:22:4C:D2:C1:66:9C:99:68:35:0B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:64:d0:d9:a5:87:d9:58:6d:58:1b:ee:12:bb:82:7f:e4:b7:
0e:55:1b:ab:49:2a:3c:49:d9:f4:e6:12:45:27:33:74:09:7f:
41:d9:0f:d7:a9:cb:73:91:32:b4:eb:5c:ab:48:2c:22:5f:6b:
f1:2f:f5:b8:83:15:8d:ff:ad:3b:d5:f8:c7:c6:ab:c9:07:88:
ac:5e:74:1f:eb:56:d5:a8:d6:f1:74:a7:6d:98:2c:11:ea:fe:
18:d5:59:f9:11:e1:90:1a:b7:02:e2:62:e0:fa:d2:ba:b1:96:
65:9b:87:1b:f3:0b:a5:a5:db:b3:c4:f3:a0:7e:f0:9b:aa:43:
c2:06:99:6e:e7:62:1b:ba:6b:bb:be:ae:e6:3c:59:a3:b8:8d:
5c:5e:1e:ee:f3:2c:35:7d:01:5b:7c:1f:80:27:35:d0:f4:f7:
90:57:43:84:79:ab:56:d2:1c:8e:c5:75:05:03:f8:34:86:ee:
b1:f6:3e:20:cb:5f:3a:90:1c:d8:67:cd:54:b7:8c:e3:43:b7:
31:0b:cd:e8:fa:57:9b:1f:c3:05:3a:ed:67:62:70:02:3c:e9:
fd:81:4f:ee:a5:e5:26:26:c7:96:f8:df:69:78:4b:5e:61:cd:
5f:c3:d0:49:68:9c:fc:c6:f7:4f:bd:10:f3:5b:7d:60:a7:9a:
e3:a6:40:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:27 2026 by rpki-client