Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
File: AyUDQljydbfIfl9PcHBsDPWI78M.mft (raw, json)
Hash identifier: 1twJEIMfJ8OAdQHlpXRH/pEAyde0g99CcnaD3zzbpwA=
Subject key identifier: 63:96:EA:BF:11:18:B2:77:07:10:78:B0:16:53:49:50:3F:28:7A:78
Authority key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
Certificate issuer: /CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Certificate serial: 019CECA6989F741545CAD53A53BF66CFBD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
Manifest number: 1825
Signing time: Sat 14 Mar 2026 14:01:06 +0000
Manifest this update: Sat 14 Mar 2026 14:01:06 +0000
Manifest next update: Sun 15 Mar 2026 14:01:06 +0000
Files and hashes: 1: 3vVG8o2ITJwtPnNIQhuIxnCqGaY.roa (hash: 8/W7Ss/HYT0cvaLGI01I8cqgEGbSHHWsxyzYNVKNbA0=)
2: AyUDQljydbfIfl9PcHBsDPWI78M.crl (hash: /LaY3DcHmu9WG7jpRZgnmzNfTx7S0Kx6bCMbNBkvPd8=)
3: SLEbsnJN0TIrYMPUkwo_HtQI_YY.roa (hash: sEW6+6ZZRuXcX0E6lls/B3TG4bjdd1ae0xcdGkWi5Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:a6:98:9f:74:15:45:ca:d5:3a:53:bf:66:cf:bd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Validity
Not Before: Mar 14 14:01:06 2026 GMT
Not After : Mar 15 14:01:06 2026 GMT
Subject: CN=6396eabf1118b277071078b0165349503f287a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3e:f8:11:83:25:49:a1:33:8e:fe:18:aa:3f:
1d:ec:d3:74:7b:e7:20:73:88:75:4a:05:57:f1:ee:
18:44:5d:5c:c9:fe:b2:5f:ce:b6:c2:f0:f5:e5:f3:
41:97:6d:09:bd:6b:ce:d1:12:7f:af:ac:69:5e:d7:
af:f6:63:eb:e4:de:d4:5f:c3:20:2c:20:f0:b9:19:
50:da:6e:1b:ed:42:7a:0b:ae:ee:50:c1:a3:09:eb:
b2:7b:83:95:e8:14:24:c0:75:63:bc:4e:04:6e:40:
8c:da:28:31:91:9b:51:7d:50:8a:ce:fb:c5:8c:ca:
19:fe:af:61:83:7d:f7:b4:d9:6a:60:72:63:e9:62:
be:3b:25:3d:aa:f2:d3:9d:67:85:1b:9f:37:13:18:
4c:8a:2c:39:2e:dc:aa:70:bb:cf:f2:60:bb:1b:a0:
ec:4b:f6:5b:d4:3c:15:3f:ae:72:60:84:34:6a:9d:
e7:95:18:e3:16:ca:b4:a6:31:0b:0b:29:5f:c1:69:
0b:56:64:22:61:b6:99:03:08:26:f9:f1:8e:5c:91:
51:22:3e:97:61:2c:0d:5d:2a:80:e9:17:f8:99:67:
13:be:ad:f5:de:f3:27:61:c9:f7:d3:bd:36:80:31:
57:08:ae:9f:b2:2f:16:3e:d1:03:95:d5:f6:29:e0:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:96:EA:BF:11:18:B2:77:07:10:78:B0:16:53:49:50:3F:28:7A:78
X509v3 Authority Key Identifier:
keyid:03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d0:22:a0:5f:af:64:b4:0e:f6:14:5a:d5:9a:75:45:e4:fa:
c0:be:ef:f1:ea:07:36:73:3c:69:cb:5b:81:1a:b1:0e:cc:09:
e8:98:ce:c7:10:d9:9c:03:39:9c:dd:83:de:dc:ce:c6:29:e0:
28:a4:da:fb:35:a3:9d:12:09:a4:20:61:a5:36:a4:2c:fc:1d:
13:a3:92:bf:83:ab:6e:35:03:2e:a4:39:52:88:b1:d1:bd:de:
a9:c7:b7:22:97:e3:ce:70:1f:fe:0b:30:93:e3:75:82:46:c2:
82:57:29:53:7d:e8:4b:41:71:97:52:07:ec:35:55:79:87:61:
b1:f2:85:4a:a9:20:b9:d4:fc:8f:b8:ab:fd:c4:86:60:3a:26:
74:7b:d4:57:b0:7b:b5:d9:0e:5b:19:3c:1b:04:f5:3d:35:65:
5c:21:a0:36:03:94:14:1d:4e:b0:6b:c5:26:07:fd:c1:00:4e:
63:fb:e4:ab:20:ae:75:84:20:4d:5a:6d:d9:48:4b:81:26:7a:
ef:21:62:c3:7f:52:54:0a:55:ff:69:04:56:db:96:2e:e6:8f:
ca:e1:69:92:c8:1e:f8:81:83:c7:d0:32:f6:06:4f:b4:72:1a:
fe:04:d2:d4:11:62:77:41:02:e5:5a:00:3b:0c:3a:1e:97:c7:
af:a7:91:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzsppifdBVFytU6U79mz72LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjUwMzQyNThmMjc1YjdjODdlNWY0ZjcwNzA2YzBjZjU4
OGVmYzMwHhcNMjYwMzE0MTQwMTA2WhcNMjYwMzE1MTQwMTA2WjAzMTEwLwYDVQQD
Eyg2Mzk2ZWFiZjExMThiMjc3MDcxMDc4YjAxNjUzNDk1MDNmMjg3YTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4T74EYMlSaEzjv4Yqj8d7NN0e+cg
c4h1SgVX8e4YRF1cyf6yX862wvD15fNBl20JvWvO0RJ/r6xpXtev9mPr5N7UX8Mg
LCDwuRlQ2m4b7UJ6C67uUMGjCeuye4OV6BQkwHVjvE4EbkCM2igxkZtRfVCKzvvF
jMoZ/q9hg333tNlqYHJj6WK+OyU9qvLTnWeFG583ExhMiiw5LtyqcLvP8mC7G6Ds
S/Zb1DwVP65yYIQ0ap3nlRjjFsq0pjELCylfwWkLVmQiYbaZAwgm+fGOXJFRIj6X
YSwNXSqA6Rf4mWcTvq313vMnYcn30702gDFXCK6fsi8WPtEDldX2KeB/pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOW6r8RGLJ3BxB4sBZTSVA/KHp4MB8GA1UdIwQY
MBaAFAMlA0JY8nW3yH5fT3BwbAz1iO/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTIt
OWEzN2M2MDY5YmMxLzEvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTItOWEzN2M2MDY5YmMx
LzEvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNAioF+v
ZLQO9hRa1Zp1ReT6wL7v8eoHNnM8actbgRqxDswJ6JjOxxDZnAM5nN2D3tzOxing
KKTa+zWjnRIJpCBhpTakLPwdE6OSv4OrbjUDLqQ5Uoix0b3eqce3IpfjznAf/gsw
k+N1gkbCglcpU33oS0Fxl1IH7DVVeYdhsfKFSqkgudT8j7ir/cSGYDomdHvUV7B7
tdkOWxk8GwT1PTVlXCGgNgOUFB1OsGvFJgf9wQBOY/vkqyCudYQgTVpt2UhLgSZ6
7yFiw39SVApV/2kEVtuWLuaPyuFpksge+IGDx9Ay9gZPtHIa/gTS1BFid0EC5VoA
Oww6HpfHr6eRhQ==
-----END CERTIFICATE-----
Generated at Sat Mar 14 21:50:30 2026 by rpki-client