Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File: AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier: RoPL48cNJ7LCcTsHlcoc5Q7Q/IsWw6nO7EwHzFn0hsQ=
Subject key identifier: 7F:0B:6C:69:65:BB:6D:2D:BC:BF:FA:E7:45:10:D7:7E:E6:0B:60:1C
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial: 01A0016F2BD8862CAE3B3CCD840FB0C23305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number: 0AD7
Signing time: Fri 14 Aug 2026 18:00:57 +0000
Manifest this update: Fri 14 Aug 2026 18:00:57 +0000
Manifest next update: Sat 15 Aug 2026 18:00:57 +0000
Files and hashes: 1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: qiKM8duKbLIAtNx0vWIyiuCnANntnF3Hf0IhFSnd5Ls=)
2: JpSPlDAfnmaVaihRumPcTPfmvXc.roa (hash: Y5Z9rAeAn1T7cnOOHo3m55iyERIOyEhwXNrdUR5k5k4=)
3: joOy9zn86SRS3S0JJdQNk7WRD1s.roa (hash: 6Lg/ZII9MO/NUIL4lYaxUeR/rqOY01y6TRhSs+4wA6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:2b:d8:86:2c:ae:3b:3c:cd:84:0f:b0:c2:33:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Validity
Not Before: Aug 14 18:00:57 2026 GMT
Not After : Aug 15 18:00:57 2026 GMT
Subject: CN=7f0b6c6965bb6d2dbcbffae74510d77ee60b601c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:63:9a:a7:45:16:99:b3:59:29:ba:0f:51:
e7:6a:ea:87:48:6f:82:32:08:15:b0:56:ff:c6:ba:
80:24:5f:ba:07:43:da:ef:33:3c:ad:2a:83:9f:3f:
a7:5e:a4:34:99:a5:76:5b:ce:3a:f0:96:ba:93:b8:
cc:2e:9e:29:e7:75:e7:96:e7:b3:2a:d6:a1:d1:f0:
ff:47:48:e7:11:d7:9b:22:df:25:5b:71:af:df:b4:
4e:94:b5:4f:15:a1:5f:33:b5:66:d4:11:c1:65:2b:
fa:b6:7b:d0:ca:2e:d9:44:2a:44:2d:45:fd:9e:be:
bf:87:41:22:ac:d2:fe:d3:79:96:6e:40:10:ec:99:
c7:e0:43:8f:ed:82:2c:59:02:e5:e9:c1:bc:4a:2b:
be:c2:ec:a4:83:ca:f1:ec:f3:7d:56:aa:be:1f:e7:
a3:5c:8c:3d:f9:cb:f6:6c:28:45:7b:80:db:88:aa:
35:7f:ef:35:e3:20:64:5d:cf:21:2c:62:a1:55:22:
a6:55:a9:47:e3:8c:08:a2:68:91:dc:e6:9d:cc:36:
d9:7e:6f:8a:b8:1b:44:06:d2:08:2b:04:3f:75:76:
f4:e4:77:f8:26:95:af:86:7e:c8:6e:09:20:62:c3:
88:91:e7:3d:74:08:54:82:95:6a:d3:80:f8:84:f3:
7d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0B:6C:69:65:BB:6D:2D:BC:BF:FA:E7:45:10:D7:7E:E6:0B:60:1C
X509v3 Authority Key Identifier:
keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:31:23:cf:47:38:eb:0c:de:c3:98:f5:04:7d:03:4c:07:c7:
5d:a3:d5:13:3f:e5:70:45:c8:d1:ad:48:0a:9a:71:7a:a8:07:
51:59:b3:0a:b7:71:f2:d1:66:4c:9c:ee:c4:25:c0:5b:e8:19:
fb:cb:6f:00:9a:51:d7:34:28:a6:8b:89:7a:a6:2c:37:e9:6b:
a0:82:93:59:62:c1:47:86:9e:f9:2a:ba:06:51:4b:45:9f:cd:
c8:d2:bc:f5:75:85:81:ab:22:9c:36:ab:d0:00:08:10:57:c4:
ec:47:67:86:62:d1:69:35:06:b2:69:77:91:9c:c0:60:e7:3a:
09:2b:7a:ec:04:ff:71:ce:c1:80:5d:92:36:03:ac:94:e1:bd:
a8:cf:35:ce:3e:26:70:7b:8d:98:86:09:5c:fb:3c:46:7d:09:
3d:48:b8:eb:64:d0:7c:6f:d5:94:c3:bd:ad:76:23:2e:36:dd:
1c:1b:37:58:e0:a1:48:63:b2:e9:5b:34:25:7e:9d:ad:c0:d5:
ad:f9:6e:00:b9:f2:f8:2c:1f:f6:ef:18:76:cb:65:5d:a8:0c:
26:bf:e6:17:b8:18:bd:e5:8b:f1:6a:14:ce:40:39:0c:3f:63:
e7:4d:a6:a7:7f:a6:f6:fc:91:b6:f9:08:57:09:e1:08:da:02:
71:9e:d3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:06 2026 by rpki-client