
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
File: mryiPS4rrR-1eI3bX1pvx6tiyiA.mft (raw, json)
Hash identifier: VXz4hXQhL/oB0PHpsu5RhAxG4jdwRQ1peEmKmRukToI=
Subject key identifier: D6:A6:B2:BD:79:BF:F6:79:2F:67:60:0C:C2:E4:96:08:EC:B8:1E:5A
Authority key identifier: 9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
Certificate issuer: /CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Certificate serial: 019DA378ED755428B0748D3CBC2DFEBC5463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
Manifest number: 0297
Signing time: Sun 19 Apr 2026 02:01:44 +0000
Manifest this update: Sun 19 Apr 2026 02:01:44 +0000
Manifest next update: Mon 20 Apr 2026 02:01:44 +0000
Files and hashes: 1: cAKVqYBd9IcAL6r2ZvxM_Qj1ndI.roa (hash: XqFaKsdiSRNsnwScS0QPlL53huZcp/xfhEBOIjWXbkk=)
2: mryiPS4rrR-1eI3bX1pvx6tiyiA.crl (hash: YgrFPkW0x9xL+KI6lULxh77TZBRhFCcQSdjSp40ocUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:ed:75:54:28:b0:74:8d:3c:bc:2d:fe:bc:54:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Validity
Not Before: Apr 19 02:01:44 2026 GMT
Not After : Apr 20 02:01:44 2026 GMT
Subject: CN=d6a6b2bd79bff6792f67600cc2e49608ecb81e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:fb:3c:f3:31:11:4a:b2:56:1e:c3:46:26:
9f:05:3d:75:95:4a:24:db:46:21:ea:f0:44:ac:c5:
42:59:bf:fa:29:43:38:27:94:8d:c6:9c:e3:2b:fd:
6e:c9:b8:98:40:29:51:7b:24:b6:f0:42:7c:d7:23:
76:1b:93:51:ca:85:40:d9:19:40:e1:84:7a:5c:e7:
48:4c:1e:6f:d1:08:1b:cc:66:be:88:14:cf:e1:14:
fa:74:79:33:1c:a2:90:dd:7b:fb:b0:ba:b2:d9:3c:
7c:5e:d6:03:d7:c2:72:07:f9:2f:2e:1b:7b:d1:8e:
d4:21:7c:b7:79:6c:f8:d7:97:f2:17:86:1d:ff:57:
e5:5a:60:cd:91:d1:5c:50:c7:08:cf:8d:65:52:ac:
d0:b0:fe:a2:30:67:4a:5d:a7:40:e7:8e:4d:89:83:
64:cf:a8:5a:73:0f:93:8f:e2:87:ff:72:0e:39:0d:
ec:8a:6b:d2:95:df:9e:de:9f:45:80:6b:53:58:07:
3c:09:20:33:b3:fa:2b:14:bd:e8:9b:ba:e8:5a:22:
9d:af:3d:13:5c:4d:ae:6c:cf:4b:98:e9:1c:77:25:
b7:88:bb:ef:42:37:06:1b:95:e7:79:65:dd:ad:b5:
55:fd:87:48:74:b1:31:9c:78:f6:e3:70:c1:53:9a:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A6:B2:BD:79:BF:F6:79:2F:67:60:0C:C2:E4:96:08:EC:B8:1E:5A
X509v3 Authority Key Identifier:
keyid:9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c8:87:9f:0c:d2:83:43:ff:fc:4d:25:7a:c7:87:2c:39:14:
79:d2:95:1e:3c:25:df:bb:4e:89:63:3a:5b:cf:e3:a3:76:6c:
c0:4f:ed:b4:2b:ed:4b:52:dd:8d:84:80:a5:c3:16:c7:ce:15:
0f:96:df:53:e1:91:14:f1:0a:78:0b:2f:dd:78:9a:cc:8f:48:
27:a4:27:cc:c1:3b:3b:fa:00:35:f3:b1:32:40:22:fe:fa:cf:
32:80:2f:a9:95:07:a2:bc:c2:95:60:b5:58:bf:eb:6b:f3:b4:
be:e6:ef:b2:7b:56:50:fe:32:bf:42:e6:c3:31:73:5c:31:63:
0b:83:f7:74:bb:49:16:4e:25:6b:22:f9:9b:9b:d8:5c:72:67:
38:79:49:a2:cb:42:27:16:76:6e:7f:36:e4:67:d8:e9:2f:1c:
62:6b:d0:51:d4:dd:5f:c0:eb:60:00:d5:b7:fd:12:99:ea:95:
c4:48:11:7e:e0:f8:6c:90:cb:9d:5a:7c:0e:db:43:fd:b8:1a:
a7:f8:da:17:41:64:69:d3:b1:36:82:26:69:36:41:4c:ca:c8:
c8:a8:03:8c:c5:2d:09:4d:f2:95:8d:e2:79:ca:bc:23:41:c5:
2e:d8:93:4d:05:2f:e6:1c:20:a2:dc:96:0c:e3:ae:ff:cd:3e:
92:e8:c5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:19:10 2026 by rpki-client