Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File: AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier: +UJjkUWMQ0xWbjqlRwJyWOJcNoL+EFuZ8mioaFIT2I4=
Subject key identifier: 70:41:B0:BD:D5:72:03:08:40:CA:F8:B0:17:14:8E:07:6D:2A:E1:3C
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial: 019D99630E13A230A29E3279A240CBCA2E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number: 0998
Signing time: Fri 17 Apr 2026 03:01:38 +0000
Manifest this update: Fri 17 Apr 2026 03:01:38 +0000
Manifest next update: Sat 18 Apr 2026 03:01:38 +0000
Files and hashes: 1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: Cec28560KHCg4XHu42SVbIqlH472u8F74Tx7eTXB7ns=)
2: JpSPlDAfnmaVaihRumPcTPfmvXc.roa (hash: Y5Z9rAeAn1T7cnOOHo3m55iyERIOyEhwXNrdUR5k5k4=)
3: joOy9zn86SRS3S0JJdQNk7WRD1s.roa (hash: 6Lg/ZII9MO/NUIL4lYaxUeR/rqOY01y6TRhSs+4wA6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:0e:13:a2:30:a2:9e:32:79:a2:40:cb:ca:2e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Validity
Not Before: Apr 17 03:01:38 2026 GMT
Not After : Apr 18 03:01:38 2026 GMT
Subject: CN=7041b0bdd572030840caf8b017148e076d2ae13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:c4:2f:4a:a8:f3:58:fa:1e:a8:14:b7:27:
40:f6:8e:00:e5:40:cb:d6:0a:e5:cd:02:fc:0b:0c:
5a:e6:47:17:97:31:b0:5c:86:b7:ce:09:d1:ae:96:
dd:b0:78:a0:bb:47:07:17:bc:b2:b5:8a:bd:79:f5:
6d:ec:37:a1:ea:e8:75:58:a3:fb:78:df:25:2d:a5:
ec:5c:bc:a4:61:31:a6:1e:88:14:47:4e:dd:a2:0f:
14:c7:9f:d8:e1:78:fb:09:02:0e:45:e3:8d:8b:cd:
06:85:f5:38:24:bd:2f:02:2e:7f:ff:49:fc:04:a3:
41:32:9f:d1:d1:10:f1:56:a2:14:4b:23:10:7a:7e:
a9:3f:60:fa:43:9b:fc:23:c1:56:71:57:21:74:43:
45:f3:bd:5d:ba:21:e1:86:17:4d:1e:97:7c:7f:5d:
b5:4b:07:44:1c:a6:25:10:5d:d6:ff:0b:b3:89:ba:
87:6c:1b:94:54:6c:49:12:27:0f:6a:4c:61:7f:0e:
68:7c:ce:ca:b8:ae:5f:8f:65:b0:78:77:1a:fb:03:
45:b1:b9:8c:3e:3c:3f:7b:9a:c2:79:df:8c:33:4d:
69:47:51:ff:97:80:39:18:0c:54:7e:b6:d4:8a:be:
a5:8c:10:08:d7:59:88:7c:3a:5b:36:a4:b4:79:f8:
fb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:41:B0:BD:D5:72:03:08:40:CA:F8:B0:17:14:8E:07:6D:2A:E1:3C
X509v3 Authority Key Identifier:
keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:80:13:aa:18:f6:98:6b:46:4b:12:be:65:ae:9b:75:59:0d:
83:23:c4:16:15:09:4f:b5:7f:a3:b1:8c:f4:4b:e4:b9:22:f9:
2e:a6:0e:8e:18:72:1f:a6:2c:75:00:7e:09:e5:ad:56:04:d1:
b3:c4:df:50:64:2c:09:e1:34:b4:e5:da:61:9f:cf:d4:72:f5:
4c:07:86:62:a8:78:ba:5c:68:a4:2b:9a:9c:60:b0:9d:7c:f8:
a3:2b:77:3d:cb:de:91:45:66:1c:03:b6:4b:2a:dd:66:62:fa:
48:91:30:61:b7:2a:5e:f4:ad:f3:fa:7e:3c:fe:b7:0b:99:07:
59:b2:23:57:96:9a:31:3e:3a:6c:0f:dd:76:08:00:8f:37:4f:
ee:9e:06:15:50:d7:b0:13:65:44:6b:f8:a3:c9:00:10:4e:81:
21:70:ec:a5:c4:3f:37:3e:93:7a:aa:b0:a0:84:19:81:18:9d:
b2:85:87:aa:61:43:ac:1e:a5:6e:6e:ef:c9:54:7b:04:9b:5a:
63:42:7e:16:a6:14:65:94:98:ad:8b:a8:5e:3e:9c:db:f6:73:
f0:82:66:c7:7e:c5:f3:53:ea:14:e4:c9:fb:a1:cb:75:53:6e:
dd:02:95:49:a5:58:2b:ef:ae:d7:9f:c6:20:f8:5f:12:78:22:
f2:97:8a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:05 2026 by rpki-client