Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
File: Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft (raw, json)
Hash identifier: HD0s4vhrrdAznMxRRZKzwD+IKfvDkPJ82TXaDaRttCo=
Subject key identifier: 70:33:12:2D:F0:C4:CF:4F:F8:97:F7:ED:55:F3:44:3F:DF:E7:0F:04
Authority key identifier: 03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A
Certificate issuer: /CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
Certificate serial: 01A03F3B1F029676BEC32ACBA77BC2677E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
Manifest number: 0238
Signing time: Wed 26 Aug 2026 18:00:34 +0000
Manifest this update: Wed 26 Aug 2026 18:00:34 +0000
Manifest next update: Thu 27 Aug 2026 18:00:34 +0000
Files and hashes: 1: Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl (hash: NnCUNb9ZwNQ4TpkPMmmGhwV2yeD3PMHDbKW1KzfCNsg=)
2: eLRzDYpH6ctJoMbMPtU-ULGxRIo.roa (hash: OdzMUAVnw7I56wJuOq/9aOkYjscK9Sg8yKOxq15PvwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:1f:02:96:76:be:c3:2a:cb:a7:7b:c2:67:7e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
Validity
Not Before: Aug 26 18:00:34 2026 GMT
Not After : Aug 27 18:00:34 2026 GMT
Subject: CN=7033122df0c4cf4ff897f7ed55f3443fdfe70f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:36:b6:29:a7:3e:7d:32:80:57:6f:cf:0d:
4b:76:a6:2c:94:1a:ec:62:22:3c:7a:0b:b2:87:52:
55:80:f7:df:06:7f:aa:c9:9d:c0:bd:82:ea:47:d7:
67:3f:47:b9:de:0f:14:67:5e:45:23:be:42:fb:c0:
d8:92:d0:fd:c2:96:ab:30:c9:31:02:57:80:fa:d3:
40:e5:8d:3f:12:85:4d:98:04:7b:78:f8:c5:00:c7:
e0:63:ca:d2:25:4c:a8:5b:f7:24:5d:62:5e:c9:68:
e3:c8:8c:dd:3e:92:6c:d4:4d:25:a2:80:fd:67:f4:
57:89:53:0b:cb:aa:e0:8f:f8:52:d8:cf:db:4f:dd:
02:73:0d:8e:3d:9f:68:7d:a7:ef:6b:d3:53:09:f6:
31:81:d5:c3:e5:5c:b5:fd:16:d0:71:c3:33:53:c4:
83:55:a0:70:05:0c:7c:45:8d:cd:7f:ff:ce:3b:05:
9d:b4:ca:83:69:00:bb:90:ba:ef:88:58:1f:82:40:
62:85:14:52:c8:07:df:c6:63:c0:5a:36:e6:14:5d:
42:bd:54:28:32:c7:e9:e8:44:e0:a2:a2:59:9d:e8:
99:5d:83:7e:95:0b:0e:39:1d:b7:79:f9:8a:9c:c7:
2d:8c:8d:a4:5b:c7:99:db:78:3b:4c:54:31:04:63:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:33:12:2D:F0:C4:CF:4F:F8:97:F7:ED:55:F3:44:3F:DF:E7:0F:04
X509v3 Authority Key Identifier:
keyid:03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1d:b5:79:6b:fe:b4:f1:a0:8e:a3:ed:b9:52:49:43:fb:a0:
d6:5c:9e:e0:b5:a6:ad:9f:07:fe:25:61:18:ea:58:3f:01:40:
92:b1:c2:16:3c:c7:5a:c5:14:4a:9a:5d:9a:4e:1e:c2:f6:46:
b2:8b:cf:ee:17:a7:14:be:bc:73:71:9d:98:28:69:ed:6e:ea:
10:4f:94:b5:0c:00:90:46:cc:08:e7:82:27:1c:01:7f:e6:01:
e8:c3:7a:5d:b9:33:d6:4b:b0:67:67:b8:71:fc:58:6e:b4:24:
b9:3b:27:97:c1:55:30:13:67:68:94:63:82:8f:e1:97:b6:f6:
51:9d:8d:a5:60:e2:82:d5:36:d2:37:85:7c:eb:29:fe:3a:a3:
7d:22:ba:2f:2d:1b:e9:1f:78:f8:41:7b:da:84:e4:63:a2:1d:
f4:b8:0b:f4:c4:04:9e:0c:74:6b:d1:2f:fc:bb:fb:3c:d0:38:
75:78:fb:2a:fa:a8:37:54:60:91:9a:2c:6e:ee:66:d2:c7:59:
ed:0e:b5:de:be:ff:88:0e:58:ae:98:90:94:3e:0f:a7:50:f1:
a8:98:61:3f:39:a7:26:ba:ee:d0:65:44:e4:b6:88:7b:f5:3e:
36:94:3d:95:d6:4f:01:0b:36:83:a1:20:cb:97:5a:e6:6b:41:
eb:6e:1d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:51:48 2026 by rpki-client