Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: FaYSID6rZhNnLoMqJbiWp2yGu3bvv26+1wBQbqJFgeo=
Subject key identifier: 0A:C8:E4:AC:63:70:26:E3:EA:83:1F:72:E3:81:54:6D:31:CB:02:28
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 019CAA2152E471DFEF1F8627F52B9691B294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 14B9
Signing time: Sun 01 Mar 2026 16:00:36 +0000
Manifest this update: Sun 01 Mar 2026 16:00:36 +0000
Manifest next update: Mon 02 Mar 2026 16:00:36 +0000
Files and hashes: 1: WrRSKzPOj6BgLow6AweYah_e1dA.roa (hash: zp8UwEZpI6bsmG4yaK4JetrekeKEEBLqIzJ3Rz0Eig8=)
2: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: jNQmXeZrdum1ibu0gOESdGTkz6oimkB40o4zdUPFJwI=)
3: uR1vfe6fR6lmKLx_KpYnu1pkQe8.roa (hash: rrB4HqghjaNhMjUMgJmTsjzw4hoiQcENyKRyhlNILHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:52:e4:71:df:ef:1f:86:27:f5:2b:96:91:b2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Mar 1 16:00:36 2026 GMT
Not After : Mar 2 16:00:36 2026 GMT
Subject: CN=0ac8e4ac637026e3ea831f72e381546d31cb0228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:fc:3e:7a:38:b3:9c:c6:b8:8b:7c:14:fe:
77:de:a0:24:ce:d0:c7:9f:fc:a0:a8:cc:40:9f:13:
7f:ef:26:7b:06:72:da:a3:b7:82:3b:69:f7:7d:2c:
6e:de:96:bc:e5:15:83:6b:23:2b:32:15:45:7c:5c:
2d:f9:7f:42:bf:5b:32:73:68:af:cb:bc:d0:64:d6:
31:8d:fe:58:cc:9a:c8:aa:0a:bf:b7:5f:31:d0:0c:
61:a4:63:ff:3b:17:6e:3a:76:87:21:ab:39:7c:14:
20:c0:a9:98:85:99:db:72:c8:b7:c9:d6:74:a8:b6:
05:48:74:17:3e:ff:57:0b:ff:e3:6b:e6:3a:07:86:
70:98:08:50:77:4d:7e:d6:7b:61:9f:b9:7e:a9:14:
67:33:2a:dc:02:b2:7f:fd:78:f0:36:4b:01:9a:fa:
77:c7:15:8b:35:05:96:8f:58:94:8f:da:46:35:3b:
ab:96:7a:ec:58:4c:f7:34:41:f7:6e:7b:21:de:de:
4f:19:95:d2:c1:87:a2:70:da:56:77:d2:63:df:db:
f3:40:20:28:08:5a:96:4a:cb:4a:95:c8:43:cb:29:
bc:9b:0b:19:81:75:68:9b:68:2b:20:18:52:c1:f8:
26:ef:75:07:d0:81:ae:9d:13:ad:7a:09:2f:72:e1:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C8:E4:AC:63:70:26:E3:EA:83:1F:72:E3:81:54:6D:31:CB:02:28
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:82:3a:cb:e4:cd:4c:98:ee:19:e8:bf:30:a1:b6:6d:e3:16:
db:60:8d:40:c3:94:38:67:a8:df:ea:dd:ec:47:fc:3b:dc:66:
98:70:b4:c2:23:20:41:ae:d9:05:94:f0:7c:bd:b3:6b:fc:66:
c1:fa:1d:d3:29:c8:1d:d9:43:49:0a:a9:0f:2d:c4:81:f7:70:
d2:47:a8:95:3b:bc:a2:fc:f1:16:0c:1d:2e:13:68:19:92:06:
69:c6:5f:7a:26:5a:65:60:84:38:e4:8b:4f:fc:62:2b:e6:23:
8a:16:50:c8:dc:e9:b1:3b:0b:0e:7b:3f:f2:b0:65:ac:e2:38:
c9:52:29:35:10:0e:8a:99:a6:15:db:88:f9:9b:4f:79:de:71:
90:a3:13:0a:62:bc:f6:b1:4c:30:68:a7:0e:2b:86:ae:a9:17:
bc:e2:7e:f1:e6:4f:b6:c4:3e:f6:fd:d2:ef:97:4e:28:b5:2a:
a6:e2:62:41:d6:ee:73:e7:4d:93:11:50:c4:0b:42:4d:0b:47:
c0:8c:a3:5e:86:cd:1a:84:15:26:61:c5:5a:38:31:6f:e7:cb:
52:d3:ed:1a:93:73:c5:ba:f3:5e:eb:52:ad:28:db:a1:36:7b:
5b:98:4b:0d:4d:02:51:fa:50:c2:89:35:1d:01:04:1c:39:9e:
c0:18:3e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:43 2026 by rpki-client