Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File: AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier: PxWu02TIUGwJuB6ZxW7aXI/OZayRrsUY/PCzaFVQVZ0=
Subject key identifier: C9:E9:C4:A8:19:8F:F6:EC:D2:C2:B6:DA:D6:13:45:54:B7:7E:61:EC
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial: 019F17C2D9702D523EFBA6BDB3CB37ED4253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number: 0A5E
Signing time: Tue 30 Jun 2026 09:01:13 +0000
Manifest this update: Tue 30 Jun 2026 09:01:13 +0000
Manifest next update: Wed 01 Jul 2026 09:01:13 +0000
Files and hashes: 1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: bCgCtEzdZ1Lt/g3y3ETWXyLPLIPwO/d3wfSCz3YgFyY=)
2: JpSPlDAfnmaVaihRumPcTPfmvXc.roa (hash: Y5Z9rAeAn1T7cnOOHo3m55iyERIOyEhwXNrdUR5k5k4=)
3: joOy9zn86SRS3S0JJdQNk7WRD1s.roa (hash: 6Lg/ZII9MO/NUIL4lYaxUeR/rqOY01y6TRhSs+4wA6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:d9:70:2d:52:3e:fb:a6:bd:b3:cb:37:ed:42:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Validity
Not Before: Jun 30 09:01:13 2026 GMT
Not After : Jul 1 09:01:13 2026 GMT
Subject: CN=c9e9c4a8198ff6ecd2c2b6dad6134554b77e61ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dd:03:e5:77:f9:5a:bc:a0:ec:2b:37:32:84:
2b:0d:9a:43:b0:37:dc:d1:30:68:6b:a7:65:e5:06:
01:9c:d1:ba:fb:73:9e:33:02:18:5e:a9:b7:ba:f3:
e4:39:d6:27:e9:42:cb:28:1c:c3:f4:49:b4:a5:63:
6a:37:21:e8:6a:f7:ef:e6:83:53:6f:13:01:fc:81:
25:4a:9b:76:4e:89:7f:bf:d7:55:51:35:c1:81:08:
e3:81:95:59:39:9d:dd:cc:59:56:81:db:a5:d7:83:
46:d8:72:44:4a:db:7e:9a:20:25:03:20:14:fa:db:
4d:03:9f:8a:5f:cf:51:68:df:ae:42:45:a0:d5:c9:
64:cc:15:87:fe:1e:21:9e:34:a0:a1:44:a5:5d:83:
e7:37:ea:17:07:b7:2d:1a:18:a2:31:0d:63:56:3b:
b7:6e:55:89:2c:54:c3:30:33:15:91:9d:e9:32:4b:
52:25:8e:c7:d4:5b:e6:f6:87:db:81:0e:2c:b6:f4:
66:06:63:81:fd:f5:54:fb:b0:67:e5:f2:a8:a4:82:
2a:2a:af:85:4b:c0:04:ec:d2:dd:58:2c:fc:95:7d:
5e:20:46:79:b7:b1:e0:c9:42:bd:7f:c1:0d:e4:39:
90:3e:c7:2e:87:0c:6a:18:93:8a:2e:42:8d:f2:cb:
87:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E9:C4:A8:19:8F:F6:EC:D2:C2:B6:DA:D6:13:45:54:B7:7E:61:EC
X509v3 Authority Key Identifier:
keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:99:d3:be:d9:f4:a9:62:c7:5c:72:82:92:3b:fd:54:25:70:
96:9d:47:5d:f0:4d:1e:42:23:bc:f8:a4:a4:32:a9:30:f0:fa:
9c:b0:d0:bc:0f:9b:08:9b:37:7e:af:7c:4d:c3:ea:e7:16:b9:
fa:d6:67:b8:a5:af:7a:13:41:31:e8:ac:fa:25:77:68:b3:39:
3d:d1:17:5d:3c:98:0a:59:08:de:a1:ef:39:00:b9:20:b7:f3:
73:80:e1:fc:c1:dd:40:81:2f:72:be:53:4c:d9:5a:75:ef:34:
3a:a1:cc:3f:07:1a:0d:b3:6b:2f:19:bc:5e:01:9e:c1:b2:04:
7d:da:4c:cd:8e:79:7e:9f:a5:d8:a7:43:e4:33:4a:f6:5b:fe:
2b:c3:42:18:51:e9:41:83:da:8e:ea:8a:e9:2a:01:d4:17:3b:
c5:07:36:72:eb:da:01:7c:c0:9f:16:7c:98:92:e8:94:1c:72:
99:8f:78:bf:5c:bb:f7:28:35:16:1f:fc:e8:07:37:f6:13:2b:
0b:ae:db:00:a1:25:6e:33:81:85:3e:d1:48:9e:19:2b:5e:43:
21:63:f2:b6:93:57:6c:80:a4:4e:68:d5:64:b1:d9:05:37:78:
da:cf:dd:55:4f:33:11:c1:4f:19:b6:73:a4:d1:bf:36:8f:8a:
27:02:5a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:43 2026 by rpki-client