Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
File: ayuSHZprREq1jmbriPfBI5jqBLU.mft (raw, json)
Hash identifier: L/wiQAARYbIqEVaxeXfiIr+qaWIAd1ZycswIEnhy/jc=
Subject key identifier: A6:5C:5B:74:00:7C:53:E0:44:13:B3:F7:BF:F2:8B:53:77:AB:AA:B6
Authority key identifier: 6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5
Certificate issuer: /CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
Certificate serial: 019D37C0703BA99693B43184080EBA8243F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
Manifest number: 039D
Signing time: Sun 29 Mar 2026 04:00:51 +0000
Manifest this update: Sun 29 Mar 2026 04:00:51 +0000
Manifest next update: Mon 30 Mar 2026 04:00:51 +0000
Files and hashes: 1: E2O5g-3u7QFDSnqyhGOqtBMannc.roa (hash: LyXDleKJ3gZrrfu8ZQu1gqPieNpy6nIwJ9/Oz5vq8aE=)
2: ayuSHZprREq1jmbriPfBI5jqBLU.crl (hash: U+AEdLIzivVCywJHae1pan9Guoa/Cn1ocFZcn8/zuLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:70:3b:a9:96:93:b4:31:84:08:0e:ba:82:43:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
Validity
Not Before: Mar 29 04:00:51 2026 GMT
Not After : Mar 30 04:00:51 2026 GMT
Subject: CN=a65c5b74007c53e04413b3f7bff28b5377abaab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:00:76:8d:7e:03:0f:c0:bc:5d:1a:f6:9c:a9:
95:81:2d:1d:bd:25:f2:9d:ca:c8:d2:0e:7e:cf:5b:
f6:ca:40:41:67:de:3a:71:c7:c9:e4:19:97:fc:7f:
27:03:00:79:97:89:d2:86:95:ed:a5:37:c0:9e:fb:
53:f3:9f:61:85:d8:86:90:d4:50:3f:ce:11:ec:ad:
22:ed:35:03:da:6b:75:c5:66:64:d5:09:ae:b5:3b:
1d:ab:25:39:27:f0:98:7d:42:e1:d7:75:af:02:24:
66:45:58:ce:5d:e4:4d:69:69:6a:98:77:c7:79:34:
91:b9:23:90:1c:b1:b6:84:37:3d:f2:f4:3b:e9:8c:
74:3f:56:40:32:6f:ee:0f:06:6a:b3:36:ef:2c:b0:
fa:f5:3d:41:6a:9a:65:4e:19:0e:a5:47:b5:26:6c:
43:fa:bc:2d:6a:6e:65:14:0b:e1:16:72:56:53:d1:
19:8d:f1:a9:97:bb:28:98:2d:b2:81:a6:be:24:0b:
7a:ac:db:c0:82:3c:75:50:31:da:2d:db:3e:ac:09:
66:ae:01:4e:0a:07:2c:be:12:2d:4e:a6:84:92:26:
47:e5:ec:a0:8b:e0:c2:c8:e8:9b:42:39:84:60:09:
5d:d9:c1:21:5b:f4:ac:26:3b:16:5e:5e:e2:71:10:
99:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5C:5B:74:00:7C:53:E0:44:13:B3:F7:BF:F2:8B:53:77:AB:AA:B6
X509v3 Authority Key Identifier:
keyid:6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:66:59:ba:19:65:14:cf:17:73:4f:53:2d:38:a7:18:90:19:
a8:a9:53:ba:5d:ad:10:82:40:30:ba:8f:ca:9d:de:20:32:f4:
13:4e:ac:ee:f6:e6:e0:b6:b1:fc:94:20:b1:75:c8:55:b9:4a:
7c:d4:c0:0f:79:6b:2c:7c:12:75:83:10:0f:28:2d:67:c7:57:
20:09:e4:46:5f:6a:3b:62:96:83:ab:d4:af:5e:13:ee:6f:36:
9c:f8:a5:b8:ed:cd:41:37:c7:a7:74:5e:72:aa:a3:a5:61:21:
a8:a7:64:e1:48:40:1b:ca:71:a1:11:f2:95:9b:0c:da:6e:b9:
da:07:f5:80:7a:c2:73:8c:5d:b2:ee:71:7d:ff:8d:c5:1c:05:
4c:e5:c7:53:4c:f2:51:42:17:5e:9e:2e:d1:b9:56:e7:ac:9d:
5f:cc:34:44:a6:2a:3c:1a:7a:5c:4f:c7:21:ad:a2:94:99:d0:
65:92:01:45:eb:d6:49:80:3a:bf:c3:35:bd:0f:85:e1:71:12:
4f:6b:b5:02:36:3b:47:84:3e:87:38:44:b5:1e:a1:a8:86:47:
49:85:14:1e:c3:8d:05:8f:87:63:5c:df:43:15:02:c4:73:69:
08:1b:df:f4:1b:ac:06:38:b4:35:be:9e:4c:f9:df:05:39:47:
c6:e6:48:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:41 2026 by rpki-client