Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File: AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier: 9TokKpJ9wU/c88Ks6QSVBTEsBMxHGgeIb2K0PU6X0aI=
Subject key identifier: 19:BA:CF:B0:6B:E4:78:DE:F2:46:7C:C5:9C:8A:27:B7:8F:0F:66:90
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial: 019D38D31738E4B2D77A23C7FF746846AB04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number: 0966
Signing time: Sun 29 Mar 2026 09:00:51 +0000
Manifest this update: Sun 29 Mar 2026 09:00:51 +0000
Manifest next update: Mon 30 Mar 2026 09:00:51 +0000
Files and hashes: 1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: +ppYL6Lb2qn69H5m8H/c7wtVcN87IyIilOj2MqXOUDw=)
2: JpSPlDAfnmaVaihRumPcTPfmvXc.roa (hash: Y5Z9rAeAn1T7cnOOHo3m55iyERIOyEhwXNrdUR5k5k4=)
3: joOy9zn86SRS3S0JJdQNk7WRD1s.roa (hash: 6Lg/ZII9MO/NUIL4lYaxUeR/rqOY01y6TRhSs+4wA6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:17:38:e4:b2:d7:7a:23:c7:ff:74:68:46:ab:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Validity
Not Before: Mar 29 09:00:51 2026 GMT
Not After : Mar 30 09:00:51 2026 GMT
Subject: CN=19bacfb06be478def2467cc59c8a27b78f0f6690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5d:f9:e9:c7:87:cd:86:4b:9a:c9:d0:6f:85:
c2:18:9a:e1:e4:18:08:0b:07:dc:22:65:70:46:92:
b9:be:47:80:6c:19:11:58:47:45:71:8c:f7:12:d9:
8f:a5:5d:d3:a7:fb:1a:14:f1:22:a6:87:37:69:18:
e5:3e:f7:fc:7d:22:bf:ac:ba:59:24:15:84:ba:c0:
93:a5:bc:f7:f1:e7:fc:d6:8e:85:9e:58:7d:3a:dd:
67:b7:a6:86:1f:62:ff:74:75:7a:fa:b2:e2:32:3f:
e3:f5:36:61:8f:db:2f:be:ae:f7:35:fa:12:32:14:
d8:48:64:32:88:da:fc:53:b6:a9:90:89:a3:15:97:
b9:a9:9e:b4:e5:19:95:03:60:3d:92:c2:10:4c:8a:
c7:aa:0d:22:dd:20:c9:de:36:d6:b4:c7:c5:5c:16:
2e:17:1f:31:fe:ab:00:b2:db:d4:3f:18:e4:f6:4c:
1b:91:1b:14:72:51:ba:c8:20:e4:68:5d:dc:28:e8:
1b:7d:3b:fa:e7:b2:af:c8:90:6c:72:73:c5:68:6b:
e7:79:09:85:9f:b1:21:35:0f:0b:f5:d0:ea:98:75:
12:f5:96:4e:a8:3d:0b:d9:c1:a3:85:b6:de:99:97:
67:53:24:66:2e:d3:d8:9d:06:03:51:29:a1:4c:cb:
5a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BA:CF:B0:6B:E4:78:DE:F2:46:7C:C5:9C:8A:27:B7:8F:0F:66:90
X509v3 Authority Key Identifier:
keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2f:5e:58:42:f8:bc:d5:d7:ec:ca:f2:ad:a3:73:7b:d3:ca:
f5:af:a7:1f:09:14:9a:ac:eb:46:5a:11:7c:ad:31:fe:4f:17:
9c:d4:3f:9f:28:06:3f:8d:b9:43:96:a3:02:ab:da:31:a5:ac:
47:fa:51:b7:21:12:f3:a4:71:06:a1:11:2d:e0:a7:3e:2d:c5:
3c:b0:d7:47:f0:f2:6c:22:99:c0:e0:a0:03:1d:c8:ea:18:ab:
1a:38:db:da:ea:36:cb:f7:80:b6:e2:17:b2:ae:98:0d:04:87:
ff:b0:5b:7b:fb:19:ad:1c:a3:a2:38:04:a3:a8:61:57:3b:b7:
6c:69:db:cb:58:51:bf:32:dc:4e:c0:a6:b0:19:c8:18:17:00:
0c:5e:f9:53:6a:c5:e7:85:29:2c:a2:77:04:c7:20:a4:5f:2c:
83:5e:81:d6:69:f7:af:2e:00:1b:8a:9a:40:e1:14:38:dc:b1:
76:84:bd:88:52:40:1b:a4:91:e5:ba:7a:dd:35:eb:91:f4:9a:
8c:a5:83:02:ae:30:e0:78:b7:48:fa:a7:59:43:7c:e5:5e:63:
86:ed:06:51:af:0a:ee:63:a6:74:42:32:6a:f7:a4:90:b8:c3:
6c:13:e8:1c:53:09:f6:a1:bd:00:3b:6b:40:83:d0:ef:c0:89:
ea:88:11:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:45 2026 by rpki-client