Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: AnAH8TCiJQ3x6Gv/tQN2CwloMiqfS+vOvTrNgp+tNJE=
Subject key identifier: 9A:52:05:A7:19:4E:C6:99:51:74:C7:7A:F3:D1:72:7A:6F:3C:31:7F
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 01A0CA7E1C56105D8ED3F3C0EEB8F7F281E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 16DC
Signing time: Tue 22 Sep 2026 19:00:57 +0000
Manifest this update: Tue 22 Sep 2026 19:00:57 +0000
Manifest next update: Wed 23 Sep 2026 19:00:57 +0000
Files and hashes: 1: WrRSKzPOj6BgLow6AweYah_e1dA.roa (hash: zp8UwEZpI6bsmG4yaK4JetrekeKEEBLqIzJ3Rz0Eig8=)
2: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: 25T7VEe6rzMv69L53E02eMkXN7i52w4mCumgYMITxZM=)
3: uR1vfe6fR6lmKLx_KpYnu1pkQe8.roa (hash: rrB4HqghjaNhMjUMgJmTsjzw4hoiQcENyKRyhlNILHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7e:1c:56:10:5d:8e:d3:f3:c0:ee:b8:f7:f2:81:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Sep 22 19:00:57 2026 GMT
Not After : Sep 23 19:00:57 2026 GMT
Subject: CN=9a5205a7194ec6995174c77af3d1727a6f3c317f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:12:ae:cb:ad:1b:df:16:56:fd:d5:51:81:90:
ef:20:1a:a8:08:80:ea:bd:4a:e8:60:c8:55:05:36:
17:8d:a3:40:e1:d0:1f:bc:64:65:e3:06:6e:e0:ff:
11:90:2d:e5:d1:10:a7:ba:a9:0a:ff:b2:eb:d0:86:
70:eb:47:49:95:6e:6c:9a:56:e0:78:a8:e3:dc:ae:
e0:0f:73:cb:58:a5:6d:7e:75:85:d8:4b:75:e0:53:
15:27:af:ba:98:43:a0:ae:b5:0c:7b:34:29:4f:7f:
e9:a0:77:4a:bd:86:2e:db:eb:36:b8:60:fc:14:0c:
fb:cd:8e:a0:fc:4a:b9:c2:e2:67:cd:6a:49:52:f8:
4a:a0:bf:a5:82:7b:47:5b:ac:5b:8f:71:ac:c0:3e:
8a:77:01:2b:1c:ec:7f:df:65:fe:8a:07:77:eb:5e:
e8:49:cd:62:ce:0e:5a:84:cc:ee:06:82:bf:59:1d:
53:73:50:7e:8f:4e:a6:6e:f9:f8:19:bb:05:54:70:
ec:bd:c5:77:94:34:fa:3a:3c:01:89:54:4b:4c:9c:
6b:c3:2e:1f:94:d5:4b:6c:0d:d0:7c:92:61:93:6e:
1f:7e:d6:ba:72:13:64:51:a1:b7:5f:4d:8e:a7:1d:
2c:ac:25:44:a4:f2:a4:dc:07:3c:ed:64:4e:58:30:
50:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:52:05:A7:19:4E:C6:99:51:74:C7:7A:F3:D1:72:7A:6F:3C:31:7F
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:93:c3:83:9e:1c:9c:e5:db:50:e6:ac:4f:69:05:cf:04:d4:
01:3f:74:9f:b8:36:09:d3:c0:c1:48:2b:52:16:01:28:0d:c4:
07:41:f3:77:f2:e2:51:21:cc:be:28:f9:24:35:56:ed:4b:07:
3e:bf:40:d0:52:18:dc:8b:d4:66:1e:e5:cd:47:45:65:a7:0b:
24:cd:32:94:81:71:3f:6b:eb:8e:df:b2:21:33:31:49:c1:ed:
ad:64:8c:7f:e2:49:85:63:7c:b9:f6:64:91:63:38:c1:17:51:
f4:46:e7:1f:10:f5:47:c7:d0:7b:5c:f5:95:0d:56:86:29:28:
64:a3:92:82:d2:e7:94:17:b2:9f:0f:59:95:b2:15:9d:80:06:
c4:fc:6e:97:0a:74:43:82:28:b0:16:da:77:27:4f:d0:2d:ba:
2a:e3:b1:c9:d7:71:63:42:eb:22:7c:46:c6:e7:95:95:29:6b:
72:02:49:19:dd:44:b7:92:0a:ec:be:11:5d:30:01:a9:9e:f3:
a7:58:cc:85:ff:98:72:8b:01:40:2b:67:24:80:4e:6b:06:54:
53:39:34:c3:b0:5f:48:8f:4a:35:20:82:25:54:43:bb:dc:fb:
dd:da:13:ed:b8:b9:fa:3b:4a:0e:81:89:cf:bb:b1:b4:1d:97:
47:9d:34:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:20:21 2026 by rpki-client