
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
File: ryto8Mg63Zo6O4arJPuRCpYCYsY.mft (raw, json)
Hash identifier: WSyq156ozC3TDgrEW0bLzxuuMsHw9gDX8x2mR4/eOsU=
Subject key identifier: 50:22:57:53:8E:FB:7D:23:1C:CA:D5:0F:1B:DA:9C:50:49:71:FD:9C
Authority key identifier: AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
Certificate issuer: /CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Certificate serial: 01A13ECB6D266868B24C7A916D528A7F78C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
Manifest number: 1617
Signing time: Thu 15 Oct 2026 09:01:21 +0000
Manifest this update: Thu 15 Oct 2026 09:01:21 +0000
Manifest next update: Fri 16 Oct 2026 09:01:21 +0000
Files and hashes: 1: h-PWIeDfQLuLQns6H59eVXIlTEw.roa (hash: a2RfFAyHbTGC+LHQhF0hKAuxj7Am0hNvyjuE9TNtMKs=)
2: ryto8Mg63Zo6O4arJPuRCpYCYsY.crl (hash: +hyUZzar9eLLMRq5riOt4ddaRJB0AloCFr3ti5l7f1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:6d:26:68:68:b2:4c:7a:91:6d:52:8a:7f:78:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Validity
Not Before: Oct 15 09:01:21 2026 GMT
Not After : Oct 16 09:01:21 2026 GMT
Subject: CN=502257538efb7d231ccad50f1bda9c504971fd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:f3:df:13:aa:25:e9:51:1c:9b:c1:e5:3e:
1b:00:07:7e:a9:af:71:e9:0f:d4:9d:0f:67:08:a2:
18:19:42:c3:79:11:05:29:b1:b1:b0:91:22:b6:0d:
b1:f0:69:ea:81:42:8d:0b:10:6d:2e:0b:7b:25:7f:
cc:56:25:d1:26:b6:b5:a2:7f:58:33:da:18:26:c5:
fa:40:31:e6:a9:ac:e7:93:2c:64:91:a6:67:cd:c9:
bb:f4:de:59:6c:59:45:4d:dd:88:51:29:c5:7c:ce:
a9:b5:bd:5b:5a:bf:d2:f7:c2:5a:ee:57:74:bc:a4:
7c:dd:ba:13:3c:c4:e1:ac:d5:bf:8e:68:38:55:f0:
5a:96:38:df:07:09:09:46:dd:ba:ee:ea:25:65:c1:
0d:79:22:32:85:31:22:ee:c6:06:8c:2c:19:e6:a1:
40:7b:f1:e8:fe:1f:fd:77:91:af:90:51:d1:16:77:
ec:89:11:f0:fb:a4:df:69:a3:e1:df:bd:8f:f2:d0:
a3:b8:d0:a0:41:8f:42:fd:42:e9:4c:ba:a9:73:0b:
3d:9f:f0:44:1c:41:04:b3:35:38:48:62:41:41:04:
16:cd:dd:54:c2:aa:89:ce:6d:d3:ec:3d:80:f3:6e:
86:0d:07:10:05:b8:67:52:96:b7:4c:7e:07:80:46:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:22:57:53:8E:FB:7D:23:1C:CA:D5:0F:1B:DA:9C:50:49:71:FD:9C
X509v3 Authority Key Identifier:
keyid:AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7f:7a:5c:6e:3e:4e:d6:19:1b:e0:07:9f:7a:4e:48:36:55:
99:bb:bc:1e:fc:16:6a:08:7d:ff:3f:ad:55:69:36:29:d6:70:
6e:64:c9:8f:08:94:61:df:2b:d5:e7:cd:fe:b1:1a:d8:4c:15:
57:a4:c9:61:09:d7:fe:b4:56:ff:7f:1e:6d:ca:d3:eb:92:d8:
f6:a0:db:fa:e7:f0:3f:76:d9:58:dc:9b:3f:42:86:de:13:7f:
fc:ff:3f:e7:1b:4f:4f:ff:43:f7:32:8a:f0:f4:8c:2d:02:bb:
6e:80:2b:da:39:7e:4e:d7:bc:88:47:42:6c:eb:a6:84:b3:94:
61:db:a5:c0:2c:fa:c3:11:8b:ec:c5:26:07:70:34:0d:bc:b8:
de:93:bb:64:e0:07:74:9e:4f:03:77:40:9d:b9:31:79:56:72:
1a:3c:f1:ed:f7:e4:2c:df:28:45:47:17:a2:fe:31:e0:e4:4c:
ab:9b:1d:2f:fa:15:d3:09:61:fe:50:4a:c2:2a:13:76:08:7f:
82:fa:95:63:15:f3:0b:7d:8f:9d:1d:f3:28:df:b7:3c:6f:70:
6f:87:dd:ac:21:0b:75:70:c3:94:ab:3c:fe:08:67:fa:38:c8:
7b:68:53:24:8a:dc:5e:06:50:f5:22:47:be:a5:ec:a3:ff:57:
6f:25:59:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:09:52 2026 by rpki-client