Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
File: ryfUX8GLqRerHomhfvC2NgmEgiQ.mft (raw, json)
Hash identifier: cLkkK169Cbub69rDj1/mXFuiwZHlOVJ6+U0zcpAb+bY=
Subject key identifier: 0F:78:5B:EC:2C:EF:EE:2F:3D:CC:D7:DD:6B:AE:8A:8E:D0:12:91:E7
Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
Certificate issuer: /CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Certificate serial: 019FAAF613E90E71C7E274D01203E8742E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
Manifest number: 167D
Signing time: Tue 28 Jul 2026 23:01:21 +0000
Manifest this update: Tue 28 Jul 2026 23:01:21 +0000
Manifest next update: Wed 29 Jul 2026 23:01:21 +0000
Files and hashes: 1: UPdd3G2KcdZS3e0YMWJ1mdET7ug.roa (hash: fLa6myDFK6r7xHzOqHrp8ZBgZdrk6WJWWDhaOtDKTYI=)
2: ryfUX8GLqRerHomhfvC2NgmEgiQ.crl (hash: htWWWYaavvYGKLHZnBgtrKEFf4okEB0nLL1/hgHHdm8=)
3: tIyhjPYpgahql1s3g33PvZ8ic6Q.roa (hash: 2D85U464zzyXnN6q09EGipP8N8nVNvilmezlcS8OLVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:13:e9:0e:71:c7:e2:74:d0:12:03:e8:74:2e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Validity
Not Before: Jul 28 23:01:21 2026 GMT
Not After : Jul 29 23:01:21 2026 GMT
Subject: CN=0f785bec2cefee2f3dccd7dd6bae8a8ed01291e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f9:3e:db:cd:de:42:04:91:5e:fd:13:78:9b:
cd:f3:bc:b6:4b:63:3c:e2:d1:95:2f:ca:04:3c:3e:
63:05:b3:6a:56:65:12:89:14:25:77:b1:66:34:70:
f5:63:9e:63:8a:94:b6:bb:96:be:2a:de:21:be:6b:
80:8a:c3:59:bb:00:b5:cb:f9:56:a9:ab:fb:5e:96:
19:f3:c9:af:28:51:3a:6b:0e:de:d1:56:81:3b:ee:
29:59:2f:d2:e3:87:a7:54:0c:b8:5d:ee:b9:98:05:
6b:f2:7d:1a:45:f5:5b:49:45:8b:34:4e:3a:f2:1a:
cc:4a:75:fb:74:88:90:fc:d8:d7:02:06:2f:aa:bd:
73:dc:1c:f7:3c:d8:9d:25:73:e7:c4:99:2f:15:c0:
1c:eb:0d:80:53:e4:5f:26:a0:93:ae:49:8c:04:5d:
aa:6c:d1:e3:f4:05:ba:bf:39:17:24:ce:dd:54:90:
a1:58:c7:2f:46:97:1e:1b:0a:21:e5:78:b5:d9:1b:
2e:79:af:c1:f2:ff:96:3f:a0:c8:17:02:11:17:38:
dd:2a:e5:39:db:d2:f8:0c:43:42:3a:76:60:e3:cd:
de:3f:bb:7f:89:9f:7f:2c:a0:c3:05:e2:1c:30:48:
e1:a4:2e:93:e0:1e:9c:6e:78:fc:a5:fb:fd:f9:c2:
cc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:78:5B:EC:2C:EF:EE:2F:3D:CC:D7:DD:6B:AE:8A:8E:D0:12:91:E7
X509v3 Authority Key Identifier:
keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d5:fe:9d:c6:53:7a:99:76:59:f1:d3:7f:83:9d:cb:34:7d:
d2:59:2b:1f:2e:4d:d7:3c:e1:28:66:51:d7:f1:13:cd:7d:9e:
54:20:70:4e:b0:dd:34:ff:c6:ac:ff:f7:55:4f:60:c5:a2:fa:
81:05:f5:02:63:d1:51:98:50:a7:67:3c:47:cc:83:ca:48:7e:
03:be:db:28:55:46:54:23:1a:c9:09:c1:fb:1e:9d:ff:dc:02:
f0:b3:b6:08:a8:54:7e:27:bf:d9:8a:d5:9f:4e:a3:5e:b3:c3:
eb:50:12:0d:ef:50:dc:93:ae:99:68:48:b2:c6:3c:36:7a:a7:
93:c1:54:93:82:f0:e4:2f:4d:51:17:bc:dc:24:04:4e:50:f5:
16:f7:65:91:54:01:a6:f6:30:14:7a:96:82:e4:1c:15:63:6a:
be:41:ea:9a:16:7d:06:37:5b:9a:ed:31:4a:66:75:21:28:a1:
39:3d:d7:8b:5e:24:e8:d8:e4:cd:e2:de:ac:45:2d:37:27:e4:
59:27:b1:6b:27:84:e1:f3:0a:49:b8:58:1a:b3:2a:51:89:18:
d9:70:a2:15:3b:98:3d:06:41:9d:64:1d:4a:11:13:c3:7a:1a:
a6:12:37:0f:8f:ae:eb:fe:40:df:92:e6:88:12:27:66:7f:78:
a6:a0:e4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:24:24 2026 by rpki-client