Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File: AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier: UV+X4QRh/is4+syYruBlybz6QKo9Lu8krJVUL0YVDVw=
Subject key identifier: 2B:9E:34:B3:C5:A2:27:B8:6F:B4:06:11:16:1A:84:4D:5A:F5:18:66
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial: 019E3004810F2316142B9132F25829E0A8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number: 09E6
Signing time: Sat 16 May 2026 09:01:01 +0000
Manifest this update: Sat 16 May 2026 09:01:01 +0000
Manifest next update: Sun 17 May 2026 09:01:01 +0000
Files and hashes: 1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: ZV84q8rmxyLMglghRHoOG9GynVyLXDfGBksM6+oSWnE=)
2: JpSPlDAfnmaVaihRumPcTPfmvXc.roa (hash: Y5Z9rAeAn1T7cnOOHo3m55iyERIOyEhwXNrdUR5k5k4=)
3: joOy9zn86SRS3S0JJdQNk7WRD1s.roa (hash: 6Lg/ZII9MO/NUIL4lYaxUeR/rqOY01y6TRhSs+4wA6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:81:0f:23:16:14:2b:91:32:f2:58:29:e0:a8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Validity
Not Before: May 16 09:01:01 2026 GMT
Not After : May 17 09:01:01 2026 GMT
Subject: CN=2b9e34b3c5a227b86fb40611161a844d5af51866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:71:32:ca:1d:c9:27:b5:75:1d:59:bb:fc:
15:f6:78:f1:1c:be:53:3a:e5:8f:c0:5b:34:a8:67:
3a:44:02:6b:65:a1:64:a9:f5:ab:e0:52:96:24:53:
c0:fe:3c:f0:a0:52:d2:03:71:bc:f6:d6:97:ba:ea:
de:c5:81:7a:78:08:de:7d:9c:32:21:91:1c:45:1d:
57:62:45:c4:43:94:bc:16:2a:e1:3e:d4:74:46:01:
c9:1d:a2:b4:98:03:cf:19:74:38:f7:3c:82:c1:44:
85:34:06:8c:8c:47:3e:cb:1d:c1:5d:59:19:18:86:
cf:05:0b:d6:c6:9f:b6:69:3d:29:40:68:4b:d2:32:
e2:21:63:48:e1:20:d4:4a:39:c7:85:1d:2e:cf:4d:
9b:13:6b:c5:2c:c0:ed:04:c1:21:19:89:4d:72:b0:
56:ca:6b:8d:0e:ca:91:26:51:56:57:b8:49:13:9e:
7d:0e:61:ea:bc:4c:08:7d:08:96:b2:c6:57:41:a0:
b1:22:fa:54:f7:ec:a6:d5:98:3e:9d:67:67:7e:61:
10:d2:0b:8a:c3:96:f1:db:3d:6d:b4:7d:ac:c8:c4:
47:0a:65:b9:11:76:40:c2:74:7c:40:61:f1:f3:5b:
3c:2e:49:17:9c:ba:cc:46:80:2a:e3:43:bd:e6:fb:
18:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9E:34:B3:C5:A2:27:B8:6F:B4:06:11:16:1A:84:4D:5A:F5:18:66
X509v3 Authority Key Identifier:
keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:72:b5:3e:a0:b4:ce:26:ab:de:2f:37:6a:4c:30:61:65:0f:
0e:ea:55:c1:9b:c4:bc:12:c1:d4:b6:42:0f:a9:d1:49:4c:73:
e5:ae:da:6f:e9:7a:fe:cb:5c:d9:22:25:c8:de:e5:68:4d:cd:
ff:52:d3:98:85:96:c5:af:4f:6d:bf:c7:b1:ab:ef:e3:b2:e8:
43:98:d3:33:0e:a3:22:82:ca:92:19:75:94:09:2b:2d:fc:72:
a6:10:e2:4b:d7:44:86:8c:80:55:09:b5:c2:40:2b:54:2f:c6:
8e:83:c4:7b:82:98:8a:5a:f0:9a:6a:e9:4d:89:53:14:50:e5:
61:51:df:00:b6:c9:f7:93:e5:66:16:2e:cc:21:20:72:5c:c4:
9e:bb:c6:0a:ea:91:29:f5:53:b8:83:47:1f:ab:e9:ac:d8:aa:
09:73:71:7e:00:24:0c:b4:9d:eb:0b:62:58:36:94:11:0d:8f:
6c:ed:65:96:83:71:18:b1:c7:40:2b:72:3d:63:0b:87:4e:f4:
de:65:8e:66:87:76:c0:e8:24:e7:d2:7a:da:89:11:c9:f1:1c:
4b:fa:42:6e:8b:74:8a:e6:8b:1e:70:ce:04:90:dd:42:4c:99:
04:66:be:9b:e7:74:bf:d3:02:17:d4:20:21:97:d1:da:06:6f:
61:4e:a3:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBIEPIxYUK5Ey8lgp4Kj+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjRkYjFkY2YwYzI0MjllMTIxNTE2YWUyNzkyZmMzMjUz
ZmQzYmEwHhcNMjYwNTE2MDkwMTAxWhcNMjYwNTE3MDkwMTAxWjAzMTEwLwYDVQQD
EygyYjllMzRiM2M1YTIyN2I4NmZiNDA2MTExNjFhODQ0ZDVhZjUxODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT1xMsodySe1dR1Zu/wV9njxHL5T
OuWPwFs0qGc6RAJrZaFkqfWr4FKWJFPA/jzwoFLSA3G89taXuurexYF6eAjefZwy
IZEcRR1XYkXEQ5S8FirhPtR0RgHJHaK0mAPPGXQ49zyCwUSFNAaMjEc+yx3BXVkZ
GIbPBQvWxp+2aT0pQGhL0jLiIWNI4SDUSjnHhR0uz02bE2vFLMDtBMEhGYlNcrBW
ymuNDsqRJlFWV7hJE559DmHqvEwIfQiWssZXQaCxIvpU9+ym1Zg+nWdnfmEQ0guK
w5bx2z1ttH2syMRHCmW5EXZAwnR8QGHx81s8LkkXnLrMRoAq40O95vsYpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCueNLPFoie4b7QGERYahE1a9RhmMB8GA1UdIwQY
MBaAFAMk2x3PDCQp4SFRauJ5L8MlP9O6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85MGY5NDItNjUxMS00MDU0LTk0YmUt
NGQyYzRkYTcyMWQ0LzEvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85MGY5NDItNjUxMS00MDU0LTk0YmUtNGQyYzRkYTcyMWQ0
LzEvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHK1PqC0
ziar3i83akwwYWUPDupVwZvEvBLB1LZCD6nRSUxz5a7ab+l6/stc2SIlyN7laE3N
/1LTmIWWxa9Pbb/Hsavv47LoQ5jTMw6jIoLKkhl1lAkrLfxyphDiS9dEhoyAVQm1
wkArVC/GjoPEe4KYilrwmmrpTYlTFFDlYVHfALbJ95PlZhYuzCEgclzEnrvGCuqR
KfVTuINHH6vprNiqCXNxfgAkDLSd6wtiWDaUEQ2PbO1lloNxGLHHQCtyPWMLh070
3mWOZod2wOgk59J62okRyfEcS/pCbot0iuaLHnDOBJDdQkyZBGa+m+d0v9MCF9Qg
IZfR2gZvYU6jUQ==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:25 2026 by rpki-client