Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
File: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft (raw, json)
Hash identifier: hrvX8KfPU9JFsJLIPI9G/A1SnJQKPepiYXAu8ks4ogM=
Subject key identifier: A7:EC:CB:31:2F:B9:B1:13:59:B5:F4:BF:C2:41:4E:FF:DE:72:F3:15
Authority key identifier: 03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
Certificate issuer: /CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Certificate serial: 01A001018537059F14F44F3EAD5A47053DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
Manifest number: 19FE
Signing time: Fri 14 Aug 2026 16:01:11 +0000
Manifest this update: Fri 14 Aug 2026 16:01:11 +0000
Manifest next update: Sat 15 Aug 2026 16:01:11 +0000
Files and hashes: 1: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl (hash: xiCm/TWAF5SiHGdCm2nZ4v4I/pgeXzaE4Ucgpq2rEIg=)
2: eCyziES9pqG-mQfeLtr0n6C5-NA.roa (hash: l6vsyJV9WvrG97VV98IwTWvWh3E/Ue4n2AyaMsNRcxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:85:37:05:9f:14:f4:4f:3e:ad:5a:47:05:3d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Validity
Not Before: Aug 14 16:01:11 2026 GMT
Not After : Aug 15 16:01:11 2026 GMT
Subject: CN=a7eccb312fb9b11359b5f4bfc2414effde72f315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1e:8f:a6:66:ee:55:cd:2f:3f:18:f9:e7:f1:
1e:c5:77:cd:45:24:9a:ff:55:d5:33:c4:43:ee:da:
d2:f5:1d:c3:6a:78:c7:47:d4:b8:71:78:01:49:ac:
24:11:d5:ca:12:62:1c:e1:90:3a:c8:13:e3:9e:d9:
5c:77:ac:ed:0c:53:03:03:d4:7d:8a:d3:82:b6:34:
55:b0:49:b9:e5:38:1f:1f:6f:ef:b6:1b:c4:86:7c:
2e:85:4c:dd:c3:a3:4f:19:51:08:eb:83:0c:f4:8f:
18:e5:ab:8d:68:fd:b5:0c:38:88:e2:d8:62:76:43:
12:16:0d:8a:7f:c6:62:58:b0:9f:89:07:d8:56:b6:
11:e1:f1:b9:4e:a0:06:12:00:d0:ce:07:42:f1:59:
d4:13:5a:b2:99:6f:23:8d:f1:db:81:6d:cb:b0:0d:
17:84:2e:f6:dc:f3:5d:a8:fe:5d:75:e9:b9:7b:3b:
84:b0:3f:3e:17:48:bf:f4:4a:40:c6:42:67:fb:37:
4d:f0:25:05:cd:ee:fb:aa:38:c9:65:af:a7:fa:97:
c3:7d:9f:43:46:9e:57:17:a2:0d:4d:93:e5:b4:fa:
4f:f4:2b:38:de:19:a2:e5:41:5c:33:e4:1d:6c:4d:
74:a1:db:0c:de:b7:a7:a0:39:e9:68:3f:94:ed:b8:
8b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EC:CB:31:2F:B9:B1:13:59:B5:F4:BF:C2:41:4E:FF:DE:72:F3:15
X509v3 Authority Key Identifier:
keyid:03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d5:9b:a0:81:dd:eb:05:a0:c7:61:04:9d:0a:09:4f:2f:92:
82:05:f1:1e:f4:18:77:d9:55:14:c1:6d:45:83:ff:1a:82:fe:
72:ca:fa:ba:98:b0:da:ee:4a:27:b4:77:fd:6a:80:3f:d3:94:
86:bf:2c:98:58:4e:83:60:90:77:3c:e4:d2:47:a6:fa:41:c9:
81:a6:b8:f5:4f:eb:fd:ca:54:47:b6:26:95:76:a2:2d:e0:f5:
07:df:06:3b:79:53:d4:b5:6e:ca:eb:3f:8d:59:8b:7f:aa:c5:
e0:48:69:a7:23:14:bd:a4:98:51:6a:31:11:cf:75:83:36:05:
b6:73:be:9d:48:89:1a:13:9f:86:1c:ed:b9:7b:48:8c:1a:7b:
e5:4f:cb:07:9a:c1:28:0b:0a:09:d7:b8:b0:c3:13:27:65:c1:
6d:e3:73:a7:8d:66:d8:df:2c:25:04:b6:92:8f:24:a6:ac:e7:
cd:7e:89:fd:1b:18:60:0d:ce:46:91:c8:e5:e8:d2:78:01:0e:
66:bb:79:68:62:09:fa:f5:77:75:6c:03:8c:8e:9d:12:a5:ee:
fc:23:82:e9:84:7d:6f:00:50:b3:fb:92:8f:64:c3:34:49:12:
02:07:5e:68:4c:a6:6e:36:01:dd:ab:66:94:c5:4e:9e:cd:15:
f7:e9:02:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:07 2026 by rpki-client