Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: PgNMa9+gg/IUtBOtfXWwl05OKE/Hkh/uhvRoRzWAnW0=
Subject key identifier: 79:BD:E1:D0:73:53:A3:D5:75:77:A7:AA:45:3A:80:62:5F:E5:AB:4A
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 01A06FB9CAF96D3BAA95B10F9BC77A900739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 16AD
Signing time: Sat 05 Sep 2026 04:00:42 +0000
Manifest this update: Sat 05 Sep 2026 04:00:42 +0000
Manifest next update: Sun 06 Sep 2026 04:00:42 +0000
Files and hashes: 1: WrRSKzPOj6BgLow6AweYah_e1dA.roa (hash: zp8UwEZpI6bsmG4yaK4JetrekeKEEBLqIzJ3Rz0Eig8=)
2: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: ubaeIkkXXQhdRWdEvIiZLXnAs9Lk724WTbzBSQ2LESE=)
3: uR1vfe6fR6lmKLx_KpYnu1pkQe8.roa (hash: rrB4HqghjaNhMjUMgJmTsjzw4hoiQcENyKRyhlNILHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:b9:ca:f9:6d:3b:aa:95:b1:0f:9b:c7:7a:90:07:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Sep 5 04:00:42 2026 GMT
Not After : Sep 6 04:00:42 2026 GMT
Subject: CN=79bde1d07353a3d57577a7aa453a80625fe5ab4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:81:19:b4:e0:a5:e6:85:f0:be:32:88:2a:8b:
39:a0:d2:d1:66:d9:33:c6:8d:63:f3:04:d0:b8:67:
33:11:ad:35:c5:b6:07:31:41:27:a5:77:4a:25:52:
3f:9b:38:9c:b1:d7:e9:27:8d:db:75:8b:60:3f:63:
0c:80:91:37:10:b1:1d:c0:25:5e:32:c9:b4:0a:b7:
4a:47:80:62:78:c5:38:22:7f:8c:ba:60:d5:c5:9b:
5b:f6:0a:f0:29:ad:dc:47:1f:30:23:74:d5:da:04:
94:a2:02:4f:8a:d4:be:5c:d3:8b:42:82:ca:88:44:
b0:f9:77:33:08:01:e6:d1:b0:95:0c:44:f0:23:d5:
93:95:c2:7e:f2:e4:a6:9f:9e:fa:b7:83:a1:98:60:
92:cb:78:4d:23:c5:f1:bb:13:e9:23:a4:72:2d:2c:
fc:62:fc:83:44:e1:dc:ac:59:6f:13:9a:04:69:94:
4d:83:7c:f1:4a:dc:3d:c8:a4:61:10:06:24:7e:d5:
11:d2:83:8f:93:36:33:c2:74:aa:21:1f:42:9b:f9:
b5:b7:84:8b:6a:85:59:4e:8d:48:31:50:ef:29:44:
9b:2c:21:bc:8e:93:a3:cb:d3:2b:f7:ac:ed:8d:14:
53:a8:dd:ef:4d:5e:2e:14:f7:81:24:c3:90:ee:d8:
47:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BD:E1:D0:73:53:A3:D5:75:77:A7:AA:45:3A:80:62:5F:E5:AB:4A
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a4:4a:ab:d0:f0:86:fc:a7:9f:83:08:2b:46:02:e9:c8:4d:
c7:97:b2:a5:83:a8:f5:81:30:50:0b:0e:72:36:41:86:cd:41:
56:2b:3b:ad:87:46:fb:83:7f:eb:95:4b:2f:3f:8f:9e:3a:d1:
dd:38:01:fe:e4:9b:61:f7:a7:e1:61:72:fc:3f:4f:9b:4b:1e:
0d:8b:26:b6:53:97:43:bb:63:62:14:c8:b6:02:b0:d6:09:8b:
80:1a:56:13:b0:64:0b:60:9d:ed:fa:5e:d3:3b:2a:00:33:bb:
fa:89:3e:ab:3d:9b:aa:ae:12:e5:c9:66:a7:e6:43:c5:e3:20:
25:bb:18:28:4b:8e:93:14:a3:91:49:b6:30:1e:32:2c:5e:f3:
55:7d:b8:66:45:27:a9:c9:eb:ad:40:7a:df:c1:30:22:24:dd:
bc:f6:8a:49:19:05:29:10:ff:5a:a2:c3:b9:84:ab:42:50:ea:
0d:ee:16:68:0b:a5:6d:45:24:cc:c9:f3:f4:56:4c:59:00:80:
0a:db:76:e6:40:f0:55:da:3b:12:81:47:c2:4f:54:e8:2f:df:
27:c2:6b:ee:78:26:40:57:3b:63:54:de:eb:c8:46:fa:29:c4:
e1:09:c7:4d:09:89:fe:e1:1c:f0:14:f0:c0:f2:aa:e4:65:09:
09:c7:cd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:40:17 2026 by rpki-client