Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
File: pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft (raw, json)
Hash identifier: 6K8NWNcbjBleFryJ8jYCiF3O454meObtXNCbog6Juyw=
Subject key identifier: C1:CC:7B:E3:22:24:18:3C:46:2B:95:1E:D6:6F:CE:60:10:25:AD:D5
Authority key identifier: A7:24:38:34:90:A1:05:BD:C0:D2:15:97:BF:B1:47:8E:F0:46:30:B1
Certificate issuer: /CN=a724383490a105bdc0d21597bfb1478ef04630b1
Certificate serial: 019CAAFD0C89DBAEA8BC602124915F9E74A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
Manifest number: 0817
Signing time: Sun 01 Mar 2026 20:00:36 +0000
Manifest this update: Sun 01 Mar 2026 20:00:36 +0000
Manifest next update: Mon 02 Mar 2026 20:00:36 +0000
Files and hashes: 1: gf0jS7_pKrH3CkoJOEF0fG_pcww.roa (hash: YGQGmvhgKTHf7zHvqIYo/CO+yqi60gThwgYVuqq8+lk=)
2: pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl (hash: t4J2PWUUPDwO1KIZeQjjggAj12vVWtGHQzkRwKaV2uQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:0c:89:db:ae:a8:bc:60:21:24:91:5f:9e:74:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a724383490a105bdc0d21597bfb1478ef04630b1
Validity
Not Before: Mar 1 20:00:36 2026 GMT
Not After : Mar 2 20:00:36 2026 GMT
Subject: CN=c1cc7be32224183c462b951ed66fce601025add5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:20:87:18:2a:f9:95:62:ca:e5:95:85:49:
03:74:a2:d3:54:a2:dd:cb:9b:88:cc:ee:80:3f:7f:
67:f0:c2:ad:bf:a8:57:da:c8:45:c9:24:38:86:e1:
05:c0:43:48:40:16:3c:d9:d2:a5:5e:25:ce:af:c1:
b1:ae:c8:9f:0c:aa:6d:7b:2b:8b:12:1d:2d:70:03:
54:37:d2:c8:f2:bb:c0:dd:55:16:93:da:32:45:78:
c4:ea:41:c8:98:d7:05:e1:b3:95:9d:66:1b:88:9d:
7c:ac:58:9f:95:2d:cc:a2:69:61:c0:a7:1c:f3:5e:
cb:8a:9d:cf:fd:a2:17:42:7b:70:27:26:de:56:96:
1a:d0:e2:15:cd:32:e4:5c:34:75:11:3b:90:3e:b6:
02:e0:25:2d:73:f2:ad:28:10:20:58:0c:cc:f2:97:
0f:a6:39:fa:bb:c8:f5:56:75:f8:31:8b:b4:df:45:
36:31:6e:92:90:e3:37:9f:14:6d:c9:43:e4:b7:1d:
cd:e2:32:89:5f:94:4c:72:28:89:11:8f:3d:fc:41:
44:a8:65:04:3d:52:0f:81:d3:4d:05:8d:43:44:79:
bf:8f:a8:11:bc:6e:5a:b5:8c:39:10:f5:cb:1f:a4:
46:f7:fe:f0:2e:5b:5c:29:05:60:ac:28:14:8d:0a:
ec:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CC:7B:E3:22:24:18:3C:46:2B:95:1E:D6:6F:CE:60:10:25:AD:D5
X509v3 Authority Key Identifier:
keyid:A7:24:38:34:90:A1:05:BD:C0:D2:15:97:BF:B1:47:8E:F0:46:30:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3d:29:7d:45:66:b4:84:87:be:85:5a:eb:3c:a9:09:6a:5d:
88:11:a6:d2:c3:d7:71:69:36:3e:7f:22:00:85:03:43:14:8c:
4e:58:09:d5:03:7d:9a:42:51:85:93:86:0d:9f:7f:5a:d8:a2:
e7:04:7a:03:e6:e6:d2:24:3a:e8:70:a7:00:94:c7:47:d0:1b:
56:ff:a1:f6:82:70:bd:5e:d6:ea:89:96:45:de:b5:ed:7e:2d:
f7:2d:9d:5a:c3:b2:f1:ae:64:81:d3:d7:e1:92:c0:d0:61:12:
9b:bd:c7:30:6c:45:c7:0e:81:b8:5a:ba:ca:b4:d7:93:a8:77:
b6:b2:1b:cb:c9:43:c5:02:17:2e:32:42:20:87:3a:47:88:76:
4e:df:3d:f1:43:de:c8:f9:b5:dd:b8:65:ea:26:a6:68:0d:9d:
fb:2d:3c:1f:91:2a:cf:cc:24:13:c4:af:31:ac:01:33:9e:a2:
0f:cb:ea:48:1a:99:08:56:ff:e1:9e:43:39:1e:31:ab:b8:28:
b0:99:95:c9:41:c0:08:e3:cc:22:d4:01:87:9a:a4:13:36:f9:
37:e9:4b:2c:1b:70:68:cc:77:c2:b0:f7:b9:43:4e:fa:94:18:
78:78:b0:64:c8:27:d2:e7:18:97:0f:2e:dc:ad:54:bf:db:9f:
a8:12:33:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:44 2026 by rpki-client