Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
File: AyudLeU3ELMVjkLyKIkQnixA9Ds.mft (raw, json)
Hash identifier: 1SjXZ7jpMs7+volRtQtaK5mzaAQJPQNxP+vs/4WXy00=
Subject key identifier: AA:0D:E3:51:FD:EE:C7:3E:49:B6:A5:67:E4:FF:F0:70:A5:6C:28:54
Authority key identifier: 03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
Certificate issuer: /CN=032b9d2de53710b3158e42f22889109e2c40f43b
Certificate serial: 01A119AB4D79AD427209FEE9A1B9FD1EC63B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
Manifest number: 08A1
Signing time: Thu 08 Oct 2026 04:00:19 +0000
Manifest this update: Thu 08 Oct 2026 04:00:19 +0000
Manifest next update: Fri 09 Oct 2026 04:00:19 +0000
Files and hashes: 1: AyudLeU3ELMVjkLyKIkQnixA9Ds.crl (hash: U2xZx7WY6LJI3RWcLFzGHtfYZ3cg+BqWFzJM+aGkugc=)
2: itmWplnBg3fR084PVqIlNFO2Uqs.roa (hash: W2ESdSFzSgT4pDuGnVlC8JTa25zkIr4DEtvOY52aVfw=)
3: udpWdNCKkK0P1iH1tzGr-xFImUs.roa (hash: Sd5grDbeFgiY7osermhXdAvSR4ijwDBASIa5MD4eRp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:ab:4d:79:ad:42:72:09:fe:e9:a1:b9:fd:1e:c6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032b9d2de53710b3158e42f22889109e2c40f43b
Validity
Not Before: Oct 8 04:00:19 2026 GMT
Not After : Oct 9 04:00:19 2026 GMT
Subject: CN=aa0de351fdeec73e49b6a567e4fff070a56c2854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:33:de:f4:1c:14:ab:f6:8d:ab:44:c6:36:
a2:99:df:67:81:30:b7:be:2d:54:e4:04:f3:60:37:
b1:ac:66:31:5d:1c:48:9f:67:69:94:0c:a8:4e:47:
16:d4:ed:2c:45:df:f5:16:b0:1b:e5:5e:37:01:92:
51:95:21:c1:f5:e4:8e:f4:10:79:0f:8f:15:78:74:
b0:17:75:87:62:b3:40:fb:24:73:f5:77:4a:17:28:
ca:ae:e8:20:c1:b5:0f:2f:04:91:c2:a1:3e:2b:70:
55:6d:0c:6f:5b:23:59:64:4e:4f:2b:7a:3a:9c:4a:
16:e8:2b:60:90:7f:6f:7d:bd:76:bf:8e:94:c2:ad:
51:20:4c:f7:57:bf:c2:5b:07:71:5a:fa:64:9a:d8:
85:94:4f:bd:8f:bc:03:8e:9f:6a:6e:a5:a6:df:00:
f9:f9:8d:9d:df:15:35:e3:3b:09:a2:e5:8d:91:f9:
bb:4c:9b:c6:4a:75:27:37:93:64:6c:62:ac:3b:82:
5d:06:b2:d9:29:90:44:21:19:bf:00:df:fd:8f:46:
72:da:5c:f3:a8:53:ed:b7:38:4d:d4:89:89:ac:05:
71:7f:df:8a:73:96:48:28:cf:67:56:e6:8e:7f:b2:
92:4b:30:a2:db:4b:40:bb:11:09:ca:30:74:62:37:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0D:E3:51:FD:EE:C7:3E:49:B6:A5:67:E4:FF:F0:70:A5:6C:28:54
X509v3 Authority Key Identifier:
keyid:03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a7:4c:a3:63:97:33:be:b5:2a:21:15:6a:6d:79:8c:7e:a2:
d9:41:97:36:e2:49:a2:e9:54:3e:14:22:dc:ca:fd:07:28:d3:
56:7c:53:12:85:4b:70:53:2e:77:b2:01:40:0f:14:4b:56:86:
40:bf:12:da:40:01:b6:ac:a3:3d:38:54:a3:37:f7:75:46:56:
b6:c5:bc:73:14:d7:ca:9c:1b:ac:d0:41:f6:b6:0b:70:a5:e3:
b7:33:57:f0:0b:32:3b:40:83:d9:f6:17:99:45:82:4e:07:b6:
c4:16:ef:9c:9a:53:be:f7:ed:c0:3f:79:ef:37:ff:98:b1:e4:
c5:c3:0f:6a:6b:99:a0:8c:01:dc:20:81:b6:00:3e:0a:30:ea:
f2:5a:cf:ce:fe:cc:0a:15:15:55:c4:b2:4e:b3:e2:18:0b:b1:
80:e5:99:88:55:e7:fa:38:e8:b1:60:91:65:c1:9b:06:ba:fe:
88:bb:27:c4:e4:e3:1c:f7:9e:2d:f8:41:9f:70:d5:61:a8:1e:
23:64:13:3d:69:08:fd:d2:b3:a9:5e:60:d7:4a:f8:aa:1d:60:
df:fe:72:47:4f:a8:e8:e4:96:72:ab:b5:a6:fa:98:43:a3:b7:
d5:b8:ec:d1:ee:6f:29:67:46:aa:80:8a:b2:71:74:63:a8:d2:
f4:ac:79:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:03:01 2026 by rpki-client