Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
File: RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft (raw, json)
Hash identifier: B/01VKhlCLlsH1Cx8NV+8GTP+gda4pP8ttxM4kcFDu8=
Subject key identifier: E2:4C:82:0E:77:B8:7F:51:91:71:13:BA:6C:A4:8A:73:18:B8:2A:6B
Authority key identifier: 47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA
Certificate issuer: /CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa
Certificate serial: 019DA30A0176644B114140AAE4D5BCC7131E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
Manifest number: 0A5A
Signing time: Sun 19 Apr 2026 00:00:35 +0000
Manifest this update: Sun 19 Apr 2026 00:00:35 +0000
Manifest next update: Mon 20 Apr 2026 00:00:35 +0000
Files and hashes: 1: RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl (hash: ppQmoeZ/SFHs1rup3HY1CLlXGiD0rrpArlWkzvS0cLM=)
2: aeBUt7IDPZFtCHCeh_1TFRyUYt0.roa (hash: VQrTwZaJ6Y1ce96ZjoBajejiZoxDYWssI1+tZb2f6jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:01:76:64:4b:11:41:40:aa:e4:d5:bc:c7:13:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa
Validity
Not Before: Apr 19 00:00:35 2026 GMT
Not After : Apr 20 00:00:35 2026 GMT
Subject: CN=e24c820e77b87f51917113ba6ca48a7318b82a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:72:0c:66:7f:9f:61:32:07:7c:0d:a6:17:
d3:93:bb:52:52:9f:21:16:40:ee:42:45:c7:0c:23:
c3:92:c6:21:d9:87:40:b7:d1:e5:54:0f:73:53:6b:
ad:06:aa:b7:c2:b3:67:e5:a6:9d:fa:03:de:60:af:
18:12:4a:83:29:8b:eb:77:b2:74:cb:67:95:92:93:
0d:9f:79:f3:99:77:50:f2:e1:f9:35:1b:c0:40:8a:
a0:5e:b9:e8:35:97:c8:c3:dc:3b:d2:d6:36:a2:e7:
70:74:f3:fd:ba:60:d2:f0:39:52:2e:3b:4e:7b:48:
e0:63:cd:ca:27:a0:82:c8:be:3f:b2:c5:cb:bd:6d:
00:dc:9e:ff:78:50:5f:d2:01:56:37:c9:37:aa:55:
6b:40:94:50:41:ac:06:ad:1a:2e:b6:83:3a:cb:65:
d3:00:2b:b7:df:6b:a5:e2:fa:67:c3:be:ce:95:73:
d7:83:5d:a3:6f:fd:d1:8a:91:ad:47:0c:ac:e0:72:
e0:99:5e:d3:87:26:3d:28:06:73:02:79:cb:d7:02:
50:23:d3:0f:ae:89:84:bf:5f:e0:45:d9:e5:09:ea:
3a:04:6e:a9:a3:be:12:9f:e0:c3:f9:26:79:07:d1:
7e:93:8b:70:2a:fe:d3:c5:20:e1:90:4b:0e:14:16:
84:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4C:82:0E:77:B8:7F:51:91:71:13:BA:6C:A4:8A:73:18:B8:2A:6B
X509v3 Authority Key Identifier:
keyid:47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:40:cb:15:ad:ad:1a:22:10:65:10:75:1f:c0:3d:42:ab:21:
51:e4:7c:a1:5e:6d:18:a0:d2:a2:63:1a:e2:83:68:b3:09:54:
46:45:0a:9c:0d:77:16:69:3c:cc:8a:b7:0e:0e:50:45:6f:dc:
fd:fb:7a:c6:20:ac:0f:e1:a6:19:0e:9f:91:af:44:73:1b:70:
9a:23:4f:43:69:6e:86:f5:04:c3:e4:d4:b7:80:06:5f:8d:99:
ef:b0:d3:0d:cc:a0:e5:2a:3f:cb:86:98:da:7d:03:4b:31:55:
8b:e5:07:16:36:7c:f9:09:9c:85:ff:5c:e2:7f:3b:82:52:07:
88:a3:85:32:29:b2:dd:30:b5:37:10:80:9a:e1:8c:ff:ab:53:
93:ee:40:1b:56:93:65:34:ac:61:b8:ec:07:db:26:29:72:37:
ca:02:09:3c:e2:58:80:a5:22:c8:da:ec:eb:74:de:c6:66:2f:
49:62:72:6a:4b:1a:d6:19:36:78:8d:2e:c4:f9:f0:91:41:c4:
cc:b4:98:30:c2:c5:7a:8d:c9:4a:56:c7:22:b1:28:ae:71:f9:
8d:6c:b4:2e:19:8c:bc:dd:9b:76:20:26:5b:89:87:9d:bc:89:
21:b0:c1:52:b0:5b:d5:42:ff:b1:cc:eb:03:a3:3d:04:ff:c1:
32:8a:61:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:10 2026 by rpki-client