Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: VOvyJuGQ4Lde0tvmQWk4QtRriICM9MiuZhIXTEDrasw=
Subject key identifier: 8A:DA:12:DF:A4:A5:D6:98:7A:DE:4B:5F:7A:AF:E3:D3:1F:48:5D:0C
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 019E9C610232B03D9B6F343561BF1EA81B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 15BB
Signing time: Sat 06 Jun 2026 10:01:03 +0000
Manifest this update: Sat 06 Jun 2026 10:01:03 +0000
Manifest next update: Sun 07 Jun 2026 10:01:03 +0000
Files and hashes: 1: WrRSKzPOj6BgLow6AweYah_e1dA.roa (hash: zp8UwEZpI6bsmG4yaK4JetrekeKEEBLqIzJ3Rz0Eig8=)
2: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: jz7igNtdjSJNuH2Wz8LqpltPfizSMuhz4JW85GigmT4=)
3: uR1vfe6fR6lmKLx_KpYnu1pkQe8.roa (hash: rrB4HqghjaNhMjUMgJmTsjzw4hoiQcENyKRyhlNILHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:61:02:32:b0:3d:9b:6f:34:35:61:bf:1e:a8:1b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Jun 6 10:01:03 2026 GMT
Not After : Jun 7 10:01:03 2026 GMT
Subject: CN=8ada12dfa4a5d6987ade4b5f7aafe3d31f485d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:da:27:a2:a1:ff:b0:3d:a0:0d:64:6b:d1:46:
a3:9b:28:60:cb:16:18:b4:86:1a:a1:c1:1c:5b:76:
f1:77:24:4d:ed:cf:3f:3c:31:59:e6:c3:77:d0:2a:
99:f4:64:8d:d1:cf:3e:09:f8:8e:fe:e1:5c:f0:f5:
fd:18:14:2e:9f:83:c2:5f:95:57:31:bf:95:d9:cc:
68:0c:b8:5d:2e:ec:54:22:82:ee:4b:af:67:84:14:
7c:d0:d2:98:22:13:a7:9b:92:14:50:65:a6:44:82:
cc:17:fb:d2:14:b6:26:b8:80:81:40:00:96:3f:80:
eb:ac:84:a6:af:7d:13:0e:ce:d1:4e:9c:79:22:71:
68:5b:47:b0:c9:f2:51:84:16:a9:d5:d4:a9:ea:89:
1b:e3:30:be:0d:8b:6b:6b:0d:5c:66:c8:61:9a:fc:
22:c2:07:12:f0:65:3f:08:08:9a:19:50:c9:50:40:
fd:ed:9f:f2:54:6c:ef:c9:4c:06:a2:d7:db:45:0e:
d3:ed:46:b7:10:16:3a:2c:a7:8e:b6:2f:e5:2c:70:
61:88:d7:c9:dd:cb:33:ed:99:f6:65:ce:97:9a:5f:
44:7d:6b:7a:6e:46:28:12:c0:5f:7d:f2:4c:40:7b:
fd:7a:c3:18:10:7d:36:2c:a8:bd:3d:6f:49:bc:d0:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DA:12:DF:A4:A5:D6:98:7A:DE:4B:5F:7A:AF:E3:D3:1F:48:5D:0C
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:41:9a:a2:a7:71:42:8a:76:30:77:c2:59:be:03:0a:3c:6c:
9a:1d:81:65:8a:2c:80:83:63:96:bc:fd:a0:09:ae:43:00:39:
7a:4a:c3:32:2b:83:85:57:9f:d0:cf:7f:b7:51:df:ad:5d:4a:
20:6a:47:0a:6e:27:e3:08:fd:4e:b8:5a:8e:51:cc:fe:18:9d:
3f:cb:aa:87:16:dd:de:b2:46:58:4f:75:26:9b:e4:7f:fb:e9:
56:25:57:b9:18:f9:56:17:24:6c:c2:1d:6d:a8:2b:92:fa:9d:
9d:72:26:05:d6:60:0b:32:cc:8a:2f:59:bb:c6:24:42:69:63:
76:ca:6b:f3:57:84:20:c5:47:55:ac:35:3e:bf:a6:9e:01:a9:
6d:7c:54:aa:51:7c:3b:8f:e8:a6:11:c5:0e:da:22:9d:cc:af:
dc:d6:27:ba:9d:84:b7:d7:2a:ef:90:7f:2f:0e:a7:42:13:05:
37:0d:db:44:8a:7d:3a:6b:93:45:03:59:00:95:f8:03:63:3e:
4f:1f:56:ac:e9:5e:65:de:a8:02:dc:58:46:93:48:de:e9:24:
51:8f:8a:77:6d:39:c3:8a:d5:86:6d:3e:8e:2e:8d:e5:fa:b6:
6e:3a:b6:82:a3:52:c5:88:39:93:de:c3:b8:cc:73:e2:85:b1:
3f:54:3e:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6cYQIysD2bbzQ1Yb8eqBt4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMjJhZDRjZjY0N2E0OGI2MzFmZjg0ZjIyN2VhMDI1MjEz
MDU1MmQwHhcNMjYwNjA2MTAwMTAzWhcNMjYwNjA3MTAwMTAzWjAzMTEwLwYDVQQD
Eyg4YWRhMTJkZmE0YTVkNjk4N2FkZTRiNWY3YWFmZTNkMzFmNDg1ZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6donoqH/sD2gDWRr0UajmyhgyxYY
tIYaocEcW3bxdyRN7c8/PDFZ5sN30CqZ9GSN0c8+CfiO/uFc8PX9GBQun4PCX5VX
Mb+V2cxoDLhdLuxUIoLuS69nhBR80NKYIhOnm5IUUGWmRILMF/vSFLYmuICBQACW
P4DrrISmr30TDs7RTpx5InFoW0ewyfJRhBap1dSp6okb4zC+DYtraw1cZshhmvwi
wgcS8GU/CAiaGVDJUED97Z/yVGzvyUwGotfbRQ7T7Ua3EBY6LKeOti/lLHBhiNfJ
3csz7Zn2Zc6Xml9EfWt6bkYoEsBfffJMQHv9esMYEH02LKi9PW9JvNBkIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIraEt+kpdaYet5LX3qv49MfSF0MMB8GA1UdIwQY
MBaAFGsirUz2R6SLYx/4TyJ+oCUhMFUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2It
NjlhNDRmMDQ4ZGI4LzEvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2ItNjlhNDRmMDQ4ZGI4
LzEvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0Gaoqdx
Qop2MHfCWb4DCjxsmh2BZYosgINjlrz9oAmuQwA5ekrDMiuDhVef0M9/t1HfrV1K
IGpHCm4n4wj9TrhajlHM/hidP8uqhxbd3rJGWE91Jpvkf/vpViVXuRj5VhckbMId
bagrkvqdnXImBdZgCzLMii9Zu8YkQmljdspr81eEIMVHVaw1Pr+mngGpbXxUqlF8
O4/ophHFDtoincyv3NYnup2Et9cq75B/Lw6nQhMFNw3bRIp9OmuTRQNZAJX4A2M+
Tx9WrOleZd6oAtxYRpNI3ukkUY+Kd205w4rVhm0+ji6N5fq2bjq2gqNSxYg5k97D
uMxz4oWxP1Q+GQ==
-----END CERTIFICATE-----
Generated at Sat Jun 6 17:08:35 2026 by rpki-client