Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
File: ryfUX8GLqRerHomhfvC2NgmEgiQ.mft (raw, json)
Hash identifier: VtQGHzJTGSW066oN+6Jjqps09j2YAYVYZe2zPVHo4nA=
Subject key identifier: 03:75:31:B4:61:31:6B:A1:9B:A9:A8:A6:15:AA:BA:47:22:7D:A2:B9
Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
Certificate issuer: /CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Certificate serial: 019CAAC6512E0038A884C92DEB80EB936A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
Manifest number: 14EF
Signing time: Sun 01 Mar 2026 19:00:49 +0000
Manifest this update: Sun 01 Mar 2026 19:00:49 +0000
Manifest next update: Mon 02 Mar 2026 19:00:49 +0000
Files and hashes: 1: UPdd3G2KcdZS3e0YMWJ1mdET7ug.roa (hash: fLa6myDFK6r7xHzOqHrp8ZBgZdrk6WJWWDhaOtDKTYI=)
2: ryfUX8GLqRerHomhfvC2NgmEgiQ.crl (hash: 7BEQVu8AISpcbdPicYZMj/9EEKt1L0mnR1A3+F8JqrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:51:2e:00:38:a8:84:c9:2d:eb:80:eb:93:6a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Validity
Not Before: Mar 1 19:00:49 2026 GMT
Not After : Mar 2 19:00:49 2026 GMT
Subject: CN=037531b461316ba19ba9a8a615aaba47227da2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9a:a4:ea:4b:ca:f6:41:fe:eb:b4:e5:d4:93:
c8:1a:6e:c4:06:6d:42:01:62:b5:0f:3f:07:70:3a:
73:00:81:ad:e5:91:21:c2:71:ae:e4:0a:8f:68:28:
53:32:8e:04:87:5d:bc:18:5e:c4:9b:ae:2a:93:48:
a4:98:78:03:1a:a8:93:e9:7a:da:69:5d:b3:e2:22:
ec:38:9f:f6:e3:7c:24:a0:3c:64:84:7b:a3:34:b4:
0c:06:57:0c:27:6c:5c:61:34:f9:d5:a6:5e:6e:d8:
13:55:a8:a5:fe:2d:10:c3:ef:f6:22:25:f8:0c:07:
29:f9:c8:de:4a:d0:fe:1e:15:b6:05:1f:9d:33:76:
7c:c1:27:2e:d0:7f:ac:e6:1c:74:0e:20:4a:e2:81:
87:fc:26:4b:8f:85:5d:ed:a6:fa:46:39:18:95:ab:
16:b0:d3:ee:36:2a:f2:11:d7:96:0c:43:bc:88:67:
49:c8:06:c6:75:10:7c:20:15:3f:e6:0a:22:57:45:
e8:cf:85:9f:db:1d:3a:72:28:1d:06:bd:fc:11:46:
3b:b2:2a:1b:f5:65:29:c3:70:02:8e:db:88:2c:2b:
93:63:84:11:ec:3d:03:4f:62:52:7c:e2:c7:5b:22:
a8:0b:4d:61:a9:43:83:64:36:4e:52:85:a7:c2:05:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:75:31:B4:61:31:6B:A1:9B:A9:A8:A6:15:AA:BA:47:22:7D:A2:B9
X509v3 Authority Key Identifier:
keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4b:b9:f9:7d:ef:ba:81:45:49:1c:b3:98:3a:e8:30:69:2e:
bc:00:e5:d1:5d:a6:1a:7b:7f:2a:6e:6d:fc:43:72:c3:6f:84:
07:f8:61:5c:3d:94:93:4e:b9:44:1d:e7:91:a1:64:8e:34:9b:
65:68:1e:70:2b:ff:92:b7:73:8c:de:aa:0e:b6:af:90:a8:e0:
c8:70:20:a8:25:15:c9:bb:78:ef:95:a3:bd:bf:40:34:1c:74:
bc:d5:29:78:cb:6d:a1:2a:01:58:a2:71:71:a3:9d:44:bb:b2:
bd:d8:4a:6e:2f:23:2b:02:16:8b:86:21:95:82:dc:30:6e:c2:
12:c8:2a:78:bc:49:c4:e0:b8:47:0c:fb:84:59:b5:60:77:2d:
2d:6a:49:b5:0e:81:06:6c:f6:b0:1e:9d:43:ea:7c:ad:e6:92:
a2:d7:46:9e:3f:12:44:af:48:f3:8b:8e:c4:2b:eb:19:38:1e:
67:24:1e:85:48:0e:59:4d:4f:85:75:f0:37:60:32:30:14:f8:
0a:b1:ed:46:82:a5:78:3a:a3:ff:16:38:bd:dd:ea:88:c5:cd:
d8:27:f9:e3:8b:58:32:f5:a2:62:35:7d:26:d7:ee:5b:c1:09:
5f:20:74:2b:bb:0c:95:b4:18:15:c9:16:8c:94:d2:97:bc:27:
72:e3:fb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:46 2026 by rpki-client