Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
File: ryfUX8GLqRerHomhfvC2NgmEgiQ.mft (raw, json)
Hash identifier: V9dNBxQyHpg0C7Rnb7R3oDZ3zw/aeS1Rh/QyT09W+28=
Subject key identifier: BC:DE:0A:CF:19:70:F6:D6:04:2B:B9:F2:B0:C0:0E:EB:E4:09:11:AE
Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
Certificate issuer: /CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Certificate serial: 019EC149A724AF0EEBD84525F5298F8355D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
Manifest number: 1604
Signing time: Sat 13 Jun 2026 14:01:30 +0000
Manifest this update: Sat 13 Jun 2026 14:01:30 +0000
Manifest next update: Sun 14 Jun 2026 14:01:30 +0000
Files and hashes: 1: UPdd3G2KcdZS3e0YMWJ1mdET7ug.roa (hash: fLa6myDFK6r7xHzOqHrp8ZBgZdrk6WJWWDhaOtDKTYI=)
2: ryfUX8GLqRerHomhfvC2NgmEgiQ.crl (hash: vQr/wRiHq2iYSHI5K1LyjK7y8DNIA7IX5dujCenDT1E=)
3: tIyhjPYpgahql1s3g33PvZ8ic6Q.roa (hash: 2D85U464zzyXnN6q09EGipP8N8nVNvilmezlcS8OLVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:a7:24:af:0e:eb:d8:45:25:f5:29:8f:83:55:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Validity
Not Before: Jun 13 14:01:30 2026 GMT
Not After : Jun 14 14:01:30 2026 GMT
Subject: CN=bcde0acf1970f6d6042bb9f2b0c00eebe40911ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:54:35:c1:e0:c0:e3:a4:41:f7:cf:f6:e1:
38:1f:4f:45:1a:ba:23:14:57:5f:4f:4c:69:c5:c8:
f9:e0:96:57:fc:6f:87:1b:4b:84:db:fe:f5:a3:8d:
f8:f3:74:ce:66:9f:72:b0:1d:78:ff:40:69:17:81:
74:fd:2b:75:b5:ce:c9:62:dc:6c:0d:db:60:5b:e2:
65:13:c4:89:aa:62:51:58:cd:5b:48:5c:47:56:22:
33:21:d2:9c:56:25:0e:0b:81:aa:c3:22:29:ee:11:
27:66:de:9f:30:92:7d:c2:39:9e:c9:4a:07:42:89:
77:2c:f7:05:ae:a1:02:5e:5a:6c:64:4a:b1:99:e0:
31:52:a9:10:74:08:95:b7:95:b6:6c:eb:df:f9:4d:
a5:69:73:90:47:20:35:b5:28:1e:23:55:e5:d2:b0:
f9:8b:7f:0b:48:be:d8:4c:0c:45:d5:28:15:24:d1:
af:6d:36:61:1d:c2:cb:40:b9:2b:24:d9:24:d8:02:
78:17:26:e5:86:85:b7:30:0b:31:77:aa:71:61:82:
4d:4a:f3:e6:f3:f8:d8:92:12:23:29:01:5d:e4:f2:
e2:12:04:13:4d:f0:a6:04:b2:c3:d7:6f:ee:59:8e:
76:11:49:74:a5:ee:16:79:64:b2:25:49:d7:e2:49:
36:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DE:0A:CF:19:70:F6:D6:04:2B:B9:F2:B0:C0:0E:EB:E4:09:11:AE
X509v3 Authority Key Identifier:
keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:40:e0:6a:db:ce:cf:00:47:58:87:ea:36:10:f4:ec:d5:80:
76:bb:5b:82:21:9d:2e:0d:78:e5:91:89:8a:c2:e3:17:32:05:
9a:d0:da:d5:75:cd:8d:00:bc:82:d3:3e:f4:83:30:f0:96:ae:
45:33:af:41:a0:56:03:16:1b:93:a6:82:ab:38:84:de:9e:e4:
c4:f1:81:9f:fd:0f:5a:e5:f4:79:26:07:06:8b:66:da:c1:ba:
1a:43:ad:91:ee:18:3e:48:56:ac:8c:de:9d:eb:33:cd:58:91:
2e:c2:fd:51:71:f4:0b:33:62:d5:11:8b:dc:bc:e2:ef:11:40:
f8:3b:90:4a:1c:54:00:90:4e:b4:aa:77:4e:19:a5:15:57:21:
a8:a9:2b:96:65:57:51:84:60:e0:08:92:32:8e:32:21:3e:2e:
8d:5c:0d:cb:11:8f:a2:ce:d1:59:87:e5:c2:f6:19:7e:f6:74:
23:1b:ad:94:8f:aa:53:f6:56:6e:f9:52:80:fc:f5:4f:fb:d4:
f4:94:81:40:84:a4:d6:45:dc:f0:f4:55:e6:ef:db:42:3b:f3:
fc:17:8c:f0:6d:48:79:2d:95:76:b0:21:d9:1f:27:c2:1a:19:
df:70:26:4e:3c:af:86:22:95:30:83:64:0b:c2:28:61:b4:04:
89:db:1a:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSackrw7r2EUl9SmPg1XUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMjdkNDVmYzE4YmE5MTdhYjFlODlhMTdlZjBiNjM2MDk4
NDgyMjQwHhcNMjYwNjEzMTQwMTMwWhcNMjYwNjE0MTQwMTMwWjAzMTEwLwYDVQQD
EyhiY2RlMGFjZjE5NzBmNmQ2MDQyYmI5ZjJiMGMwMGVlYmU0MDkxMWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfBUNcHgwOOkQffP9uE4H09FGroj
FFdfT0xpxcj54JZX/G+HG0uE2/71o43483TOZp9ysB14/0BpF4F0/St1tc7JYtxs
DdtgW+JlE8SJqmJRWM1bSFxHViIzIdKcViUOC4GqwyIp7hEnZt6fMJJ9wjmeyUoH
Qol3LPcFrqECXlpsZEqxmeAxUqkQdAiVt5W2bOvf+U2laXOQRyA1tSgeI1Xl0rD5
i38LSL7YTAxF1SgVJNGvbTZhHcLLQLkrJNkk2AJ4FyblhoW3MAsxd6pxYYJNSvPm
8/jYkhIjKQFd5PLiEgQTTfCmBLLD12/uWY52EUl0pe4WeWSyJUnX4kk2wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzeCs8ZcPbWBCu58rDADuvkCRGuMB8GA1UdIwQY
MBaAFK8n1F/Bi6kXqx6JoX7wtjYJhIIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnlmVVg4R0xxUmVySG9taGZ2QzJOZ21FZ2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80NDE3NTUtYjUyZi00ZmI2LWIzZWYt
N2FjYmM2YzlmOTg1LzEvcnlmVVg4R0xxUmVySG9taGZ2QzJOZ21FZ2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80NDE3NTUtYjUyZi00ZmI2LWIzZWYtN2FjYmM2YzlmOTg1
LzEvcnlmVVg4R0xxUmVySG9taGZ2QzJOZ21FZ2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUDgatvO
zwBHWIfqNhD07NWAdrtbgiGdLg145ZGJisLjFzIFmtDa1XXNjQC8gtM+9IMw8Jau
RTOvQaBWAxYbk6aCqziE3p7kxPGBn/0PWuX0eSYHBotm2sG6GkOtke4YPkhWrIze
neszzViRLsL9UXH0CzNi1RGL3Lzi7xFA+DuQShxUAJBOtKp3ThmlFVchqKkrlmVX
UYRg4AiSMo4yIT4ujVwNyxGPos7RWYflwvYZfvZ0IxutlI+qU/ZWbvlSgPz1T/vU
9JSBQISk1kXc8PRV5u/bQjvz/BeM8G1IeS2VdrAh2R8nwhoZ33AmTjyvhiKVMINk
C8IoYbQEidsaaQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:43:42 2026 by rpki-client