Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
File: ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft (raw, json)
Hash identifier: 3PTs9K+4xMBEkGYJhLSM52Cq3R5xykF+18Sv8O+HR48=
Subject key identifier: DC:CC:C0:C4:B7:CF:26:E8:E9:3A:53:6C:51:4B:71:BB:E7:89:D3:C5
Authority key identifier: AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1
Certificate issuer: /CN=af21dd2f772a5bb47925c28bb5d16cd930f206b1
Certificate serial: 019DA4543D81F6D2B1CBEA611FBFA8BA7F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
Manifest number: 0CD5
Signing time: Sun 19 Apr 2026 06:01:17 +0000
Manifest this update: Sun 19 Apr 2026 06:01:17 +0000
Manifest next update: Mon 20 Apr 2026 06:01:17 +0000
Files and hashes: 1: aM4m7Oc6NIzyqSxndNoY0r_8S2M.roa (hash: 775mbRNMV7kdlBzbryoJnSCHY7z/GhaIJplZrGCXfAY=)
2: ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl (hash: 3vbMlZf97huu3LPLWXxvNOE7kY1GSzAbuozHwSftQRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:3d:81:f6:d2:b1:cb:ea:61:1f:bf:a8:ba:7f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af21dd2f772a5bb47925c28bb5d16cd930f206b1
Validity
Not Before: Apr 19 06:01:17 2026 GMT
Not After : Apr 20 06:01:17 2026 GMT
Subject: CN=dcccc0c4b7cf26e8e93a536c514b71bbe789d3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:75:4f:06:b4:26:9c:d3:31:c7:66:d9:f7:ae:
2a:d4:b8:a0:e6:f2:47:29:b0:7d:ac:7e:d1:94:78:
fc:96:92:1a:7e:0e:61:43:f3:39:3d:db:75:d4:0d:
d8:de:c7:75:1a:6e:16:8c:6a:f0:a9:24:81:c6:c1:
cf:d8:ef:da:55:0f:25:fb:a4:7a:ab:6b:33:bf:ca:
1b:e4:8c:2c:7f:65:48:9c:5f:ad:6b:3a:e0:b9:ed:
05:f9:43:ad:2b:14:06:0c:3b:ca:94:a6:f2:db:2d:
3f:31:08:66:92:81:25:07:f0:36:d8:58:56:9f:70:
e4:36:0d:d6:7b:db:95:81:4d:d1:1a:a6:91:49:d6:
01:8b:00:9e:c1:55:54:c4:29:94:c8:12:cf:d3:6c:
f4:b5:bc:f9:0f:6b:6c:66:15:06:a3:e9:c7:5a:21:
92:4d:88:c6:ad:43:0f:f9:26:4f:5f:e1:bb:06:f7:
17:11:0e:39:2b:2b:8c:ab:a5:ed:17:d5:62:16:77:
a9:a9:c4:5f:b3:0f:f4:6c:f9:8f:c1:ef:c6:c5:9e:
f1:ec:d4:83:b2:cf:01:65:4b:a9:7b:22:6d:0b:b4:
b7:4f:46:8a:f2:3a:b9:2c:24:03:ec:7c:df:b2:7c:
ac:ec:f1:68:05:db:81:8e:ea:4f:07:1d:63:1d:05:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CC:C0:C4:B7:CF:26:E8:E9:3A:53:6C:51:4B:71:BB:E7:89:D3:C5
X509v3 Authority Key Identifier:
keyid:AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:19:bb:cd:b6:60:69:95:4c:ca:ea:1b:d0:75:6d:71:c7:00:
b2:eb:b9:95:aa:39:0e:ae:69:24:c6:82:af:bd:4a:c0:a9:ae:
61:20:29:3b:f9:42:de:e0:ca:54:12:4f:50:8e:22:34:c1:82:
e6:d8:bd:17:7a:b7:be:8c:87:7c:aa:a7:e3:6f:20:8c:e7:8c:
a0:12:3e:5e:72:4d:e4:b0:68:8a:5c:70:86:c0:5e:e2:51:0b:
ca:c3:b8:44:44:47:de:e9:e4:55:c1:e2:98:c0:d9:72:00:61:
8c:56:54:e7:6c:fc:4f:4d:6e:2e:54:a4:46:8f:9a:71:fe:eb:
79:c1:b9:04:e0:de:8b:da:e7:fc:c8:49:f3:9d:0a:54:41:40:
7c:91:de:53:1c:9e:25:d6:d2:0d:2f:20:48:65:ee:d8:9d:28:
b3:85:4d:66:3b:7f:d3:59:f6:43:b2:f7:d5:9c:f0:49:55:c2:
63:6e:88:78:88:2a:e1:14:64:9e:3b:ba:95:37:eb:ac:01:93:
03:21:34:5c:65:6e:8b:cf:66:45:7d:40:5b:1a:9d:72:30:28:
85:50:78:fd:38:61:2d:90:ea:08:8e:9a:7f:77:ae:fe:92:15:
ec:b7:75:cd:1d:de:6d:79:32:5e:19:59:9d:a9:e9:7c:85:76:
69:69:0a:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kVD2B9tKxy+phH7+oun+OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMjFkZDJmNzcyYTViYjQ3OTI1YzI4YmI1ZDE2Y2Q5MzBm
MjA2YjEwHhcNMjYwNDE5MDYwMTE3WhcNMjYwNDIwMDYwMTE3WjAzMTEwLwYDVQQD
EyhkY2NjYzBjNGI3Y2YyNmU4ZTkzYTUzNmM1MTRiNzFiYmU3ODlkM2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXVPBrQmnNMxx2bZ964q1Lig5vJH
KbB9rH7RlHj8lpIafg5hQ/M5Pdt11A3Y3sd1Gm4WjGrwqSSBxsHP2O/aVQ8l+6R6
q2szv8ob5Iwsf2VInF+tazrgue0F+UOtKxQGDDvKlKby2y0/MQhmkoElB/A22FhW
n3DkNg3We9uVgU3RGqaRSdYBiwCewVVUxCmUyBLP02z0tbz5D2tsZhUGo+nHWiGS
TYjGrUMP+SZPX+G7BvcXEQ45KyuMq6XtF9ViFnepqcRfsw/0bPmPwe/GxZ7x7NSD
ss8BZUupeyJtC7S3T0aK8jq5LCQD7Hzfsnys7PFoBduBjupPBx1jHQUb8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzMwMS3zybo6TpTbFFLcbvnidPFMB8GA1UdIwQY
MBaAFK8h3S93Klu0eSXCi7XRbNkw8gaxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnlIZEwzY3FXN1I1SmNLTHRkRnMyVER5QnJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wN2JhZGQtZmYzZi00ODg2LWFiZjEt
NTUyZTUxNTQyZDRkLzEvcnlIZEwzY3FXN1I1SmNLTHRkRnMyVER5QnJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wN2JhZGQtZmYzZi00ODg2LWFiZjEtNTUyZTUxNTQyZDRk
LzEvcnlIZEwzY3FXN1I1SmNLTHRkRnMyVER5QnJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBm7zbZg
aZVMyuob0HVtcccAsuu5lao5Dq5pJMaCr71KwKmuYSApO/lC3uDKVBJPUI4iNMGC
5ti9F3q3voyHfKqn428gjOeMoBI+XnJN5LBoilxwhsBe4lELysO4RERH3unkVcHi
mMDZcgBhjFZU52z8T01uLlSkRo+acf7recG5BODei9rn/MhJ850KVEFAfJHeUxye
JdbSDS8gSGXu2J0os4VNZjt/01n2Q7L31ZzwSVXCY26IeIgq4RRknju6lTfrrAGT
AyE0XGVui89mRX1AWxqdcjAohVB4/ThhLZDqCI6af3eu/pIV7Ld1zR3ebXkyXhlZ
nanpfIV2aWkKqA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:10 2026 by rpki-client