Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
File: RyjroAE1nN1Bg0b2UcChh8ifur8.mft (raw, json)
Hash identifier: 0C1Mq4QW1QOx9g57r6lBxwgsCqHoC0DPTJIyubzDOu4=
Subject key identifier: 17:C1:D7:3B:F7:CF:EE:CF:5B:5A:0B:D1:45:A1:EB:88:5E:E2:D6:75
Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf
Certificate serial: 019CAC478EE5BA7993860B5DB698C38F4404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 02:01:36 +0000
Manifest this update: Mon 02 Mar 2026 02:01:36 +0000
Manifest next update: Tue 03 Mar 2026 02:01:36 +0000
Files and hashes: 1: GUkWGU-5YSSWyPrOwq-ARQkvPxM.roa (hash: zDxdPWOaOyVyBd2CSMyYPVbN3CHQHLMBOzpB+fsTOpQ=)
2: RyjroAE1nN1Bg0b2UcChh8ifur8.crl (hash: 8C5njG0UrBzrCSi2pzeXefkWDpUnQ9gaO54YNHOjEsg=)
3: u599xzfE-EX9olnz8cBJD6oZ2j8.roa (hash: rUizvq/CWTmc6UMWj8ItfZ7+jtqd5XX0DhV70/3vEUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:8e:e5:ba:79:93:86:0b:5d:b6:98:c3:8f:44:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf
Validity
Not Before: Mar 2 02:01:36 2026 GMT
Not After : Mar 3 02:01:36 2026 GMT
Subject: CN=17c1d73bf7cfeecf5b5a0bd145a1eb885ee2d675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:05:9b:76:f5:07:3d:96:ff:0c:2f:2d:4f:
26:4f:33:89:c2:2c:3d:3e:e0:ec:c5:f8:f3:a4:05:
e1:0a:94:60:c1:4f:64:64:5a:47:48:7e:7a:71:f7:
65:84:13:83:d6:89:cd:96:e9:d7:cf:7e:c8:ff:e5:
9f:04:84:62:8b:ca:3e:dd:60:27:8b:a5:f6:a2:91:
10:ad:27:a3:47:3d:24:ba:db:8a:da:37:44:36:d4:
d1:20:ed:1f:b0:7f:77:d0:86:a4:e5:1c:7d:a6:0d:
2c:74:3f:d7:50:2b:f4:90:04:da:89:45:d4:0d:e0:
ff:a1:0a:c7:2a:80:d3:2f:79:4a:33:13:cd:fb:29:
7d:cf:3d:b1:45:9d:6f:d5:07:28:99:ad:2a:68:87:
df:f5:02:7e:d8:4b:e7:2d:42:58:a5:59:55:86:44:
8b:02:8c:d3:29:d6:4c:b3:5c:ad:18:44:b1:95:40:
b2:9b:ea:75:aa:4a:94:84:e6:f3:aa:1e:a4:04:e8:
a4:be:fe:1a:ac:95:a2:a5:ce:b2:ea:c0:34:30:03:
9f:0a:d7:f9:44:4a:67:61:88:45:1d:cf:a2:a1:f3:
c3:f6:4e:df:98:49:20:56:68:ed:9a:da:52:4e:a2:
56:77:3c:7e:6c:67:8c:1a:eb:24:8f:5a:da:8c:99:
81:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C1:D7:3B:F7:CF:EE:CF:5B:5A:0B:D1:45:A1:EB:88:5E:E2:D6:75
X509v3 Authority Key Identifier:
keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f2:62:68:b4:7c:88:b1:57:a2:70:79:28:c0:38:ca:e1:04:
fe:ff:4e:49:6d:bd:96:68:56:00:9e:49:d1:39:56:e3:0f:cf:
62:57:66:00:b4:6d:39:72:5b:5f:62:03:51:49:4a:46:97:47:
cf:7c:e8:5b:03:68:3c:22:31:f1:a7:e7:6a:03:f4:04:d3:3d:
0d:b7:3c:9f:5b:bf:05:e9:a8:3c:34:62:43:be:fc:6f:f2:d1:
39:8f:6a:7b:a8:1e:ae:2f:11:79:01:7e:59:56:e2:fe:77:1a:
2b:4c:cd:29:44:9b:25:f2:0a:c5:03:20:33:81:3e:e0:ab:01:
2e:8c:75:c3:09:f9:fa:8e:3f:a8:a7:97:1f:14:a7:6e:cd:0b:
ce:1f:23:5b:c5:6e:de:90:87:b0:79:dc:9c:d4:62:4a:6b:88:
c3:73:83:73:c2:a0:a4:8e:d6:5c:d8:ca:06:a5:42:71:11:e1:
cc:9f:90:fc:e7:a1:40:02:7d:31:dd:02:a9:1b:8f:78:39:37:
7c:b6:b4:64:d4:a4:07:49:0c:13:bb:05:5d:56:6c:62:bb:a6:
c6:de:7d:2b:d5:5e:aa:58:89:28:fe:a8:77:6e:9f:2a:0d:a8:
1c:cb:40:42:b7:1c:32:1b:ae:28:a3:f1:3c:3f:3c:e6:b3:40:
1e:5c:f4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:04 2026 by rpki-client