Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
File: ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft (raw, json)
Hash identifier: ZK2lQ1JoOg5ERQXP/5b6+5QeeSNtrtHhRSo1ORtQ46A=
Subject key identifier: CC:66:E0:A0:59:7A:01:62:51:66:02:84:39:94:CC:4A:FD:69:E8:85
Authority key identifier: 6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74
Certificate issuer: /CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
Certificate serial: 01A1803D70F4276F020478E46E370E9AD96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
Manifest number: 1ACE
Signing time: Wed 28 Oct 2026 02:01:12 +0000
Manifest this update: Wed 28 Oct 2026 02:01:12 +0000
Manifest next update: Thu 29 Oct 2026 02:01:12 +0000
Files and hashes: 1: ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl (hash: DUZeYNggWOPsoLQEcbDD1B0xyV32r2X6BlW0E/4BRSU=)
2: l1p9d37mhsD_IWnIJc4cSBJLrUM.roa (hash: Q8Y0ag669YkYUSjUykWCZbogQyThUrghrFi6sY9b6+0=)
3: vjWbO2VHpP-vkUenbdLYg6VwxHk.roa (hash: nYXnmLT7OQ0V/vFje3ztCDA1QL2KqTBRpzZPusCnjmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:70:f4:27:6f:02:04:78:e4:6e:37:0e:9a:d9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
Validity
Not Before: Oct 28 02:01:12 2026 GMT
Not After : Oct 29 02:01:12 2026 GMT
Subject: CN=cc66e0a0597a0162516602843994cc4afd69e885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:a0:c9:04:1d:b5:7c:50:34:85:a2:f2:ea:
cb:2a:5e:f8:da:5f:1c:ea:8a:a2:15:d3:33:34:30:
ab:14:fb:95:c3:f6:ef:83:c3:45:e1:70:51:90:fa:
d6:86:4a:8e:6f:a1:8b:c8:4a:13:e0:f4:54:3f:56:
46:c3:58:0d:55:7c:17:a4:70:e0:0c:7d:1e:c0:2f:
9a:d4:3c:a9:f4:41:84:45:3b:61:f4:79:48:dc:bd:
c1:b8:d2:df:c2:1d:8b:5c:63:69:f9:d6:d1:33:b9:
f1:fc:9c:51:79:fd:d5:5d:1b:5d:f7:33:4e:22:59:
18:48:13:41:62:e4:c9:e9:8d:13:ff:ac:2b:6f:db:
48:27:b4:43:da:f2:1b:de:99:a4:c4:9c:54:73:ce:
23:32:10:a5:03:03:e7:88:fa:4b:d4:38:bd:00:f1:
c0:f2:15:8a:25:fe:aa:70:4f:8d:83:b6:25:ff:a4:
71:66:1b:69:be:fe:75:8e:ed:85:4e:00:6c:32:c5:
65:95:79:58:99:df:05:db:0b:fb:6c:cb:10:5f:b1:
b8:31:f7:e6:60:d5:7b:f6:b4:b4:98:51:56:ee:e4:
ef:ea:86:fb:84:93:c1:ca:13:a3:28:cb:a9:9c:04:
6c:9a:18:69:29:f2:99:84:27:9c:a4:fd:6e:10:f6:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:66:E0:A0:59:7A:01:62:51:66:02:84:39:94:CC:4A:FD:69:E8:85
X509v3 Authority Key Identifier:
keyid:6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bd:d4:ce:80:1b:1b:97:5b:21:68:0d:1c:89:35:86:dd:6a:
cd:0b:5d:95:db:17:04:b5:c5:f5:d0:0a:fa:8d:21:5f:dc:b7:
b6:96:b7:00:20:eb:c6:9a:a7:59:51:23:f8:fd:13:3b:c6:ac:
3a:6d:e5:0f:80:40:5c:75:74:31:24:0e:0f:f1:57:d9:ef:6f:
5c:3f:ce:e3:90:ef:97:06:aa:c2:11:40:1d:3a:9f:dc:0b:dd:
58:ba:78:65:f7:a7:73:21:b1:f6:9a:b7:26:05:3f:13:30:fc:
1f:cf:6e:43:83:df:fb:5c:92:99:fd:e1:bc:37:cf:8f:f0:ef:
f0:a6:78:d2:d4:f4:92:4d:ed:09:47:9f:d1:ba:ad:6a:f5:a4:
26:36:fd:6a:af:64:36:1a:df:90:0c:11:26:68:8a:3e:be:02:
53:4a:29:00:7e:3b:db:9f:ef:0b:eb:0d:d4:7a:90:f5:78:fb:
1e:eb:97:c4:6a:a6:ce:48:c6:c5:9f:46:1f:66:53:4d:8a:e6:
96:12:01:d9:1d:19:08:5d:80:bf:b5:05:93:71:30:d7:6e:ff:
8d:09:cd:d6:78:88:26:66:ed:6b:33:50:2a:81:3e:63:09:13:
c4:e9:46:e2:c6:24:ed:ce:98:3a:e9:a7:de:05:f4:c7:31:62:
1f:3a:b3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:10:11 2026 by rpki-client