Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
File: AyudLeU3ELMVjkLyKIkQnixA9Ds.mft (raw, json)
Hash identifier: deGdYxhcnnWMwEVSGbTG9BGeYGjsStgQDH309dryQGI=
Subject key identifier: 5A:73:CE:A3:4F:8F:C4:1F:B5:D8:36:B4:6A:DD:E8:79:A4:2F:59:58
Authority key identifier: 03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
Certificate issuer: /CN=032b9d2de53710b3158e42f22889109e2c40f43b
Certificate serial: 019D37BFFA132F60254148F3DDAF8C251497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
Manifest number: 069C
Signing time: Sun 29 Mar 2026 04:00:21 +0000
Manifest this update: Sun 29 Mar 2026 04:00:21 +0000
Manifest next update: Mon 30 Mar 2026 04:00:21 +0000
Files and hashes: 1: AyudLeU3ELMVjkLyKIkQnixA9Ds.crl (hash: UIryrxshH3TF/1hryiQfof7uFn1DmvoYF5sTu9mZ4bk=)
2: Bg94-F9i2Jnpyy_ChTan2u5FmyY.roa (hash: DEbeaWmESIJAfvI0AWdbHW3D5o5mtMuvaof9/WcDDdY=)
3: MAirATMkm_jSRjxp9j7Z40-VKMs.roa (hash: /u+Oro6kRKO2TwnukQ7TlHOXZWANvODIogmazhvXP0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:fa:13:2f:60:25:41:48:f3:dd:af:8c:25:14:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032b9d2de53710b3158e42f22889109e2c40f43b
Validity
Not Before: Mar 29 04:00:21 2026 GMT
Not After : Mar 30 04:00:21 2026 GMT
Subject: CN=5a73cea34f8fc41fb5d836b46adde879a42f5958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:f7:1e:3a:57:d7:10:90:2e:a6:f0:42:47:
9d:25:1a:52:0f:7a:d0:d6:eb:94:a4:86:44:2c:d1:
3c:a4:ac:ae:e2:ad:35:2b:b1:1c:c5:ae:63:40:ea:
b1:d6:e9:7e:07:77:82:fe:ec:29:72:2e:fb:26:39:
51:e1:17:bb:b8:50:4e:fe:36:96:83:34:35:19:73:
fb:4f:e1:b1:b9:f3:b7:18:f2:9d:2d:b7:a5:e1:fb:
7c:5e:9e:c2:5a:21:99:51:30:cb:ba:2f:9b:ce:ec:
66:c1:f8:e6:95:d8:af:e6:0e:8f:34:53:a2:66:f4:
f3:dd:45:65:c1:84:9f:79:97:81:7e:91:33:5c:2e:
34:fc:ae:0f:a3:f9:6f:0d:ea:a7:d6:00:55:5b:78:
d1:8a:0b:1a:d0:d1:cc:80:79:bc:a0:d6:63:b8:16:
f5:61:58:67:c1:3c:45:ea:dd:09:e1:cd:c5:1c:a3:
31:45:f1:da:be:dc:5a:e9:5a:30:9d:4e:b8:0c:49:
4d:27:ed:4f:23:be:96:b5:31:7c:91:c4:85:b7:87:
91:0c:53:e8:aa:7b:39:89:d5:c8:6a:03:20:8f:bc:
0c:96:6e:13:63:5d:ec:b0:94:22:e9:ef:55:91:5b:
81:ad:f2:cc:83:3d:33:82:8b:1a:d1:f7:91:9a:81:
41:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:73:CE:A3:4F:8F:C4:1F:B5:D8:36:B4:6A:DD:E8:79:A4:2F:59:58
X509v3 Authority Key Identifier:
keyid:03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7e:71:68:3f:61:82:8b:f9:7e:99:40:80:69:83:b3:24:2a:
ec:c3:80:d1:ab:ca:8b:f6:a2:e7:ac:35:01:58:49:05:e0:07:
ed:c5:e1:2f:db:89:f5:13:fd:44:67:62:0a:5c:f4:5e:07:ba:
26:11:f9:4b:c8:71:5b:41:7d:29:72:f9:73:d7:6b:c1:c4:a2:
12:e5:f3:54:1b:4a:39:48:9c:eb:97:52:74:ba:e7:7f:6d:e7:
02:c6:b2:84:8f:0b:48:de:eb:8d:6d:25:2a:ee:02:91:d5:13:
03:30:4f:33:98:cc:da:0c:12:e9:8d:32:ae:a6:cd:13:dd:dd:
66:13:39:ef:a8:11:d9:24:db:cf:07:7b:ba:a5:5f:73:b8:33:
ce:61:20:83:dd:b4:bb:34:90:74:b4:73:d9:59:ed:80:82:f8:
61:72:40:9f:b3:a0:35:f2:25:fe:d9:07:4b:08:91:5f:0c:d1:
57:a8:4c:18:ff:03:9e:99:a5:20:0b:b2:88:2f:01:75:5f:5e:
cb:af:9f:29:9a:51:57:db:da:21:d7:93:2e:cf:27:2d:ef:0d:
e7:4b:6c:21:09:17:50:00:b5:76:26:2b:9f:98:c9:39:4c:25:
f0:72:e5:e6:5c:19:9e:3f:14:4e:86:4e:8f:26:93:a8:2a:30:
6c:d0:29:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03v/oTL2AlQUjz3a+MJRSXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMmI5ZDJkZTUzNzEwYjMxNThlNDJmMjI4ODkxMDllMmM0
MGY0M2IwHhcNMjYwMzI5MDQwMDIxWhcNMjYwMzMwMDQwMDIxWjAzMTEwLwYDVQQD
Eyg1YTczY2VhMzRmOGZjNDFmYjVkODM2YjQ2YWRkZTg3OWE0MmY1OTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLn3HjpX1xCQLqbwQkedJRpSD3rQ
1uuUpIZELNE8pKyu4q01K7Ecxa5jQOqx1ul+B3eC/uwpci77JjlR4Re7uFBO/jaW
gzQ1GXP7T+GxufO3GPKdLbel4ft8Xp7CWiGZUTDLui+bzuxmwfjmldiv5g6PNFOi
ZvTz3UVlwYSfeZeBfpEzXC40/K4Po/lvDeqn1gBVW3jRigsa0NHMgHm8oNZjuBb1
YVhnwTxF6t0J4c3FHKMxRfHavtxa6VownU64DElNJ+1PI76WtTF8kcSFt4eRDFPo
qns5idXIagMgj7wMlm4TY13ssJQi6e9VkVuBrfLMgz0zgosa0feRmoFBqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpzzqNPj8Qftdg2tGrd6HmkL1lYMB8GA1UdIwQY
MBaAFAMrnS3lNxCzFY5C8iiJEJ4sQPQ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXl1ZExlVTNFTE1WamtMeUtJa1FuaXhBOURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9kNmRjOWQtZWIzMy00Y2E0LWFhODIt
NGQxOWE4ZGUwYWJhLzEvQXl1ZExlVTNFTE1WamtMeUtJa1FuaXhBOURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9kNmRjOWQtZWIzMy00Y2E0LWFhODItNGQxOWE4ZGUwYWJh
LzEvQXl1ZExlVTNFTE1WamtMeUtJa1FuaXhBOURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYX5xaD9h
gov5fplAgGmDsyQq7MOA0avKi/ai56w1AVhJBeAH7cXhL9uJ9RP9RGdiClz0Xge6
JhH5S8hxW0F9KXL5c9drwcSiEuXzVBtKOUic65dSdLrnf23nAsayhI8LSN7rjW0l
Ku4CkdUTAzBPM5jM2gwS6Y0yrqbNE93dZhM576gR2STbzwd7uqVfc7gzzmEgg920
uzSQdLRz2VntgIL4YXJAn7OgNfIl/tkHSwiRXwzRV6hMGP8DnpmlIAuyiC8BdV9e
y6+fKZpRV9vaIdeTLs8nLe8N50tsIQkXUAC1diYrn5jJOUwl8HLl5lwZnj8UToZO
jyaTqCowbNApMg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:05 2026 by rpki-client