Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: AUKjdL3fxJZQPjvs0fLpxTZpAWpf4BHUfrFh6YHExa8=
Subject key identifier: 6B:45:4D:ED:71:87:46:60:8F:7D:AC:E0:64:E9:1F:18:99:4A:31:A5
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 019DB2B49CE3F4087453EA5D51001DE3F5A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 1542
Signing time: Wed 22 Apr 2026 01:01:14 +0000
Manifest this update: Wed 22 Apr 2026 01:01:14 +0000
Manifest next update: Thu 23 Apr 2026 01:01:14 +0000
Files and hashes: 1: WrRSKzPOj6BgLow6AweYah_e1dA.roa (hash: zp8UwEZpI6bsmG4yaK4JetrekeKEEBLqIzJ3Rz0Eig8=)
2: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: Lal7QHQ5RH8Fs8uQ3FOimAAUjdl7przX8dG+WKGu1xs=)
3: uR1vfe6fR6lmKLx_KpYnu1pkQe8.roa (hash: rrB4HqghjaNhMjUMgJmTsjzw4hoiQcENyKRyhlNILHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:b4:9c:e3:f4:08:74:53:ea:5d:51:00:1d:e3:f5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Apr 22 01:01:14 2026 GMT
Not After : Apr 23 01:01:14 2026 GMT
Subject: CN=6b454ded718746608f7dace064e91f18994a31a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5a:cc:c8:fd:75:a6:a2:f3:96:14:3b:11:34:
65:93:9a:0b:f6:a8:b0:d2:6c:95:60:8b:fe:ca:ba:
bb:45:66:40:bc:0b:f6:20:96:f0:9c:a4:b2:90:a9:
c7:73:e2:4a:d1:61:2d:22:5a:6f:2b:64:5d:56:d4:
ed:b6:57:df:08:a9:f9:b2:49:b0:2e:33:7e:a6:ab:
61:41:bd:3c:f2:9f:5d:29:0f:c0:c3:f5:20:74:5e:
0f:8e:a1:20:b8:fd:59:e6:8d:22:01:9b:32:0e:68:
2b:20:78:27:da:be:63:c1:3d:dd:06:7a:42:84:3e:
1f:71:64:e6:b2:ee:09:38:8d:80:5d:0d:bc:4b:62:
d8:e1:1d:38:9e:85:c9:21:61:63:30:b1:63:4d:8b:
17:ef:01:b8:e4:96:26:32:37:6c:aa:18:b8:0b:0a:
f0:bb:a3:79:ca:19:4e:b5:2b:66:df:3d:c2:44:3e:
ee:f8:96:45:e5:09:fc:04:a1:e7:46:28:fd:3b:0c:
2e:f1:2d:d2:b5:a1:42:53:b0:b6:2f:3d:b6:fd:90:
ae:77:02:1a:61:eb:8c:cd:6e:77:16:d2:89:b3:44:
12:de:4d:03:31:76:df:24:3b:7f:7e:fa:3d:4c:30:
4d:7e:44:65:42:b7:26:6e:66:ca:60:e5:5a:61:eb:
51:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:45:4D:ED:71:87:46:60:8F:7D:AC:E0:64:E9:1F:18:99:4A:31:A5
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5f:7f:e6:da:ac:91:b9:63:1f:f1:9f:c5:df:9b:86:24:f9:
71:e4:fc:06:a8:4c:a7:65:8e:18:df:e1:f9:9c:29:5f:e1:b2:
49:0d:56:fd:92:9c:cc:1d:a7:00:89:59:e7:cf:27:74:65:73:
93:64:40:d1:cf:b2:3b:8e:cd:70:b8:3f:48:7e:47:0d:7f:c5:
65:07:42:84:50:02:d6:f2:29:9f:94:95:b1:3f:71:20:2a:ed:
22:ea:32:b6:de:30:8d:6c:fe:c3:c8:d2:e7:55:55:b6:16:1e:
36:66:6d:38:89:02:e8:c6:88:df:4a:ae:cc:7f:11:55:56:18:
23:57:59:77:cd:4b:3f:8c:2c:d1:3e:03:4c:ba:b7:e4:17:86:
cf:d0:12:8f:e8:08:8a:83:8e:a5:6c:9b:cf:c7:5a:18:cb:e5:
09:d3:02:7c:3b:90:a3:bf:c3:11:5d:da:29:3e:bc:ef:ed:06:
46:4c:ec:aa:82:07:90:7c:16:3c:31:cf:07:55:67:e2:cd:81:
a2:cf:ba:7e:9b:fc:03:18:e1:f8:74:7e:02:82:cb:79:19:a3:
af:ea:41:36:4c:5d:0e:71:2c:f3:54:6a:b0:7e:b5:2a:a8:b0:
7d:8d:96:fa:73:d0:b7:77:40:0a:a5:3c:3c:00:6b:a7:d0:f6:
5e:8b:b0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 10:58:49 2026 by rpki-client