Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
File: AyudLeU3ELMVjkLyKIkQnixA9Ds.mft (raw, json)
Hash identifier: 46mbmVHtn5au0M5IDRiAkyG9qxwfDQm3iE4F1V1h56Q=
Subject key identifier: 73:2E:06:E1:B6:7C:21:8F:F5:35:B6:7D:07:DE:C4:14:C6:93:60:08
Authority key identifier: 03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
Certificate issuer: /CN=032b9d2de53710b3158e42f22889109e2c40f43b
Certificate serial: 019CAAC71D26EDEA45E1087F14D2A45194B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
Manifest number: 0653
Signing time: Sun 01 Mar 2026 19:01:41 +0000
Manifest this update: Sun 01 Mar 2026 19:01:41 +0000
Manifest next update: Mon 02 Mar 2026 19:01:41 +0000
Files and hashes: 1: AyudLeU3ELMVjkLyKIkQnixA9Ds.crl (hash: D+w6zYPRT0kKT24dAyjdebluLT2Pifr8vdtlOlaliGk=)
2: Bg94-F9i2Jnpyy_ChTan2u5FmyY.roa (hash: DEbeaWmESIJAfvI0AWdbHW3D5o5mtMuvaof9/WcDDdY=)
3: MAirATMkm_jSRjxp9j7Z40-VKMs.roa (hash: /u+Oro6kRKO2TwnukQ7TlHOXZWANvODIogmazhvXP0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:1d:26:ed:ea:45:e1:08:7f:14:d2:a4:51:94:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032b9d2de53710b3158e42f22889109e2c40f43b
Validity
Not Before: Mar 1 19:01:41 2026 GMT
Not After : Mar 2 19:01:41 2026 GMT
Subject: CN=732e06e1b67c218ff535b67d07dec414c6936008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:1d:38:9b:73:1b:3c:5a:d2:7c:40:9e:1e:
1b:cc:ae:72:8b:6d:c4:51:71:6d:b6:5a:1d:3a:f4:
49:b7:dc:8a:a6:0e:7b:95:6b:6f:93:a0:c0:12:38:
08:fe:e4:8e:b0:e0:00:69:6b:b7:20:a5:6a:e3:e1:
9d:44:45:ff:d9:85:d2:aa:18:10:dc:eb:83:f6:08:
29:e1:d2:d1:a9:d3:4c:9d:7e:5e:21:5e:5f:5d:5f:
e2:ff:95:52:58:c9:c6:1a:67:e6:79:23:e2:be:8a:
01:16:ff:14:55:7a:5c:e7:38:a8:51:d5:7d:8c:3b:
ef:df:03:b5:16:98:bb:e1:48:fa:6f:30:98:a2:81:
f2:1a:b7:30:f1:44:4b:aa:83:6d:af:14:e9:45:5e:
96:17:14:64:20:6f:b8:d4:e4:34:8d:d5:7b:34:24:
91:f6:b7:ce:aa:e2:ff:9e:5b:64:cf:fd:8e:f6:bd:
8b:d8:f3:2d:cd:0d:da:3d:bb:48:e3:d8:43:87:6b:
b8:f2:ca:61:6f:b7:c3:d1:9e:ab:af:4d:b6:73:a6:
8f:5f:b6:8c:52:00:54:fa:0e:8b:e6:26:b8:9a:4d:
9f:6f:1d:9d:84:2c:53:e0:8e:4a:9d:75:7d:11:2f:
d1:76:45:a8:64:7c:06:58:8a:a6:8a:5d:a5:3d:a2:
32:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2E:06:E1:B6:7C:21:8F:F5:35:B6:7D:07:DE:C4:14:C6:93:60:08
X509v3 Authority Key Identifier:
keyid:03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b8:d8:b2:05:c2:cd:ca:f9:e1:2e:fd:18:4d:4f:40:b5:80:
df:69:45:46:c1:5f:0e:71:f7:c0:d9:01:c0:18:30:33:f0:2d:
9d:ec:fc:bd:db:a7:56:6e:f2:ae:c1:f0:d4:bc:19:4d:01:45:
26:e8:f0:5c:31:57:6d:b8:92:9f:19:e9:89:2f:f3:a0:e1:f3:
6d:92:ed:51:a5:d4:6e:2f:49:40:21:cd:6a:57:5f:e5:8c:10:
e8:49:e4:f6:9d:e6:94:56:27:87:e0:c2:83:1d:65:1e:87:33:
6b:c4:76:eb:de:61:6b:96:20:f5:5b:2a:7a:5c:cf:2e:b1:b5:
00:40:e8:af:eb:68:fa:1e:48:54:c7:65:5c:5a:db:cf:61:ab:
3a:6a:5d:c0:66:f1:03:ca:c7:2d:94:2f:52:45:71:65:d6:53:
29:da:e5:fb:c8:6f:52:3d:3e:41:f0:21:6b:08:b4:c1:84:95:
ea:ac:d1:4d:e8:44:a4:b1:c0:04:11:88:9c:af:9a:e2:04:56:
40:72:60:cd:b0:24:54:fe:ba:76:f8:35:fc:b5:02:b1:5b:3d:
ee:ea:6e:66:13:e0:c7:6c:1e:3a:da:55:c6:eb:7b:51:6c:1c:
46:a5:68:e8:af:10:b1:c1:ab:05:76:26:20:e7:d1:ba:94:49:
1d:9b:b0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:42 2026 by rpki-client