Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
File: RYg0xSq-MEJ_CiKqRv09CAntRYU.mft (raw, json)
Hash identifier: rKb8lvj0sl5sQX3zWW38uMfgFzHL1R9DQXEq998Ul0Q=
Subject key identifier: 28:83:2C:6E:1A:93:DC:36:BE:6C:73:D3:01:87:64:0F:73:EA:F1:7F
Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
Certificate issuer: /CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Certificate serial: 019CAD22D935E0A24C7757C9696A210919FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 06:01:08 +0000
Manifest this update: Mon 02 Mar 2026 06:01:08 +0000
Manifest next update: Tue 03 Mar 2026 06:01:08 +0000
Files and hashes: 1: 1urLz8sI-D-U1DWR00K73cOQtJw.roa (hash: h9FTShSF6pUVjdu4OolKEkCN6zMb2Hm/ugBT1eJvw3M=)
2: RYg0xSq-MEJ_CiKqRv09CAntRYU.crl (hash: 9wiTZWyWPJ2AsDYldbo4uJKjRb9gFtWOMGelbyvsQ8k=)
3: cQXpdp-3wdqJlOzPKIgd4leRkno.roa (hash: voWCMVgfvUJ+YC+Z4yIk4orQRD3bQ3xmCc1/ZJDuxG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:d9:35:e0:a2:4c:77:57:c9:69:6a:21:09:19:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Validity
Not Before: Mar 2 06:01:08 2026 GMT
Not After : Mar 3 06:01:08 2026 GMT
Subject: CN=28832c6e1a93dc36be6c73d30187640f73eaf17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:44:57:df:37:56:25:ed:af:d4:51:aa:2e:
b1:84:be:18:b0:60:d6:21:1e:f2:7a:89:10:b2:5d:
ca:36:00:67:10:62:a3:50:c7:45:dd:55:b3:9f:0f:
fb:3c:dc:20:c5:f3:a2:90:f3:ac:68:13:17:b8:bf:
f4:6d:a2:fb:ae:9e:e1:a6:b9:1c:a3:38:b4:44:5c:
91:e6:63:39:2b:f5:c6:9e:33:a8:e2:25:00:80:6b:
34:0f:25:21:9f:8b:81:b7:04:be:3a:5b:39:1a:23:
dd:fc:2c:43:4e:62:e3:bf:81:1d:81:17:6b:9a:98:
68:c1:e2:9a:31:ac:c1:dc:8a:7c:e5:45:14:47:59:
96:31:8a:90:95:92:e5:97:12:55:fb:dd:da:8a:98:
49:e3:09:f3:8e:8b:34:b3:a7:44:ea:18:02:a0:e0:
c4:4c:6a:f6:7f:96:0b:c8:c8:09:0b:27:9a:12:3f:
08:a3:e9:23:3d:07:58:77:e0:fa:4a:a6:50:45:37:
be:82:64:54:a8:b5:90:2e:06:1e:49:43:c8:94:60:
07:52:1c:ea:37:0e:a1:5d:11:e7:91:08:7b:43:ca:
53:45:04:1b:11:8e:7d:01:65:fc:06:eb:ff:78:7f:
e0:18:65:94:1d:cf:de:dc:b8:88:ba:a1:fb:0f:67:
0b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:83:2C:6E:1A:93:DC:36:BE:6C:73:D3:01:87:64:0F:73:EA:F1:7F
X509v3 Authority Key Identifier:
keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2d:14:80:cc:2e:c3:e7:f9:7e:ae:2b:68:3f:15:a7:87:0c:
b7:be:8e:12:52:cf:2d:1a:11:a1:d5:ae:61:3e:96:f4:9e:1e:
41:fc:c3:d7:14:c1:12:49:70:a8:46:3d:f3:24:b8:4d:1f:a3:
23:f4:97:b3:49:6d:4b:d0:11:f0:2d:36:41:46:bc:74:c1:bc:
fe:cf:de:31:a3:4a:57:b0:95:50:02:8d:22:5a:1b:0c:bc:2b:
cf:4f:c6:e9:a3:47:1d:bd:83:b0:7b:bb:7e:fc:f3:5d:f2:76:
22:36:7a:f8:ce:3d:c3:45:f9:c5:b0:4a:b3:ed:e4:3c:eb:33:
a9:b0:d1:76:6e:86:dd:22:1d:68:f0:10:ed:00:c9:46:ea:f4:
fe:d8:92:47:6e:2c:6d:f2:0d:45:b8:78:fa:8f:ab:56:66:75:
da:70:47:05:ad:d7:d9:b6:8f:f2:f9:37:4f:6d:d3:9e:df:fe:
9a:21:09:62:75:30:62:2d:36:81:4d:88:fe:3f:06:21:8f:8a:
a9:ef:bd:b5:a6:ba:ed:06:c6:0d:6c:76:80:6f:7b:a8:1e:ed:
bd:da:f7:a3:fe:cf:7b:f5:b9:97:01:cb:d1:b1:0f:ba:a4:47:
d2:86:dd:34:93:91:0a:4b:96:b7:1c:14:77:3a:2e:6b:e1:8b:
c6:0c:28:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:01:57 2026 by rpki-client