Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: w+A19gk7R8RWTBbAVtgDwqdAgRnY5bmcjT9zAF0JBzg=
Subject key identifier: ED:64:C2:0A:BA:27:BC:CE:59:C3:60:0A:67:97:FB:66:E0:16:80:C9
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 01A16AC833BA069EBFAAFE908023020234FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 172F
Signing time: Fri 23 Oct 2026 22:01:07 +0000
Manifest this update: Fri 23 Oct 2026 22:01:07 +0000
Manifest next update: Sat 24 Oct 2026 22:01:07 +0000
Files and hashes: 1: WrRSKzPOj6BgLow6AweYah_e1dA.roa (hash: zp8UwEZpI6bsmG4yaK4JetrekeKEEBLqIzJ3Rz0Eig8=)
2: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: v265soqqbS3cOfI80hsW6xwwuhQQzXDr9TQYFr0o7L0=)
3: uR1vfe6fR6lmKLx_KpYnu1pkQe8.roa (hash: rrB4HqghjaNhMjUMgJmTsjzw4hoiQcENyKRyhlNILHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:c8:33:ba:06:9e:bf:aa:fe:90:80:23:02:02:34:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Oct 23 22:01:07 2026 GMT
Not After : Oct 24 22:01:07 2026 GMT
Subject: CN=ed64c20aba27bcce59c3600a6797fb66e01680c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:6d:85:55:9f:6a:40:ee:61:6c:5b:c5:ef:
22:0d:a6:96:06:82:93:30:ed:7d:08:6e:58:ae:89:
a6:77:42:f5:ef:98:b0:7c:c8:c3:2e:2f:3f:f8:a2:
28:4d:59:f7:7a:68:3a:fb:49:77:9c:2c:04:8d:ab:
c4:39:57:7b:44:40:a7:e4:0e:77:e4:c9:08:3b:43:
a7:da:8f:5a:88:f5:c9:31:f7:6f:f4:08:7b:1c:27:
5c:bd:86:ed:d4:26:85:ab:f7:53:0a:d8:2c:ff:f2:
bd:5d:ec:77:ed:07:69:8f:9f:27:ba:39:0f:35:45:
96:d5:85:7e:08:85:32:e2:af:c1:59:65:9e:8c:cc:
a4:c9:0d:3b:eb:40:bd:69:52:7e:98:0a:66:7c:6f:
ed:d2:fc:14:13:53:6f:84:99:71:0a:2e:fc:c6:cd:
11:6c:6d:bb:87:22:08:0c:1f:01:ee:d2:0b:61:d8:
72:24:60:19:ea:47:5c:43:9d:60:58:0b:96:55:77:
36:4a:f0:2d:06:df:95:f7:7e:33:35:82:6a:4e:5d:
fb:07:94:94:80:9f:f1:b3:1e:29:ad:3d:3c:f3:0f:
45:3c:0a:6a:7a:d7:4a:1d:e6:48:78:68:c9:b7:d8:
22:8c:7c:d6:c4:ce:f2:82:f2:eb:11:d8:e3:e7:93:
9c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:64:C2:0A:BA:27:BC:CE:59:C3:60:0A:67:97:FB:66:E0:16:80:C9
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:93:5c:86:c6:f4:a8:8c:b3:93:52:12:20:27:38:b5:81:fa:
99:90:2f:92:6e:b1:af:40:52:5e:fd:0f:64:f9:ce:f6:de:5d:
72:bd:c2:a1:e9:15:c9:e0:d0:2e:3f:b1:aa:5c:06:5c:7a:1c:
0c:94:cd:6d:99:17:e5:07:24:e7:f8:a9:b3:5e:6f:62:28:8f:
48:ce:76:34:ae:aa:e8:94:d3:41:a6:97:4e:75:a3:72:aa:1c:
70:ca:df:c2:40:68:ce:44:83:be:b7:e6:4e:c9:59:20:1a:05:
69:5c:2b:de:6b:8c:a7:4a:c9:7c:0d:71:a2:de:6e:f4:f9:82:
d5:44:27:b7:e2:1a:f3:1c:0c:0a:17:e0:63:af:00:b5:dc:63:
66:d5:6c:f5:28:a3:17:52:b1:b2:78:da:3a:1c:1d:a6:84:89:
fa:15:92:2d:bb:6d:98:87:82:84:11:72:f1:c1:0b:bb:c0:88:
77:76:12:9e:ef:2a:d1:26:42:01:4a:20:1e:36:cd:d8:53:b5:
3e:dd:3a:72:43:30:48:bf:8a:e9:2a:43:e8:59:42:5f:d6:f6:
2d:08:90:96:3f:4d:ec:a7:27:a4:eb:dc:a6:47:a3:d1:3f:57:
1a:e2:6f:c1:30:47:0b:a2:d5:e8:52:f5:0b:89:5b:92:49:62:
6a:2f:68:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:09:40 2026 by rpki-client