Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
File: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft (raw, json)
Hash identifier: LDARZIRbu8HxSvo8iIGwVEEtHRkMdCoLKa6t/SmwHso=
Subject key identifier: 25:40:54:35:A5:17:E5:D7:20:9A:59:1F:A2:A7:25:EC:F3:38:BE:51
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Certificate issuer: /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial: 01A148734411FA90BF61850A49B6AF98902A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
Manifest number: 1AAD
Signing time: Sat 17 Oct 2026 06:01:15 +0000
Manifest this update: Sat 17 Oct 2026 06:01:15 +0000
Manifest next update: Sun 18 Oct 2026 06:01:15 +0000
Files and hashes: 1: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl (hash: XlwYw20zc3DD12A96O6ZLnbmo3QJ3FKcYoeLsH3p5MY=)
2: nu_nfWvngwD8Y74CXi065T5OVuQ.roa (hash: d92WDDshr8YLz0+Twkg4dzAWaxn6uiHcpqEqs+83HsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:73:44:11:fa:90:bf:61:85:0a:49:b6:af:98:90:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Validity
Not Before: Oct 17 06:01:15 2026 GMT
Not After : Oct 18 06:01:15 2026 GMT
Subject: CN=25405435a517e5d7209a591fa2a725ecf338be51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c0:fd:bd:63:d4:8b:c3:44:d4:06:4c:44:57:
f0:21:74:55:02:1a:2a:8e:e7:0f:8e:5e:99:b2:44:
9b:03:7a:61:d8:7d:25:c5:93:13:eb:01:0a:d4:a8:
dd:30:38:16:99:be:ef:59:89:fc:e9:74:9f:de:be:
73:47:f6:9c:7f:f5:19:ec:db:ec:0b:62:8c:29:04:
ee:22:06:05:6f:8b:ee:bd:72:fd:bd:79:1f:8e:0a:
e4:a9:12:37:fa:ee:dd:0e:22:0e:19:00:d8:8a:b8:
33:15:6a:84:33:06:bd:5b:d6:25:de:f9:dd:16:55:
6b:a9:04:9f:9e:90:a2:67:21:aa:45:2d:c5:7c:04:
cf:78:3e:a8:d7:3e:f1:be:26:e6:b6:7c:06:47:39:
43:ef:92:3e:e9:6a:e5:b6:f0:fc:a4:07:cb:de:0b:
eb:43:ee:5f:9e:fa:9c:9b:52:0f:18:68:05:95:28:
b8:11:bb:1f:38:5b:c1:08:f8:89:05:92:bc:18:1f:
21:17:51:6f:30:6a:7c:41:5e:f0:1d:78:51:d2:ad:
29:4c:3b:78:11:07:b3:95:04:78:e4:34:81:d8:e0:
70:90:73:dc:bc:d1:d5:60:27:f0:8b:fa:fc:6a:af:
05:e9:ab:90:e3:f8:8d:42:5a:dc:5b:b5:cb:97:1c:
a9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:40:54:35:A5:17:E5:D7:20:9A:59:1F:A2:A7:25:EC:F3:38:BE:51
X509v3 Authority Key Identifier:
keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cb:45:a1:dd:48:29:7b:71:e5:8a:c6:79:64:18:45:24:53:
01:11:eb:33:88:fc:6a:9d:d9:14:b1:5a:d3:cf:93:99:bd:24:
ff:74:85:74:41:85:23:0b:9e:1d:10:b9:29:cb:fe:03:8a:4a:
45:b9:7a:99:d1:ea:3c:3e:0e:6d:23:11:a7:2f:05:a9:df:6d:
d2:11:80:25:25:b6:9b:3b:f6:b4:2f:0c:ed:d6:1a:84:26:51:
4a:f5:3e:87:18:81:11:fa:0d:ad:ec:ec:3c:66:5d:d2:8b:56:
d5:41:20:fe:a9:d1:41:a8:39:53:50:d9:67:40:72:a8:1d:5d:
22:d0:f6:b0:1a:32:01:43:4b:6b:5d:f1:d8:a1:41:3e:52:c6:
f0:0c:ec:00:0e:4e:af:af:8f:fc:bf:d3:8a:96:81:02:cc:c1:
76:1d:8e:dd:40:06:ba:ac:6d:5b:56:0e:2d:79:aa:58:11:7e:
b5:b1:6c:dd:81:a8:2d:7b:6f:ca:ae:bb:9f:d4:c7:cf:2b:9f:
e5:b1:09:56:75:fc:99:25:7c:8c:57:a5:a4:47:c8:6f:2b:f8:
7e:bf:c3:c4:a4:60:b4:34:68:b5:96:68:c2:ea:c8:f3:3e:f4:
cf:52:bc:04:ea:b3:28:60:4e:d4:26:98:2a:96:30:4f:d8:17:
46:4e:ae:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:43:43 2026 by rpki-client