Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
File: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft (raw, json)
Hash identifier: RqEGDj7HaMmABBkQtXOmxJqesRfnX9prgoXVvHQ2DZI=
Subject key identifier: 77:06:8C:17:DE:A8:37:2F:64:31:7A:BB:DE:3C:DE:17:A9:8C:03:FB
Authority key identifier: 03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
Certificate issuer: /CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Certificate serial: 01A14D2B8C781E6439F5F8616BD6EFCED3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
Manifest number: 1AAA
Signing time: Sun 18 Oct 2026 04:01:01 +0000
Manifest this update: Sun 18 Oct 2026 04:01:01 +0000
Manifest next update: Mon 19 Oct 2026 04:01:01 +0000
Files and hashes: 1: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl (hash: BRHdAn9jb9yfGAwFCj8qpWYMpl33oColvGgxifN2mwI=)
2: eCyziES9pqG-mQfeLtr0n6C5-NA.roa (hash: l6vsyJV9WvrG97VV98IwTWvWh3E/Ue4n2AyaMsNRcxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:2b:8c:78:1e:64:39:f5:f8:61:6b:d6:ef:ce:d3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Validity
Not Before: Oct 18 04:01:01 2026 GMT
Not After : Oct 19 04:01:01 2026 GMT
Subject: CN=77068c17dea8372f64317abbde3cde17a98c03fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:09:86:4e:30:77:c9:9f:84:47:80:e9:d2:
c6:48:a3:2a:ac:52:d5:30:25:ba:cb:fc:24:41:65:
0a:64:53:ff:4e:e8:01:a4:6d:0a:6e:34:ef:2a:21:
98:a4:6b:2b:0a:5d:c2:e9:4f:17:70:85:85:06:d5:
86:5d:ff:ca:9e:d8:3d:6e:a0:27:a7:ff:f9:34:4e:
89:60:23:5f:4a:11:7d:73:1f:31:d7:07:71:83:77:
f7:ef:5b:f2:3b:eb:00:1b:1f:6d:a4:82:c2:79:31:
cf:c2:97:78:3f:74:d6:a0:42:a9:30:91:3d:01:96:
69:51:07:6b:09:4b:c3:cd:2b:a9:fd:58:2d:ee:38:
3a:b1:f1:dd:e7:76:5b:c2:64:e0:e5:44:4a:cf:40:
fc:0e:ce:9c:58:c7:a3:c3:8f:a3:81:7d:ec:de:f7:
3b:5d:0a:be:39:7a:5f:46:68:6e:6a:6c:f0:4f:20:
a2:2a:34:de:bc:ee:65:86:e2:29:12:f7:95:56:cc:
e9:04:c5:03:34:06:b8:05:dc:93:f1:61:b0:f3:2c:
9e:e6:05:6d:f6:8e:b7:ed:05:a0:72:3c:82:a5:af:
73:cf:63:7a:5b:ef:e7:cc:b4:99:7c:76:bf:90:b1:
65:54:41:2b:6b:40:7b:b8:fa:8a:f7:a4:72:b4:a3:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:06:8C:17:DE:A8:37:2F:64:31:7A:BB:DE:3C:DE:17:A9:8C:03:FB
X509v3 Authority Key Identifier:
keyid:03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c1:ea:2d:37:1a:36:fb:76:5a:29:68:3b:76:ee:62:d7:ff:
27:fc:c6:7c:29:9a:c1:5b:6b:2c:ee:ea:21:a1:7b:8e:e9:75:
bd:76:55:28:00:e3:76:b8:86:8c:89:f5:a6:76:98:f7:4f:20:
d8:a5:6e:87:5a:fa:f1:14:1b:16:da:35:34:15:c1:3a:86:66:
e7:ae:07:ad:6d:98:9c:82:45:e1:1a:af:8d:3b:86:20:01:a6:
d0:4b:ee:73:cc:f5:0f:ec:5a:6d:6b:2b:e7:3c:5a:49:ee:2d:
bb:02:24:ae:fd:c6:3c:1b:b1:37:75:e7:fb:18:46:b7:86:d3:
bc:81:d1:18:b6:8e:31:58:83:87:94:0d:a5:54:d4:6d:ac:22:
e2:5d:53:d8:8d:0b:67:a7:36:00:9b:11:07:2a:85:26:e1:09:
b9:d8:e2:83:f7:c2:0f:86:32:8b:4b:a2:81:ee:3f:cc:73:be:
8c:67:d5:2e:90:7e:7a:e5:65:43:18:4a:ee:0e:08:0f:05:87:
16:98:bd:7b:9e:6a:3b:4a:14:b8:1d:eb:75:3b:8a:22:41:1f:
03:a2:d8:03:80:5d:6e:45:88:ed:d2:c5:53:ee:17:93:68:cd:
fa:e6:3e:d8:53:3d:6e:e0:6b:14:85:fa:87:9a:86:ec:fb:ca:
aa:13:92:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:33:19 2026 by rpki-client