Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: 3hA/TaOdYITOCTJEJUetqNjQpP4B46rbiTkng3XahIk=
Subject key identifier: F3:7A:69:9A:A0:2B:38:DE:BC:AA:F4:0D:FF:2A:E5:5E:31:4E:F1:67
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 019EBF23FE4E392D1E67C731A41FDB8AFDB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 15CD
Signing time: Sat 13 Jun 2026 04:01:07 +0000
Manifest this update: Sat 13 Jun 2026 04:01:07 +0000
Manifest next update: Sun 14 Jun 2026 04:01:07 +0000
Files and hashes: 1: WrRSKzPOj6BgLow6AweYah_e1dA.roa (hash: zp8UwEZpI6bsmG4yaK4JetrekeKEEBLqIzJ3Rz0Eig8=)
2: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: WWv5fWmQ6MK1guqDQ8TFgkqMh+4BStvr5/NYIV1LFNA=)
3: uR1vfe6fR6lmKLx_KpYnu1pkQe8.roa (hash: rrB4HqghjaNhMjUMgJmTsjzw4hoiQcENyKRyhlNILHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:fe:4e:39:2d:1e:67:c7:31:a4:1f:db:8a:fd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Jun 13 04:01:07 2026 GMT
Not After : Jun 14 04:01:07 2026 GMT
Subject: CN=f37a699aa02b38debcaaf40dff2ae55e314ef167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:38:1a:00:07:53:b4:a2:23:99:9e:28:89:1e:
46:7d:fb:c2:88:cc:94:0a:e2:78:ff:6f:f1:2e:1d:
ca:9b:a2:e5:af:f3:9d:1d:b0:2c:ca:39:f3:ca:b5:
d0:88:1e:bc:d0:af:cf:cb:ca:b2:ef:e1:08:d6:bc:
19:a6:1e:6c:e2:12:dd:f1:e2:18:29:e3:9e:92:1f:
16:e3:0a:25:68:2f:0d:91:ad:8e:bb:5d:a3:44:60:
d7:42:da:dd:7b:8b:34:29:23:f3:cd:54:7a:f4:76:
97:d5:ee:f2:ae:2c:02:e9:d8:75:76:11:a7:45:f7:
e2:1f:5b:1f:8e:ef:7c:8e:75:53:f0:8e:bd:ff:39:
52:3f:0b:1e:c7:7b:4f:6d:2d:52:30:26:2e:03:e3:
bf:09:df:5a:6e:9c:62:21:19:18:4d:40:9d:aa:34:
7b:59:9e:ab:4c:2b:37:f0:f1:cc:d4:42:2e:a7:1f:
30:3d:7e:0a:37:07:b8:bb:bb:75:b5:51:ec:b0:0b:
78:ab:e4:70:57:f8:bb:8e:4f:d1:9d:a3:50:f3:3a:
c7:09:4c:bd:5b:31:74:dc:75:39:08:5b:46:b6:57:
d7:34:03:0e:a8:da:92:64:d7:f0:0a:72:3b:e0:3e:
d9:82:e5:4b:10:c1:13:0e:18:ef:bb:3a:26:a1:be:
91:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7A:69:9A:A0:2B:38:DE:BC:AA:F4:0D:FF:2A:E5:5E:31:4E:F1:67
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:75:67:59:07:b9:ca:08:06:3a:c0:ce:1d:95:c5:4d:e8:3a:
77:0a:f2:89:99:2f:b6:4e:38:b1:19:6b:33:d6:62:cb:da:3e:
21:39:4a:b0:09:3f:5d:42:87:bf:56:4c:3f:3a:79:56:1f:dd:
21:87:6f:6f:3c:49:1f:b9:59:b3:5f:13:f0:4e:5e:fb:f8:d2:
81:1b:99:75:2d:0f:ed:44:a9:9d:63:36:cc:fc:01:9e:c3:fa:
55:6b:bf:73:cf:2e:a6:40:4f:7f:f0:66:73:c8:f6:e5:36:81:
f5:53:dc:df:d8:4d:0e:a3:73:ce:de:76:ca:02:cd:73:c9:47:
0d:79:d1:18:f3:c4:a0:69:18:5a:6d:61:cc:3b:37:ab:99:dd:
38:62:ab:6e:98:bb:2f:fc:13:79:33:c2:6c:ab:80:7c:ca:7b:
78:cf:d4:f6:99:0c:b7:c4:65:3d:cf:c1:65:e9:e0:2a:4a:00:
47:57:73:a1:14:70:6e:71:d0:e5:50:a3:52:54:83:0e:eb:0c:
74:a7:f2:8c:de:db:7b:be:2e:14:c8:f4:50:d6:a3:d4:5a:4c:
b6:b3:8b:65:fc:8e:a8:f2:5d:38:18:46:d7:fc:f5:01:43:49:
4a:38:da:cc:b3:cb:1f:c5:15:be:6a:b6:3d:d0:70:e0:6f:4d:
a4:10:67:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:56:27 2026 by rpki-client