Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
File: AyudLeU3ELMVjkLyKIkQnixA9Ds.mft (raw, json)
Hash identifier: PEIMwVBf11TlNQUiz5osoyV4SE6LhTNP4koIYxfjLqI=
Subject key identifier: D9:FD:4C:34:6D:CE:05:3C:97:D7:64:1C:98:8C:79:6D:C0:62:C7:A8
Authority key identifier: 03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
Certificate issuer: /CN=032b9d2de53710b3158e42f22889109e2c40f43b
Certificate serial: 01A0C3690FBD5516CD1E0C93FDFA8ED5D149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
Manifest number: 0874
Signing time: Mon 21 Sep 2026 10:00:37 +0000
Manifest this update: Mon 21 Sep 2026 10:00:37 +0000
Manifest next update: Tue 22 Sep 2026 10:00:37 +0000
Files and hashes: 1: AyudLeU3ELMVjkLyKIkQnixA9Ds.crl (hash: VZC7BTqOGYR0O9vxvH9xYgaRzunigZBVXk1JoDHJeV4=)
2: udpWdNCKkK0P1iH1tzGr-xFImUs.roa (hash: Sd5grDbeFgiY7osermhXdAvSR4ijwDBASIa5MD4eRp8=)
3: zJwEmTnW7QATFaFp9sYIGCKazMQ.roa (hash: +aACYW5m9yGHFrPOwMLE83hHp9dZjYoXg/esUcp2bds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:0f:bd:55:16:cd:1e:0c:93:fd:fa:8e:d5:d1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032b9d2de53710b3158e42f22889109e2c40f43b
Validity
Not Before: Sep 21 10:00:37 2026 GMT
Not After : Sep 22 10:00:37 2026 GMT
Subject: CN=d9fd4c346dce053c97d7641c988c796dc062c7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f9:c6:19:f8:9b:a6:b2:1a:9d:6b:be:71:dd:
46:40:3e:f7:45:d4:e2:aa:09:2a:41:69:90:5c:87:
7a:0e:68:a8:51:48:a9:09:63:fc:49:50:8d:77:c8:
eb:7e:82:57:e7:d1:dc:74:b1:c2:42:78:5f:19:da:
6e:39:f7:d8:84:d0:35:1d:aa:50:6d:2f:a4:17:b2:
24:dd:64:c5:df:f9:41:19:df:f8:aa:15:1f:8c:79:
22:0d:fe:9f:e6:29:fa:fe:76:8c:e7:9f:57:18:cc:
2a:a3:d3:18:d5:62:08:0b:3c:68:9d:94:3c:45:2b:
e9:56:d3:64:54:0e:19:3f:c0:b4:88:0b:b0:26:44:
aa:6b:88:c6:b9:44:12:1a:18:0e:12:e1:73:ca:06:
62:b8:a1:01:90:16:85:97:e3:56:a5:4b:1f:f2:bb:
c5:01:ad:32:50:d9:ed:a4:a1:2f:cd:ed:b3:28:d5:
4c:e2:75:aa:49:34:ee:3c:ae:ff:1b:76:21:42:b8:
f0:c2:0a:23:a4:b5:9d:5b:c3:8d:80:99:0c:51:3a:
f7:f6:2a:a3:4b:f6:d2:79:c0:34:92:04:76:61:34:
ab:c9:7d:30:89:5d:8b:19:0b:6f:7c:dd:35:74:37:
46:e0:fb:04:bf:2b:7b:bc:cc:d8:3b:0a:4e:46:5b:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FD:4C:34:6D:CE:05:3C:97:D7:64:1C:98:8C:79:6D:C0:62:C7:A8
X509v3 Authority Key Identifier:
keyid:03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9b:58:7d:34:d2:54:98:da:31:e4:a4:3a:07:57:89:89:26:
cc:a4:f9:5f:12:2f:d4:0e:64:35:17:16:96:50:c9:b8:73:96:
84:46:1a:b7:8c:60:d0:d5:0e:ca:52:84:e5:1d:34:77:82:51:
17:f5:10:c1:d9:f1:22:2f:a2:29:77:c5:df:e0:f4:e9:61:e7:
8e:c5:55:ad:4f:2c:75:e7:7e:34:19:82:e2:85:55:b5:a1:84:
73:cc:10:c1:da:55:87:7b:bf:d3:fb:f0:dd:a4:09:5e:4d:98:
a7:ed:8c:37:80:5f:cc:0d:dc:55:96:28:8c:54:fa:b5:fe:75:
cc:93:29:3c:6b:67:19:c9:74:5a:70:a0:6a:8b:76:c8:01:4f:
51:c2:5b:c1:22:2e:61:be:f8:cd:25:29:db:18:2f:3d:9a:92:
59:8f:a7:e9:9e:18:41:0c:04:24:cd:dc:88:fa:53:e0:20:44:
b5:eb:08:de:20:45:3b:37:f0:bf:6e:97:5e:f9:cd:2c:35:7c:
91:43:db:58:4e:1a:ab:f5:0f:47:2e:1d:08:79:61:ae:82:5f:
a5:1f:3b:52:f5:4b:cc:e2:72:ce:f5:32:af:5e:ee:67:37:c3:
d5:1b:67:fb:68:a2:ee:3d:0a:44:7f:eb:d2:a9:fa:44:ad:8b:
fa:a4:3b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:29:11 2026 by rpki-client