Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File: AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier: R9jicjFg1JCQPvFEKZVj8qjy0jC5L9Sbf2eIzHmrwh0=
Subject key identifier: F8:DA:64:07:5C:D6:08:EC:DE:07:BA:BA:54:C2:E5:33:7C:30:91:B3
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial: 019EBEED2C48E1F05160419BCA56FF218E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number: 0A30
Signing time: Sat 13 Jun 2026 03:01:14 +0000
Manifest this update: Sat 13 Jun 2026 03:01:14 +0000
Manifest next update: Sun 14 Jun 2026 03:01:14 +0000
Files and hashes: 1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: 2RsxRLE8YM08XaALZCJ6Q7VArL5CBuJLzSshhWxY6mE=)
2: JpSPlDAfnmaVaihRumPcTPfmvXc.roa (hash: Y5Z9rAeAn1T7cnOOHo3m55iyERIOyEhwXNrdUR5k5k4=)
3: joOy9zn86SRS3S0JJdQNk7WRD1s.roa (hash: 6Lg/ZII9MO/NUIL4lYaxUeR/rqOY01y6TRhSs+4wA6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:2c:48:e1:f0:51:60:41:9b:ca:56:ff:21:8e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Validity
Not Before: Jun 13 03:01:14 2026 GMT
Not After : Jun 14 03:01:14 2026 GMT
Subject: CN=f8da64075cd608ecde07baba54c2e5337c3091b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1b:44:c0:bc:62:19:3e:d1:c7:93:31:28:48:
7b:5c:39:2a:48:37:8d:60:91:0a:74:9f:07:5e:f1:
b4:f0:ca:51:75:6f:62:21:50:22:01:d9:eb:61:d9:
0a:29:5e:95:93:03:95:65:3a:9e:38:81:bb:54:bf:
4f:10:53:93:ee:9f:3e:88:15:26:a0:a9:6e:fa:e8:
b2:22:56:f0:98:66:bc:da:79:6d:c5:1c:2d:96:41:
a6:d2:de:89:8d:d3:64:05:88:f6:c7:d6:ff:43:43:
96:06:1f:15:1f:e5:17:e5:0d:77:28:3c:b3:18:f6:
1d:7e:21:ef:44:cb:90:43:fc:92:22:bc:2b:d1:82:
2e:03:ac:eb:45:f8:9d:59:9d:27:93:c5:24:69:96:
b5:d9:e6:c7:bf:43:79:24:0c:b0:1f:3f:da:17:13:
36:0e:9f:02:e5:bd:20:f4:e3:47:44:b0:26:6f:15:
2c:23:a5:94:35:03:c8:4b:48:06:16:b5:ea:69:2c:
fe:dc:ea:31:5e:60:b1:4f:d0:9f:20:63:d2:a4:8f:
82:69:70:e1:c8:c3:35:c6:b8:a4:0a:b6:b8:0e:52:
12:2a:fe:fc:0c:31:65:4b:18:86:68:85:6f:77:75:
69:70:79:97:34:d2:79:eb:e0:7e:ec:16:50:7d:cb:
1b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DA:64:07:5C:D6:08:EC:DE:07:BA:BA:54:C2:E5:33:7C:30:91:B3
X509v3 Authority Key Identifier:
keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:40:5a:83:c0:d5:59:31:47:88:a2:4e:c2:dc:58:b8:c9:31:
a9:23:ec:cd:f2:01:a9:24:ae:37:39:b8:0e:b6:2b:cc:a6:6e:
88:75:a7:d9:29:75:c2:93:03:72:90:22:a0:65:0d:d1:ea:bc:
89:42:5d:82:5f:6a:96:d5:bd:48:9c:ca:81:4a:49:6a:7e:87:
f1:24:9f:bc:7d:95:bc:17:ec:4f:96:66:93:a6:cb:29:72:79:
77:16:55:2d:18:73:b2:94:d4:13:6a:bc:bc:d5:5b:b7:c0:e1:
07:60:b7:f2:d8:cd:ea:bf:dc:95:d3:6d:9a:0d:cf:9a:50:6e:
0c:1c:9a:96:3a:0c:7f:43:44:e0:2e:3f:15:86:3c:53:bb:a3:
24:90:ad:30:9c:ad:63:03:01:5c:01:c3:e1:4f:6b:6f:9e:e5:
cb:70:97:4a:f5:a2:e3:00:1c:73:6f:e4:da:6e:47:70:8a:94:
20:b6:55:69:ab:ab:ad:ee:3e:66:e8:42:8e:0c:17:57:98:2a:
d1:70:7c:57:90:4d:c3:99:45:04:9e:48:97:55:11:5a:c5:d0:
78:97:51:c1:e0:d5:f6:d2:e0:47:f8:0e:40:a4:26:0b:97:7e:
c0:e9:8e:db:fa:9c:d8:cc:32:17:88:54:95:b8:46:1a:44:49:
72:57:9c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:34:22 2026 by rpki-client