Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: Au/uloq20XbPYDq5UnRcScrr1NNwPNZtd6lK3EjjnAA=
Subject key identifier: 92:D7:B6:24:E6:BB:53:65:DA:0A:E3:A3:DE:56:F7:9C:2B:96:5F:77
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 019FA8D051D6E6FBB385D87BAFA85A29A3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 1646
Signing time: Tue 28 Jul 2026 13:00:52 +0000
Manifest this update: Tue 28 Jul 2026 13:00:52 +0000
Manifest next update: Wed 29 Jul 2026 13:00:52 +0000
Files and hashes: 1: WrRSKzPOj6BgLow6AweYah_e1dA.roa (hash: zp8UwEZpI6bsmG4yaK4JetrekeKEEBLqIzJ3Rz0Eig8=)
2: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: WzOelW1mC/r/iBCYpJuryjChCK5lzNrRHXWdPzOemDI=)
3: uR1vfe6fR6lmKLx_KpYnu1pkQe8.roa (hash: rrB4HqghjaNhMjUMgJmTsjzw4hoiQcENyKRyhlNILHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:51:d6:e6:fb:b3:85:d8:7b:af:a8:5a:29:a3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Jul 28 13:00:52 2026 GMT
Not After : Jul 29 13:00:52 2026 GMT
Subject: CN=92d7b624e6bb5365da0ae3a3de56f79c2b965f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:85:69:fe:10:12:11:db:3f:db:74:89:60:
68:80:5d:b7:77:1e:84:85:8f:9c:63:1f:5a:18:4e:
44:18:e6:15:68:a3:f8:4f:8f:45:45:e4:47:62:9f:
a4:b7:c0:1f:ab:73:37:fb:83:6a:52:5c:20:01:dd:
99:2c:1c:e6:b0:1b:33:25:42:02:d7:86:b0:9a:7b:
a7:96:ed:5d:03:8e:cc:19:de:ae:f7:7f:b7:01:3e:
6e:b4:ab:09:4a:2c:1e:5f:67:3e:36:8d:5f:62:75:
33:ff:d2:bf:85:7a:5f:c4:76:99:34:26:c6:0f:83:
2f:a7:99:10:5d:85:58:1b:e4:52:93:fb:8d:b2:d4:
b2:80:b4:08:0f:66:8e:1d:eb:1f:30:b8:c8:4a:b9:
93:df:a7:0b:4c:a7:2f:81:86:6e:d8:de:8a:f0:ee:
d0:bd:a4:2c:b1:67:b2:1f:c1:2f:53:6c:d3:75:9d:
99:4e:bc:bb:0e:68:89:32:c9:98:cc:15:5d:01:82:
15:97:f7:ae:69:7e:83:df:a8:69:ab:7a:77:4c:39:
a7:b5:65:bf:a1:bd:35:ee:16:9e:e5:94:ad:02:bb:
d6:4d:65:2b:70:ab:db:6b:af:90:27:c7:b8:2c:8c:
79:4e:49:a4:40:76:77:01:e5:db:b6:74:c2:a7:c9:
dc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D7:B6:24:E6:BB:53:65:DA:0A:E3:A3:DE:56:F7:9C:2B:96:5F:77
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4b:2f:43:a6:c9:3a:50:3d:4d:bd:c2:7b:fe:c4:0b:58:7b:
83:fb:3b:bb:9d:52:eb:e2:17:14:28:31:52:ce:09:7b:ca:f0:
c6:50:d0:b4:36:a9:2f:0b:ce:1f:4f:51:97:44:8a:ee:d3:51:
6d:83:df:4d:fa:1c:e7:a3:9f:62:1b:b3:f9:d8:c7:d3:7d:4e:
73:2d:19:8c:ca:74:00:85:21:15:77:7b:de:93:8a:fa:3d:ab:
a9:e7:b2:c2:38:34:48:d6:26:d6:be:5d:ba:ff:c1:66:73:c5:
70:2b:aa:47:a4:22:3a:2c:ff:6b:37:78:f6:fa:4f:ef:89:a5:
8f:ac:88:20:99:bb:ee:eb:33:4c:12:d3:92:ae:2c:52:40:65:
35:c7:30:0f:79:63:01:fd:21:a7:e8:24:b4:9b:b5:01:a0:83:
c1:42:0c:94:41:d6:a2:cf:c7:e6:55:ed:6a:76:ac:bd:00:eb:
63:fc:6f:b9:08:d0:ee:34:36:a6:ac:10:dd:61:7f:64:a4:e3:
ef:02:f0:64:68:37:72:29:79:c0:e8:37:20:e1:38:95:c1:dc:
40:91:63:fc:77:96:aa:4e:22:c0:54:b5:6f:d4:5b:dd:0c:07:
24:7e:63:47:f0:dd:6d:09:1f:9f:bb:ff:53:d4:08:75:8b:48:
7c:dd:4e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:10:05 2026 by rpki-client