Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File: RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier: 5xLwiTnLyg/+NjXc/YcQCbmUHtlmruNqruyOJr5C1TI=
Subject key identifier: 43:ED:3D:84:83:27:C3:EF:52:78:7B:E3:40:6B:12:A8:87:64:D5:29
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019CABA20366C416A5AED3C40F4E08A57A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number: 1872
Signing time: Sun 01 Mar 2026 23:00:47 +0000
Manifest this update: Sun 01 Mar 2026 23:00:47 +0000
Manifest next update: Mon 02 Mar 2026 23:00:47 +0000
Files and hashes: 1: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
2: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: VBxD8Dgb2BXvT8TgW3vXk16CrOa6sUeDGnPoHNhpsJ8=)
3: UVZSH-qjnUODxApJvnuBt-EAJoY.roa (hash: qEeNRBoEnR3OhUU2I8brudlBLMuFLZh8jyPrCOjJSRQ=)
4: eTMmIm9zv_0o9KEz3EHntctKzoc.roa (hash: tXT+SzZWIzmmd4kK5abXulIyd/8wtzj4Rs+S9xwYZIg=)
5: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
6: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
7: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
8: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:03:66:c4:16:a5:ae:d3:c4:0f:4e:08:a5:7a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Mar 1 23:00:47 2026 GMT
Not After : Mar 2 23:00:47 2026 GMT
Subject: CN=43ed3d848327c3ef52787be3406b12a88764d529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:2a:cd:2c:c5:62:de:f3:6e:4f:58:4f:d9:
a9:c2:75:da:9f:8e:f8:8e:13:be:78:d0:dd:ae:91:
2e:ed:f1:85:bc:f0:13:f0:fa:46:59:86:c5:02:17:
00:b8:89:21:cb:bb:99:6c:5c:b8:0b:88:69:55:63:
c8:b6:43:8f:ba:83:5b:f3:06:c5:50:53:1c:b1:e1:
59:08:79:9f:c8:0e:d7:8a:a1:cc:8e:ae:95:c4:70:
87:ec:e0:5e:f0:24:0c:0f:d6:41:b9:e0:92:1b:fa:
4c:5b:48:04:65:90:42:cc:79:ac:49:ea:a9:ff:f5:
99:64:c3:8b:d6:32:05:6c:7d:9c:0c:cd:62:59:87:
80:52:9d:39:61:8e:9b:23:42:2b:74:51:56:97:cd:
44:4e:91:60:be:aa:6a:12:78:5f:73:8f:ad:98:27:
0c:b0:3c:06:cd:a8:1b:35:4c:72:fc:3e:55:24:3d:
b8:56:25:74:93:52:91:92:ab:5d:80:da:8b:28:13:
e4:86:0e:85:60:eb:ec:d8:ae:f3:65:8f:66:e8:17:
20:f5:4c:01:c3:79:d2:87:f6:b1:0f:9c:95:95:cc:
35:5e:0a:23:af:2b:c7:07:62:c2:70:42:fe:35:eb:
14:ae:ae:8e:f9:33:5e:05:c9:36:4b:ec:a4:c7:5a:
90:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:ED:3D:84:83:27:C3:EF:52:78:7B:E3:40:6B:12:A8:87:64:D5:29
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:01:10:a2:b2:a8:d9:c6:3d:cd:cb:bb:f2:89:d4:23:2e:a4:
74:5e:b5:38:18:ff:fa:24:25:76:56:65:18:68:10:6a:df:f8:
c0:a0:91:26:51:e6:db:2e:6b:3b:0c:68:30:c3:2a:df:4a:00:
71:47:51:b6:92:07:26:e3:d5:4d:b0:86:4b:2b:a6:d7:ba:be:
3a:f2:84:4b:97:16:21:bd:f2:3b:35:e4:c4:82:9d:08:45:f7:
e1:20:54:a7:fc:9b:85:02:c7:96:10:89:80:3d:70:bd:17:ee:
ea:e7:74:41:30:1e:b0:28:03:e4:d0:da:00:84:64:37:bc:fc:
33:7c:04:52:95:87:57:c1:a3:07:ac:56:64:d1:fa:73:30:2c:
14:63:1c:f2:dd:71:ed:85:af:60:c9:30:69:e2:0b:c1:ad:ac:
b8:43:85:b0:97:c1:93:82:14:aa:57:c5:27:5e:0e:ed:31:86:
dc:21:df:82:c5:95:c7:cb:c0:b7:4e:90:cf:c8:b0:09:31:50:
a7:da:3d:19:ca:f6:27:82:b5:77:75:d5:b9:f1:9c:0e:03:c0:
d6:80:43:6e:db:44:4c:06:7f:ff:c3:77:07:f1:b0:49:2f:91:
e4:73:96:0e:08:cc:7d:56:b2:2e:e5:62:9b:d2:4c:de:1f:4a:
88:64:c2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:25 2026 by rpki-client