Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File: AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier: evUMAa+PvdDL5OIwxz+LU0FY6Xn2HxpgVeJhn1ipivs=
Subject key identifier: E8:5C:C2:81:07:16:63:02:9E:D8:D3:7B:7A:E6:16:33:77:C6:AA:E6
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial: 019FA89A202DB2868B04C4E75D23F74FECBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number: 0AA9
Signing time: Tue 28 Jul 2026 12:01:40 +0000
Manifest this update: Tue 28 Jul 2026 12:01:40 +0000
Manifest next update: Wed 29 Jul 2026 12:01:40 +0000
Files and hashes: 1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: iK/WS9DHBuvCXuiZCG1P1V+QEWlpkp1poHUbHq+sMoI=)
2: JpSPlDAfnmaVaihRumPcTPfmvXc.roa (hash: Y5Z9rAeAn1T7cnOOHo3m55iyERIOyEhwXNrdUR5k5k4=)
3: joOy9zn86SRS3S0JJdQNk7WRD1s.roa (hash: 6Lg/ZII9MO/NUIL4lYaxUeR/rqOY01y6TRhSs+4wA6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:20:2d:b2:86:8b:04:c4:e7:5d:23:f7:4f:ec:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Validity
Not Before: Jul 28 12:01:40 2026 GMT
Not After : Jul 29 12:01:40 2026 GMT
Subject: CN=e85cc281071663029ed8d37b7ae6163377c6aae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:3a:b3:ed:e2:c8:db:e3:5e:6d:43:3d:c6:
e4:27:e1:26:fe:da:25:e1:2a:09:b1:3c:b1:27:9b:
ca:ca:c2:cc:62:2a:be:b0:e1:24:2e:17:29:9a:aa:
f6:f3:0c:1e:c1:58:39:50:28:de:ef:42:f5:ba:0d:
31:2b:27:67:e9:e5:e9:79:f7:da:94:d7:84:d8:f8:
a3:62:7e:5a:07:8f:ee:c2:fa:aa:c5:85:ba:ea:6a:
c7:4c:59:88:ca:9a:87:bd:dc:fc:00:84:6e:07:19:
4a:37:a9:6a:f2:69:98:99:82:42:e8:a3:e4:48:5d:
95:e6:5b:97:f0:05:1f:35:80:77:f1:67:de:a0:bd:
ef:b9:43:ca:f3:4f:56:ab:f1:37:5e:d1:9e:9b:36:
d9:78:c9:50:f3:78:7f:79:d0:27:6d:0e:0c:8a:8e:
ad:02:29:92:e5:15:c4:e5:e0:01:61:66:af:7d:6c:
cc:75:14:f7:3d:26:b8:0a:e1:30:60:d4:5b:05:f5:
b5:cd:36:1f:ec:96:6d:6c:8a:c3:a1:cd:fd:9c:33:
cc:06:67:b9:c1:38:e0:6a:88:83:3d:6a:19:f3:1e:
e4:f7:75:45:bb:86:c8:f7:cc:64:35:37:ec:98:1b:
1f:11:b2:71:d8:98:ab:8c:d3:a4:37:20:b2:c7:20:
ef:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5C:C2:81:07:16:63:02:9E:D8:D3:7B:7A:E6:16:33:77:C6:AA:E6
X509v3 Authority Key Identifier:
keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:70:34:9a:bd:fa:16:c0:32:12:85:50:fb:ac:c6:24:f0:ab:
34:86:f5:82:da:62:76:f2:92:10:c7:18:69:b3:b3:87:55:80:
95:1a:2f:d1:5e:fd:17:35:82:46:08:bf:85:3b:38:91:73:06:
b1:87:38:28:d1:91:55:7a:a3:d2:41:84:63:35:ce:1f:76:5d:
ca:d2:46:ef:32:84:66:2c:a8:d6:35:e8:c9:e0:33:c2:73:1c:
64:4a:59:63:2d:56:53:27:f1:98:94:c8:72:d8:e9:db:1f:11:
8b:76:35:d9:36:dd:2a:ed:8f:49:cf:26:8d:51:6f:95:d6:48:
cd:9f:15:ad:89:07:95:fe:19:85:0f:5c:ed:8d:80:28:8b:5a:
54:20:b5:08:83:75:67:29:9c:63:d7:2e:97:de:27:1c:d0:56:
62:d3:1e:ff:22:f0:13:0f:a1:10:c6:30:fb:0b:cc:58:29:0f:
d9:de:b7:84:20:a8:3c:55:6c:6d:30:da:dd:35:7a:39:a1:0a:
43:0f:25:0f:fb:23:f7:80:d7:18:1d:a3:a6:54:7a:a2:8c:21:
00:fc:31:66:0c:cb:cb:db:67:86:9c:db:16:07:c0:28:07:ac:
af:51:4f:15:49:31:2f:b9:87:9c:6f:e1:3e:6f:c7:15:80:12:
a7:32:f6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:15:56 2026 by rpki-client