Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
File: ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft (raw, json)
Hash identifier: ivpJBsPXCIT4LQzvGDPsdRjRsgSFc4gUjfcKsfmiaac=
Subject key identifier: 90:3B:8E:74:D3:4E:74:E5:23:EB:DA:6B:30:7B:92:C7:9E:1C:5F:7A
Authority key identifier: AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1
Certificate issuer: /CN=af21dd2f772a5bb47925c28bb5d16cd930f206b1
Certificate serial: 019CA94577896E4719BA71070B54AABA4310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
Manifest number: 0C53
Signing time: Sun 01 Mar 2026 12:00:27 +0000
Manifest this update: Sun 01 Mar 2026 12:00:27 +0000
Manifest next update: Mon 02 Mar 2026 12:00:27 +0000
Files and hashes: 1: aM4m7Oc6NIzyqSxndNoY0r_8S2M.roa (hash: 775mbRNMV7kdlBzbryoJnSCHY7z/GhaIJplZrGCXfAY=)
2: ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl (hash: uiGcVs5mx6Lrr5n2s5v3gKaQW/plLMDe5KhYKe/norY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:77:89:6e:47:19:ba:71:07:0b:54:aa:ba:43:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af21dd2f772a5bb47925c28bb5d16cd930f206b1
Validity
Not Before: Mar 1 12:00:27 2026 GMT
Not After : Mar 2 12:00:27 2026 GMT
Subject: CN=903b8e74d34e74e523ebda6b307b92c79e1c5f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:bd:97:08:d6:d1:80:fc:8d:34:b9:06:f0:
c5:2a:d7:ea:19:a3:48:9e:9a:87:b2:9e:5b:c6:8a:
7a:0e:a8:95:18:a2:65:e0:10:7a:9f:3d:ea:3b:98:
85:10:6d:ad:0c:9f:08:77:f7:8d:ad:3a:29:7f:b5:
7a:93:13:bc:1f:10:7f:88:ef:84:ec:02:0b:15:30:
bf:20:1e:15:fc:0d:a4:74:e5:bf:47:9c:cf:80:bb:
6f:fc:63:fe:7c:fe:58:7c:70:d7:18:71:dd:97:db:
a1:44:00:a3:b1:d2:e6:87:fa:f4:68:48:1b:ed:89:
e8:62:8e:c1:6e:8d:bf:bf:87:b7:96:01:29:4f:04:
c1:90:c5:31:66:9c:f6:da:ac:59:70:c4:08:91:d0:
ee:ce:6e:6e:57:a6:64:2e:66:e3:0d:6e:18:13:73:
ee:28:56:28:20:b6:ac:18:54:7e:26:40:b2:62:4e:
c9:c3:ee:aa:3c:b4:f9:02:e6:fa:70:d9:7b:e9:aa:
1d:b8:64:f0:0b:c3:53:ac:ec:0e:87:45:60:82:37:
0b:0f:2e:1e:f4:61:53:c6:df:0e:19:8c:59:d1:63:
74:72:e3:00:46:aa:fa:a4:32:3b:2c:83:57:46:27:
77:12:00:50:f2:07:3f:2c:48:ff:98:12:65:51:ef:
93:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3B:8E:74:D3:4E:74:E5:23:EB:DA:6B:30:7B:92:C7:9E:1C:5F:7A
X509v3 Authority Key Identifier:
keyid:AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b3:9d:be:f9:39:35:3b:f2:60:bd:56:5d:45:47:86:bf:c4:
64:53:e1:0c:8d:39:4c:cc:33:31:13:f0:7d:03:b1:c5:5f:90:
f1:e6:b9:42:af:71:16:1a:d4:bd:c3:0e:fb:cc:69:7d:7f:d1:
f2:fb:49:05:a3:b0:27:33:f9:94:25:26:c4:fd:d0:33:6d:ec:
a5:13:42:f6:88:36:be:c4:8f:e1:7c:4f:a7:74:39:9c:f5:68:
84:74:07:b6:f8:04:a3:15:de:72:07:e1:e2:c0:0b:69:92:86:
7c:72:15:69:6f:24:ac:f6:73:a1:c3:a2:b6:45:02:bc:3a:81:
b9:43:48:72:25:c9:fe:41:3b:68:be:71:85:5b:88:d2:15:97:
3b:84:73:26:09:74:b3:73:28:a6:71:75:ab:a8:a9:4f:14:61:
54:4e:08:62:06:37:62:d2:19:9f:e1:5b:ac:8c:d9:f9:48:bf:
f0:55:79:5c:c6:b8:16:62:4e:1d:0d:3f:d5:8a:1a:93:82:30:
67:23:81:aa:bd:9a:7d:18:4b:cf:19:7a:79:5b:79:3e:52:51:
8b:a7:a0:7e:a7:6c:87:bf:9a:32:37:f6:ac:fd:00:a6:be:f6:
03:96:68:10:ed:3b:77:92:28:21:80:a3:22:ae:49:27:a6:ca:
5f:04:ec:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:33 2026 by rpki-client