Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
File: ryfUX8GLqRerHomhfvC2NgmEgiQ.mft (raw, json)
Hash identifier: QjvWFEESYY6FQiZ3ZEPgNHzTwXYSyXmWHBKXjeBVOEY=
Subject key identifier: F5:44:8A:10:DE:10:92:77:48:8B:26:61:11:ED:0A:D6:2E:B5:DB:BA
Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
Certificate issuer: /CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Certificate serial: 01A0CE9227A5903DBB94D247A683B6B2ED60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
Manifest number: 1714
Signing time: Wed 23 Sep 2026 14:01:19 +0000
Manifest this update: Wed 23 Sep 2026 14:01:19 +0000
Manifest next update: Thu 24 Sep 2026 14:01:19 +0000
Files and hashes: 1: UPdd3G2KcdZS3e0YMWJ1mdET7ug.roa (hash: fLa6myDFK6r7xHzOqHrp8ZBgZdrk6WJWWDhaOtDKTYI=)
2: ryfUX8GLqRerHomhfvC2NgmEgiQ.crl (hash: RLcVB3kdxtY33GxF5BpU/Lp5V0AhOdzfFSJx8lycVMw=)
3: tIyhjPYpgahql1s3g33PvZ8ic6Q.roa (hash: 2D85U464zzyXnN6q09EGipP8N8nVNvilmezlcS8OLVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:92:27:a5:90:3d:bb:94:d2:47:a6:83:b6:b2:ed:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Validity
Not Before: Sep 23 14:01:19 2026 GMT
Not After : Sep 24 14:01:19 2026 GMT
Subject: CN=f5448a10de109277488b266111ed0ad62eb5dbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:8a:36:25:9e:e0:59:47:a5:28:80:0b:77:
7b:56:56:39:c3:cb:68:1a:13:ae:c6:74:c8:2b:8f:
b6:1e:35:d1:fe:b4:4b:f1:6e:3b:b8:3b:7d:4e:83:
2e:19:01:54:6a:df:60:bd:9a:ae:b7:7c:c3:88:d4:
ee:d6:cd:fd:7d:e6:99:c2:f7:a6:a2:2b:50:7e:55:
d8:3c:af:06:26:79:6c:4c:ec:27:7c:61:43:a8:d3:
be:8b:cc:73:fb:3c:ee:b8:fb:22:81:34:be:e1:cb:
bd:e9:3f:a9:cc:eb:3d:eb:2f:e0:13:db:de:7b:1d:
f1:f5:79:7a:7e:bc:b3:40:5d:f0:06:4e:46:5d:09:
a3:cc:88:38:dc:b5:40:04:f4:09:a7:f7:2f:16:ff:
c5:a7:7e:96:45:d7:de:12:39:55:65:ab:c3:34:aa:
c5:fc:2e:02:5b:fe:c2:8b:9b:19:14:fc:5b:9b:8d:
f4:50:ab:96:08:db:e1:92:34:25:9c:08:9d:20:d5:
a4:45:3a:55:42:f9:69:d5:06:ce:c3:45:31:56:b1:
f0:65:18:de:44:d8:95:5d:e3:c7:fe:21:e1:96:fd:
a6:d3:97:2a:cc:75:8a:46:5a:c8:ef:d2:58:e3:5f:
da:1f:2b:93:9c:26:9d:a1:a7:2d:63:ad:5a:2d:65:
8d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:44:8A:10:DE:10:92:77:48:8B:26:61:11:ED:0A:D6:2E:B5:DB:BA
X509v3 Authority Key Identifier:
keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d2:f0:27:8e:1a:dc:80:a0:4d:cd:93:2a:1e:13:d9:56:d9:
c9:33:5f:cd:29:97:a4:b4:92:a3:ab:37:d7:00:36:e1:35:2d:
80:29:4f:de:11:6a:e5:f4:d7:63:62:c0:78:ae:35:eb:0f:46:
ba:67:d8:24:d7:b2:ad:03:65:32:08:5a:5b:5f:94:c0:4e:1c:
3b:09:c5:e6:6a:b6:5d:c9:10:7e:b4:81:ab:a3:fa:4f:a5:37:
42:2c:2d:79:bd:47:64:fd:00:c4:5b:a7:a3:ea:b1:02:ee:d5:
9f:93:8e:c3:5b:b2:80:03:d0:fb:63:00:15:24:b3:92:b3:8a:
4c:72:ca:a4:a7:79:3b:4e:64:e2:13:7c:0f:64:f1:6a:4b:16:
91:2c:ab:3c:3b:ef:8a:b2:34:f9:74:b9:f5:31:95:a1:4d:27:
18:e7:8e:e8:93:03:78:40:5d:04:15:c0:2a:32:1e:25:89:8b:
e5:d7:96:50:8f:f1:98:91:85:f1:33:fc:9d:5c:a2:7b:a6:c4:
63:cc:09:f2:2d:b5:66:a7:9b:75:ac:26:be:6f:cd:b5:56:d2:
f9:55:dd:30:22:f9:65:4a:68:e7:98:21:11:fc:31:64:c5:81:
cd:7e:99:da:cc:ac:66:02:7d:1a:7a:93:12:45:6f:c5:7c:73:
a7:a3:8e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:15:43 2026 by rpki-client