
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
File: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft (raw, json)
Hash identifier: tUimO5oiIXoA/mIaKbsr/+3wHNgtpbebXsDtkIeSJ78=
Subject key identifier: 68:CD:D3:FD:BD:BF:B0:F4:FD:C6:3A:BB:51:45:AA:A1:94:35:70:5C
Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
Certificate issuer: /CN=472694d8a399a3a66f442ec72295c754acbbad41
Certificate serial: 019DA30A67BD1F452EAF63D26EABF33BD848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
Manifest number: 179F
Signing time: Sun 19 Apr 2026 00:01:00 +0000
Manifest this update: Sun 19 Apr 2026 00:01:00 +0000
Manifest next update: Mon 20 Apr 2026 00:01:00 +0000
Files and hashes: 1: 9Y9_-ghmVyAuliB_ZM6L4N2aR9Y.roa (hash: AlB+NM2coMQme+Vwjxfjbx7bvSYOwHST/cCoDhabdh8=)
2: BGx_SKWg0A0x4u2zJMu40hnQx4Q.roa (hash: 3vgm19azZKbua/L5jF2wErVGYC2PH4djUu3AdY79HJs=)
3: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl (hash: kk3Vzz2jIZbC/xQKQjBJVOjfR1aypVrdvWIURsvQW4c=)
4: gHq4ZQAB43U72DuDXjjiZ0-2-00.roa (hash: UuXFiLQX/A/tFOUVtGrjRAOGOHSsYt/+KkH7+iWkPIk=)
5: xiXKqk3tGFwKj2r6-VSmJj7eq_k.roa (hash: 1zP1wd86zOnUvyVaHLe0E+PkkU2X/81i9Nla1ulLn0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:67:bd:1f:45:2e:af:63:d2:6e:ab:f3:3b:d8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41
Validity
Not Before: Apr 19 00:01:00 2026 GMT
Not After : Apr 20 00:01:00 2026 GMT
Subject: CN=68cdd3fdbdbfb0f4fdc63abb5145aaa19435705c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:89:bc:f2:79:60:fc:43:25:42:fa:0c:71:
4b:b5:fa:94:f1:ea:5c:ee:2e:6d:92:5a:6e:95:05:
42:74:ef:08:6d:0a:1d:b7:29:dc:d8:36:61:6d:8a:
d9:f8:b3:eb:5f:e0:45:19:07:20:1d:c3:20:fc:49:
de:51:46:42:06:a9:c8:86:b9:b5:13:c1:20:76:bb:
a1:25:fa:8d:97:ab:be:c9:9a:43:76:55:15:2b:72:
53:6d:a6:46:4a:b0:f5:3f:27:4c:22:bf:ee:cd:45:
70:ec:c1:e7:66:b2:83:f5:d9:8a:24:47:e1:4e:03:
4f:75:b2:18:1d:d8:0b:8c:ed:9f:34:b5:47:75:98:
28:a3:32:d4:de:2a:0c:c6:e0:63:77:34:dc:75:fd:
9f:ac:2c:83:9e:51:4c:2a:e4:a6:1e:c2:eb:8d:25:
e2:21:6c:04:a3:39:c5:fe:f2:c2:af:3d:e6:b1:72:
1b:d8:37:4b:57:dd:51:11:65:c3:72:34:ed:a5:16:
f7:b4:67:80:b6:10:15:c8:c5:0d:86:0d:7d:ba:77:
95:d9:9a:ea:01:c3:e7:66:ad:ad:35:d7:88:cb:a2:
fa:b6:e3:e0:47:27:42:b8:2d:35:bd:e9:1f:c9:00:
34:48:13:11:8c:9c:19:59:89:d0:f1:01:84:0d:0d:
6f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CD:D3:FD:BD:BF:B0:F4:FD:C6:3A:BB:51:45:AA:A1:94:35:70:5C
X509v3 Authority Key Identifier:
keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:78:5c:3d:8a:2e:0b:fc:ab:1b:c5:ab:97:05:12:f0:75:70:
a4:54:72:0d:8c:86:58:99:ec:fd:5f:3c:3c:a3:b6:5c:41:e7:
2f:4f:bd:55:25:10:d8:40:c6:68:39:d5:78:aa:ea:63:a9:61:
b6:fe:f3:78:dd:39:86:44:58:42:67:0a:50:71:75:a3:79:c1:
ef:ef:05:99:c9:ec:fd:f7:e4:ca:ab:ac:40:8d:3b:9a:ae:fc:
4e:49:75:a0:57:55:8e:64:22:e3:69:e3:d6:4a:c7:e3:ab:4b:
48:14:61:bc:79:f7:1d:5f:3b:b3:e8:24:c3:b3:47:da:81:48:
e1:d1:ed:95:33:38:95:94:64:8a:cb:cc:dc:d1:3d:d1:f0:9a:
46:06:69:40:42:07:ce:ea:a8:16:92:c9:81:25:b2:d8:27:a6:
f1:a7:54:55:83:2f:f6:5e:f5:93:01:41:5e:85:cb:1f:9d:e5:
1c:33:fb:ce:f5:39:00:04:d7:ee:c8:bf:73:00:1a:25:f7:dd:
47:02:dd:fc:d4:ed:9c:ad:49:d5:75:85:d5:d8:fa:56:ac:99:
fe:9d:b1:85:ad:81:fe:f6:b4:ae:55:8d:66:60:e9:95:58:08:
4a:a6:35:7d:8b:bc:9f:21:d6:d8:47:18:c4:dd:81:eb:f7:1a:
52:ed:6c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:39 2026 by rpki-client