Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File: AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier: +xWNHBvk0dVkPwd3XKWc5uhkytrdC2Qnt+8EL5/Hu34=
Subject key identifier: 8C:7E:4A:DC:93:92:6A:AB:D6:B0:F7:CE:0F:45:BB:30:13:54:AC:2C
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial: 019CAFB5F8D204B45FBFAE7037FACA01181E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number: 091F
Signing time: Mon 02 Mar 2026 18:01:04 +0000
Manifest this update: Mon 02 Mar 2026 18:01:04 +0000
Manifest next update: Tue 03 Mar 2026 18:01:04 +0000
Files and hashes: 1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: PmH3B+405uRVoQuMr1cN6b+TKpVONTEh9SVDvGsMYJc=)
2: JpSPlDAfnmaVaihRumPcTPfmvXc.roa (hash: Y5Z9rAeAn1T7cnOOHo3m55iyERIOyEhwXNrdUR5k5k4=)
3: joOy9zn86SRS3S0JJdQNk7WRD1s.roa (hash: 6Lg/ZII9MO/NUIL4lYaxUeR/rqOY01y6TRhSs+4wA6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:f8:d2:04:b4:5f:bf:ae:70:37:fa:ca:01:18:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Validity
Not Before: Mar 2 18:01:04 2026 GMT
Not After : Mar 3 18:01:04 2026 GMT
Subject: CN=8c7e4adc93926aabd6b0f7ce0f45bb301354ac2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:2e:f7:0e:66:0e:d8:e3:be:b9:eb:07:7b:
4c:c0:78:74:5b:56:d1:d9:ec:29:90:4e:7b:70:3e:
f9:f6:c0:e8:4b:c3:ca:5a:71:b6:3f:c6:6c:40:ce:
33:aa:7c:97:0d:96:af:0e:a9:2b:60:52:5a:2c:72:
fb:97:0c:b4:7e:1c:28:2c:9d:69:5e:0f:ff:48:33:
ba:2e:48:27:b6:f9:7b:b1:32:cc:8b:4e:c7:e1:96:
95:6a:35:84:c1:ce:66:bf:18:f0:55:4f:e2:1a:56:
73:6f:99:34:5e:0e:76:d8:49:1f:38:74:26:c5:a5:
a1:20:a0:44:e4:f3:03:07:82:0c:b1:d8:54:25:17:
0c:6c:e0:d5:6a:21:75:90:ac:1f:15:cd:91:a7:8d:
fd:42:d2:8b:89:2e:25:a2:e0:e7:76:9f:db:9a:2e:
ca:35:9b:fc:22:3b:94:fe:03:18:38:62:77:46:40:
5b:c5:e3:31:77:71:15:0f:7e:86:31:75:2b:40:15:
42:cf:69:c0:02:3a:c4:64:79:2e:d3:71:4b:e6:bc:
89:7a:33:5d:48:1f:21:eb:b5:59:b6:34:b3:61:f5:
b6:d1:99:54:b8:5f:36:78:49:af:69:b7:77:c3:47:
93:6b:db:39:20:82:ba:0d:b1:9e:6c:c1:53:3e:54:
fb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7E:4A:DC:93:92:6A:AB:D6:B0:F7:CE:0F:45:BB:30:13:54:AC:2C
X509v3 Authority Key Identifier:
keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1c:52:e3:3d:9a:b9:79:3e:78:d4:9f:f3:f3:f2:ad:e4:5e:
7e:c9:ca:ae:7e:a5:a2:0b:a2:3c:22:6a:21:68:d2:50:dd:b0:
73:b6:f4:5a:6b:17:20:0f:82:35:5a:9a:91:7e:3e:3e:39:58:
79:87:69:e5:30:40:72:8a:3f:ab:5c:3f:3e:e6:7a:2a:fa:69:
7b:ea:27:b3:f5:67:93:45:dc:1f:1d:e3:52:c2:2f:15:b8:0e:
09:ad:35:81:db:95:10:e0:e8:0e:16:c6:17:29:1a:5e:c7:60:
00:d9:4f:e1:43:4f:5f:a8:d8:31:27:fe:c1:46:eb:99:89:9b:
1c:26:60:ec:51:55:51:07:63:a5:39:e6:04:f5:bb:3b:58:bd:
33:f5:98:84:4f:fe:70:af:f0:bd:22:73:85:ae:a1:48:e5:a1:
11:ef:30:be:f6:b6:3b:12:bf:20:36:5a:fa:8b:cc:8b:c7:b4:
08:83:1b:f9:bc:b0:0a:fe:03:52:1b:2c:35:c8:e1:20:39:a3:
46:1b:6c:4f:d2:ae:81:69:5f:fb:ca:d8:f5:f4:f7:e7:f9:77:
09:81:6f:b7:8e:17:d0:91:7d:23:15:23:d1:d6:49:49:2d:dc:
e5:58:43:32:da:ec:8d:6d:88:68:58:d5:f2:1a:19:92:30:2d:
da:0f:7e:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvtfjSBLRfv65wN/rKARgeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjRkYjFkY2YwYzI0MjllMTIxNTE2YWUyNzkyZmMzMjUz
ZmQzYmEwHhcNMjYwMzAyMTgwMTA0WhcNMjYwMzAzMTgwMTA0WjAzMTEwLwYDVQQD
Eyg4YzdlNGFkYzkzOTI2YWFiZDZiMGY3Y2UwZjQ1YmIzMDEzNTRhYzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG0u9w5mDtjjvrnrB3tMwHh0W1bR
2ewpkE57cD759sDoS8PKWnG2P8ZsQM4zqnyXDZavDqkrYFJaLHL7lwy0fhwoLJ1p
Xg//SDO6Lkgntvl7sTLMi07H4ZaVajWEwc5mvxjwVU/iGlZzb5k0Xg522EkfOHQm
xaWhIKBE5PMDB4IMsdhUJRcMbODVaiF1kKwfFc2Rp439QtKLiS4louDndp/bmi7K
NZv8IjuU/gMYOGJ3RkBbxeMxd3EVD36GMXUrQBVCz2nAAjrEZHku03FL5ryJejNd
SB8h67VZtjSzYfW20ZlUuF82eEmvabd3w0eTa9s5IIK6DbGebMFTPlT7XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIx+StyTkmqr1rD3zg9FuzATVKwsMB8GA1UdIwQY
MBaAFAMk2x3PDCQp4SFRauJ5L8MlP9O6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85MGY5NDItNjUxMS00MDU0LTk0YmUt
NGQyYzRkYTcyMWQ0LzEvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85MGY5NDItNjUxMS00MDU0LTk0YmUtNGQyYzRkYTcyMWQ0
LzEvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqxxS4z2a
uXk+eNSf8/PyreRefsnKrn6loguiPCJqIWjSUN2wc7b0WmsXIA+CNVqakX4+PjlY
eYdp5TBAcoo/q1w/PuZ6Kvppe+ons/Vnk0XcHx3jUsIvFbgOCa01gduVEODoDhbG
FykaXsdgANlP4UNPX6jYMSf+wUbrmYmbHCZg7FFVUQdjpTnmBPW7O1i9M/WYhE/+
cK/wvSJzha6hSOWhEe8wvva2OxK/IDZa+ovMi8e0CIMb+bywCv4DUhssNcjhIDmj
RhtsT9KugWlf+8rY9fT35/l3CYFvt44X0JF9IxUj0dZJSS3c5VhDMtrsjW2IaFjV
8hoZkjAt2g9+Gg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:57 2026 by rpki-client