Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: GpJe4fsrLHqfGL58NFaUknaHo5vl1qUnz3D6srxxLRA=
Subject key identifier: 8A:01:BD:C7:D9:32:8B:5A:A2:A6:F4:2E:8B:01:B4:A6:DC:38:14:83
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 019D9999881E3CF563DC918DAAEE465BC897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 1535
Signing time: Fri 17 Apr 2026 04:01:09 +0000
Manifest this update: Fri 17 Apr 2026 04:01:09 +0000
Manifest next update: Sat 18 Apr 2026 04:01:09 +0000
Files and hashes: 1: WrRSKzPOj6BgLow6AweYah_e1dA.roa (hash: zp8UwEZpI6bsmG4yaK4JetrekeKEEBLqIzJ3Rz0Eig8=)
2: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: 9pZZzgceD4TEgtKeEDrGRGp+esfWlJXI2mWXNQraqqU=)
3: uR1vfe6fR6lmKLx_KpYnu1pkQe8.roa (hash: rrB4HqghjaNhMjUMgJmTsjzw4hoiQcENyKRyhlNILHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:88:1e:3c:f5:63:dc:91:8d:aa:ee:46:5b:c8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Apr 17 04:01:09 2026 GMT
Not After : Apr 18 04:01:09 2026 GMT
Subject: CN=8a01bdc7d9328b5aa2a6f42e8b01b4a6dc381483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:80:3d:e1:a8:a3:a4:d5:d2:c8:0f:ce:82:
95:eb:51:ca:b4:1e:f8:c4:0a:70:28:66:74:40:f0:
a5:6a:be:45:d3:47:53:68:b0:39:9f:98:20:f8:ff:
c5:28:c2:0b:90:5f:29:c6:f7:0d:db:0f:49:36:70:
06:03:6d:e3:05:78:3b:f1:1f:bb:63:60:18:29:73:
4b:98:37:09:96:04:4f:a9:9f:cf:c7:9f:d8:f7:6d:
15:0b:0f:89:bc:29:bb:5e:80:2a:dd:5f:38:a2:d1:
af:f0:1e:4e:c3:d3:ed:46:77:ac:1a:3b:a5:36:10:
5d:c7:70:de:c3:0e:7d:07:e9:68:93:dd:21:80:d2:
1b:bd:82:d8:0c:63:ab:c6:19:d5:47:c2:a0:a2:48:
af:b5:03:08:35:08:54:ee:23:6b:5b:be:68:d1:d4:
7f:47:99:d9:38:cf:eb:cb:a9:ee:8c:94:8a:75:fb:
42:9f:cf:37:db:4d:65:6b:99:44:c1:c9:b1:1e:0a:
40:d6:20:66:2e:dd:c0:ae:03:98:b7:d5:1b:03:5a:
30:f6:d1:09:07:39:65:a2:51:94:a8:35:e5:33:ee:
75:1d:00:ec:22:3b:9a:94:87:bf:2d:cb:d1:f8:4c:
29:0c:51:b5:75:1d:db:0e:ba:ab:0a:d7:d2:c0:34:
ce:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:01:BD:C7:D9:32:8B:5A:A2:A6:F4:2E:8B:01:B4:A6:DC:38:14:83
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2c:b6:4f:8d:a4:6a:32:54:d8:f7:90:aa:27:7d:f3:9c:b5:
cd:b5:f2:68:46:59:81:f2:8f:e4:6d:ba:75:c4:10:bc:68:14:
59:92:72:55:a3:fc:64:26:c2:4f:24:04:3a:30:3c:6a:00:b7:
a4:98:67:8f:00:8d:76:9b:8d:85:34:6b:d5:88:78:68:10:40:
a3:36:a1:b0:00:66:a2:dd:ee:fd:31:f8:9c:57:6a:c2:aa:e5:
1f:94:2e:3f:de:9c:17:13:d0:2d:d3:8a:a4:2f:7e:e1:a8:dd:
34:d0:d8:5b:32:b4:7e:f7:94:ef:ec:0b:4d:a9:e9:50:33:df:
f8:3f:f3:5e:66:66:fe:cf:80:ea:71:84:96:9d:e6:99:30:e1:
ed:1b:5f:c8:ea:81:a2:98:f8:ee:8c:3d:f1:67:9b:2c:47:0b:
09:c2:69:78:5f:c9:36:ba:c8:cc:64:db:0c:ba:02:a6:30:59:
b7:e8:82:fa:bc:9f:18:13:db:a0:0f:f4:5e:69:a4:2c:5e:d5:
85:48:53:50:9e:ed:02:49:f6:af:5e:da:10:9a:a6:0c:4b:7e:
d1:9a:2b:cf:50:66:c6:f7:9d:4e:38:86:e9:b1:eb:64:58:46:
2f:0b:7b:d0:8b:a7:42:98:bc:82:64:63:96:61:6a:1f:58:7e:
b4:d4:ee:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:40 2026 by rpki-client