Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
File: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft (raw, json)
Hash identifier: DNeUaJPZg3D0HNsQQxI1s8CKI9HATCRciahLxf2e03g=
Subject key identifier: B7:79:A3:5B:B8:50:E2:DE:46:96:61:F9:CE:46:61:09:25:A0:A7:25
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Certificate issuer: /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial: 01A1298CB8BEBDFB27E96DF040EBC57DEFF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
Manifest number: 1A9D
Signing time: Sun 11 Oct 2026 06:00:50 +0000
Manifest this update: Sun 11 Oct 2026 06:00:50 +0000
Manifest next update: Mon 12 Oct 2026 06:00:50 +0000
Files and hashes: 1: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl (hash: aTBxbEvphJd+oWsaFY4wADR9N8RaAKcPMUTxiDmfb+o=)
2: nu_nfWvngwD8Y74CXi065T5OVuQ.roa (hash: d92WDDshr8YLz0+Twkg4dzAWaxn6uiHcpqEqs+83HsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:8c:b8:be:bd:fb:27:e9:6d:f0:40:eb:c5:7d:ef:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Validity
Not Before: Oct 11 06:00:50 2026 GMT
Not After : Oct 12 06:00:50 2026 GMT
Subject: CN=b779a35bb850e2de469661f9ce46610925a0a725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4b:e5:a0:52:1c:70:7d:cb:16:3f:40:c2:93:
1e:26:1a:7d:d5:da:3b:c4:42:74:b9:98:69:8e:ca:
ba:ce:ac:63:77:f3:96:d9:8b:ff:e5:ca:d9:36:0d:
56:1a:8f:22:27:3c:ce:3e:18:77:9c:fd:22:b3:85:
61:fc:49:ba:1a:5b:15:93:55:cd:87:64:25:3c:79:
79:f5:5a:b1:95:48:66:7f:32:11:bd:d5:c8:95:23:
95:7b:34:60:92:86:c4:8c:3a:28:ca:aa:86:9f:d9:
1e:08:b3:60:22:4b:7d:7e:23:43:f4:0f:b5:11:a8:
07:a6:e8:fc:80:43:09:dd:26:9c:ed:c7:30:6f:c3:
77:24:f2:1a:89:79:2e:e4:0d:67:ac:f1:67:56:a7:
c4:a6:21:08:ca:e8:8e:b8:5d:22:a1:a7:42:cc:2b:
33:2e:3d:47:32:7d:40:8d:28:04:b2:4b:e8:6e:2e:
ae:1b:55:b5:94:a1:33:ed:f7:81:3b:d0:9a:88:6a:
e4:a3:31:22:f4:d1:f2:9f:19:f3:f6:a4:09:a4:c8:
df:ca:75:19:6b:08:1d:95:01:52:a8:61:1c:9d:47:
4a:3e:4c:7f:e2:f2:f7:e1:fa:24:e1:03:47:f8:13:
09:a7:27:38:f2:13:94:fb:d8:18:84:1d:b2:8e:25:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:79:A3:5B:B8:50:E2:DE:46:96:61:F9:CE:46:61:09:25:A0:A7:25
X509v3 Authority Key Identifier:
keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ca:9f:86:1c:fb:66:a4:00:f9:bf:f1:33:f7:7d:66:65:dd:
8a:76:3f:17:94:3f:3f:82:59:44:af:68:31:2b:c9:ff:fc:47:
75:ec:85:bc:b1:78:ee:eb:76:6f:4d:df:7b:5b:02:89:e0:dd:
b7:1c:b6:8f:b4:ff:1a:d5:55:dd:23:82:ac:58:78:bb:0a:e6:
fd:8b:dc:d0:c8:c1:98:17:6d:4b:3c:69:c1:c3:64:33:bf:28:
8f:24:90:c7:5d:66:8a:9b:fe:3b:c0:16:4b:3d:e3:56:d1:f5:
8c:2a:87:4b:5f:c4:17:4b:8d:20:e9:7e:55:6a:8e:a4:f6:f8:
c8:c6:eb:4e:3a:45:2c:b1:8e:c9:4a:36:b1:09:f9:31:90:b2:
dc:6b:73:9a:37:00:99:2a:dc:e9:bf:ae:44:4d:35:17:db:93:
88:38:e7:a8:c8:db:0e:c6:94:58:e1:9a:43:32:8f:7e:12:c6:
a4:bb:c9:fe:2e:a4:f2:4b:de:32:93:2d:08:d3:33:73:fd:49:
4e:9c:4e:74:60:b8:5e:60:c8:27:79:14:cf:e5:6b:e5:5a:30:
9e:82:31:16:b2:c4:e9:19:45:59:50:24:58:7d:c8:67:8b:fa:
f9:6f:8a:3f:c4:bc:40:f5:33:ee:be:ef:c1:98:88:13:01:ef:
11:a0:f9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:23:24 2026 by rpki-client