Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
File: ryfUX8GLqRerHomhfvC2NgmEgiQ.mft (raw, json)
Hash identifier: 5fpYRj30Qufa4Up1rBgDOW3khbnR+rGyuW6GmSWnZNg=
Subject key identifier: E9:5C:A0:36:A4:48:EF:36:B9:4B:F4:15:D8:E5:05:18:81:57:4B:DA
Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
Certificate issuer: /CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Certificate serial: 019D97E23F326776BF146BFC459B14A9A566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
Manifest number: 156A
Signing time: Thu 16 Apr 2026 20:01:19 +0000
Manifest this update: Thu 16 Apr 2026 20:01:19 +0000
Manifest next update: Fri 17 Apr 2026 20:01:19 +0000
Files and hashes: 1: UPdd3G2KcdZS3e0YMWJ1mdET7ug.roa (hash: fLa6myDFK6r7xHzOqHrp8ZBgZdrk6WJWWDhaOtDKTYI=)
2: ryfUX8GLqRerHomhfvC2NgmEgiQ.crl (hash: 1mCmdgmKi14co1Lb6xoQ9iZKFfNEQ5+qbtM9NXHP7BU=)
3: tIyhjPYpgahql1s3g33PvZ8ic6Q.roa (hash: 2D85U464zzyXnN6q09EGipP8N8nVNvilmezlcS8OLVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:3f:32:67:76:bf:14:6b:fc:45:9b:14:a9:a5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Validity
Not Before: Apr 16 20:01:19 2026 GMT
Not After : Apr 17 20:01:19 2026 GMT
Subject: CN=e95ca036a448ef36b94bf415d8e5051881574bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f2:b0:6c:b4:4a:b5:32:c8:b0:5b:8d:48:5c:
d4:da:19:93:00:0b:10:93:6e:72:56:90:fb:ca:31:
fa:46:01:3f:1a:e3:46:da:19:89:87:66:32:e2:74:
36:5b:bf:3f:46:fd:02:87:ca:04:73:6b:dd:9d:5a:
5b:a9:7a:84:27:0a:30:1a:d3:db:79:ca:df:10:ab:
c7:85:55:b3:2e:ac:b1:de:c2:1a:31:fa:c2:0a:6c:
1d:df:9c:51:76:5d:14:0c:d7:23:65:91:17:38:11:
4a:98:30:0e:e5:a4:61:c0:fb:b4:c6:0e:fd:48:07:
75:7e:b7:b7:c5:00:65:2c:5f:ec:c0:bb:e3:7a:00:
a2:c1:f0:bd:55:ff:91:8b:90:9d:b7:d8:8a:d3:4f:
e8:f8:e5:8a:96:79:be:04:9a:9c:c4:df:6f:67:24:
f7:80:28:46:7c:a5:6b:6b:05:df:ff:78:88:ee:29:
1c:9d:7d:53:5e:f6:e9:c7:83:82:ea:51:c4:17:28:
8c:98:2e:0b:2c:2f:b4:58:e7:48:d4:2f:46:d1:5e:
5e:0e:49:10:0c:23:1a:52:c1:67:5e:22:55:38:ea:
8e:84:91:f3:88:93:07:8a:6d:9a:07:90:72:da:1a:
6c:62:72:f1:84:cf:bc:47:ff:7f:d4:99:72:40:79:
4f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5C:A0:36:A4:48:EF:36:B9:4B:F4:15:D8:E5:05:18:81:57:4B:DA
X509v3 Authority Key Identifier:
keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:70:97:20:76:99:56:79:9a:8f:8f:ec:64:80:fb:8b:49:a6:
af:2e:24:57:31:dc:2c:bd:17:2c:4b:22:38:5d:97:0b:b6:00:
a3:3e:99:52:2d:ab:b2:83:4e:91:c7:7a:eb:e4:1b:d0:56:2c:
67:a6:3e:8e:20:bc:ea:45:46:aa:e4:97:b4:f9:fa:5b:ae:e4:
54:dd:81:5a:3b:0e:c3:98:86:dc:75:a8:8d:5e:ff:14:c5:99:
c6:e9:e2:87:19:ce:e8:c2:30:0a:1c:3e:b1:2d:ed:75:c8:40:
d6:21:db:cf:05:99:69:12:2c:4f:0f:c6:13:fa:3c:6d:bc:65:
28:19:1f:eb:7b:fb:3d:bb:96:75:4d:0e:4e:d0:7a:9d:93:41:
cd:2b:b4:16:c4:da:e6:46:49:93:35:8a:89:94:5e:3e:0b:16:
f8:9f:12:8e:49:5a:0a:6f:16:2b:e7:97:9b:4a:8f:f4:0d:af:
f6:f5:2b:73:ba:e3:59:9f:85:00:65:19:f8:14:d6:e8:b8:f1:
12:87:92:51:93:94:9f:e5:8b:92:41:1b:cd:a3:99:37:b7:53:
cf:88:80:a9:e0:36:c6:f2:9b:af:f3:02:0c:84:4a:ed:eb:4a:
d1:40:1c:a3:b9:0b:01:6c:3b:ba:5f:ca:8e:2d:20:fb:18:9a:
3c:5b:1c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:55 2026 by rpki-client