Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
File: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft (raw, json)
Hash identifier: f1N8NbSNTrlgxVZ/XbweGyDI42MpfEi0fiOlqe0HM0s=
Subject key identifier: 5D:09:16:99:A0:FF:76:B3:2C:8C:28:6D:90:A5:50:2A:78:B2:13:FD
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Certificate issuer: /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial: 019D3977C234FDC60D0A561BB956C9CADEC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 12:00:42 +0000
Manifest this update: Sun 29 Mar 2026 12:00:42 +0000
Manifest next update: Mon 30 Mar 2026 12:00:42 +0000
Files and hashes: 1: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl (hash: 8T5FlwOvNAEZEtj6UwPp8JK1gS+z46RdVWw2bvzhV30=)
2: nu_nfWvngwD8Y74CXi065T5OVuQ.roa (hash: d92WDDshr8YLz0+Twkg4dzAWaxn6uiHcpqEqs+83HsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:c2:34:fd:c6:0d:0a:56:1b:b9:56:c9:ca:de:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Validity
Not Before: Mar 29 12:00:42 2026 GMT
Not After : Mar 30 12:00:42 2026 GMT
Subject: CN=5d091699a0ff76b32c8c286d90a5502a78b213fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:6d:d4:38:66:52:e7:19:43:ad:59:c7:0d:
1f:62:c5:ad:0b:77:11:9c:79:38:7b:01:12:39:ad:
0a:04:a9:69:cd:51:01:e6:1d:68:f6:df:ff:ff:35:
4a:26:ec:8a:78:40:7f:89:48:67:34:1f:41:17:fb:
30:49:80:6d:3f:6e:ae:4f:5f:4a:7b:c7:ef:95:e1:
fc:c8:b5:d3:0b:87:78:22:04:63:9c:d0:e0:ba:a2:
f3:bf:21:b4:57:86:7b:8f:ce:65:f8:1d:61:78:88:
fd:01:41:fb:4f:da:53:dd:ae:8d:b1:45:b3:11:e9:
82:a9:76:0a:18:00:11:f9:05:41:c7:1e:79:52:bb:
fc:b0:72:f3:6f:e2:40:1e:10:7b:e2:be:a8:b2:c3:
13:a1:fb:d6:1a:fb:cc:5a:23:f9:eb:78:c8:99:b6:
e6:c0:84:31:35:8a:47:76:f9:0b:2b:4b:e0:bd:f8:
e7:59:90:b1:46:4a:97:96:31:62:d4:02:06:05:94:
fc:5b:da:a3:d7:f5:39:5a:57:28:b1:ca:49:0a:76:
21:84:ea:02:28:b2:0d:8c:9c:b1:46:2f:4b:ff:92:
69:e9:30:af:97:29:e1:14:f2:5f:77:19:4b:2c:7a:
80:13:a8:ad:4e:c9:96:1e:7b:fd:b7:e1:08:0c:bd:
10:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:09:16:99:A0:FF:76:B3:2C:8C:28:6D:90:A5:50:2A:78:B2:13:FD
X509v3 Authority Key Identifier:
keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:11:cb:96:f2:51:31:8d:e1:06:d1:4b:4f:77:51:fa:87:a7:
a0:a3:88:13:70:09:60:85:3d:10:50:7d:cd:c1:d6:ec:47:79:
63:82:b6:c7:85:ea:6f:2a:50:e5:29:60:63:b8:f2:40:02:ae:
8b:0c:81:17:b6:21:82:bd:e0:a6:63:6c:cd:b7:2d:f4:d8:02:
f4:df:51:ce:17:98:6f:96:d9:d6:0f:bb:45:ca:17:97:72:6c:
2e:3a:1f:6c:9b:56:06:1d:f4:b2:5b:5a:51:e2:0a:12:b8:9a:
fa:c6:e2:32:4f:72:7e:6d:31:44:13:14:98:53:ba:4b:e8:ca:
06:ee:65:ac:8a:89:b1:6e:9c:7a:32:6b:a3:db:9f:d0:c0:4a:
48:9e:dc:10:61:fb:d1:9c:10:60:d8:0e:22:86:24:e8:37:31:
af:e9:2c:01:33:87:bf:3a:61:a1:ff:9d:d1:3a:a1:06:28:01:
ca:2a:b2:e2:e9:09:86:a6:b7:fa:8b:9e:99:0f:31:b1:5e:17:
7f:fb:27:2d:83:4a:19:6e:ec:1c:11:37:82:bf:f6:4c:04:f6:
8f:a2:e1:a3:30:01:60:1c:b6:bf:59:68:15:1d:bf:94:f4:9a:
45:ea:98:80:2f:9d:ea:13:a7:eb:d4:c8:33:13:8e:08:b2:d2:
46:ee:b0:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d8I0/cYNClYbuVbJyt7AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjRkMTY5NzdlZWUyZjU4YmViMWJiN2FhMmY0YjJmYTFh
YmZjNDgwHhcNMjYwMzI5MTIwMDQyWhcNMjYwMzMwMTIwMDQyWjAzMTEwLwYDVQQD
Eyg1ZDA5MTY5OWEwZmY3NmIzMmM4YzI4NmQ5MGE1NTAyYTc4YjIxM2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIBt1DhmUucZQ61Zxw0fYsWtC3cR
nHk4ewESOa0KBKlpzVEB5h1o9t///zVKJuyKeEB/iUhnNB9BF/swSYBtP26uT19K
e8fvleH8yLXTC4d4IgRjnNDguqLzvyG0V4Z7j85l+B1heIj9AUH7T9pT3a6NsUWz
EemCqXYKGAAR+QVBxx55Urv8sHLzb+JAHhB74r6ossMTofvWGvvMWiP563jImbbm
wIQxNYpHdvkLK0vgvfjnWZCxRkqXljFi1AIGBZT8W9qj1/U5WlcoscpJCnYhhOoC
KLINjJyxRi9L/5Jp6TCvlynhFPJfdxlLLHqAE6itTsmWHnv9t+EIDL0QywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0JFpmg/3azLIwobZClUCp4shP9MB8GA1UdIwQY
MBaAFAMk0Wl37uL1i+sbt6ovSy+hq/xIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80NTc4YTYtMWExYy00OTQ0LWE3NzMt
YzI1ZDdmY2EwMDM3LzEvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80NTc4YTYtMWExYy00OTQ0LWE3NzMtYzI1ZDdmY2EwMDM3
LzEvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxHLlvJR
MY3hBtFLT3dR+oenoKOIE3AJYIU9EFB9zcHW7Ed5Y4K2x4XqbypQ5SlgY7jyQAKu
iwyBF7Yhgr3gpmNszbct9NgC9N9RzheYb5bZ1g+7RcoXl3JsLjofbJtWBh30slta
UeIKEria+sbiMk9yfm0xRBMUmFO6S+jKBu5lrIqJsW6cejJro9uf0MBKSJ7cEGH7
0ZwQYNgOIoYk6Dcxr+ksATOHvzphof+d0TqhBigByiqy4ukJhqa3+ouemQ8xsV4X
f/snLYNKGW7sHBE3gr/2TAT2j6LhozABYBy2v1loFR2/lPSaReqYgC+d6hOn69TI
MxOOCLLSRu6wPw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:15 2026 by rpki-client