Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
File: ayuSHZprREq1jmbriPfBI5jqBLU.mft (raw, json)
Hash identifier: RE3nXqe+ph+sEZLuc+0SzPdtHQ25Et134ItUJb2qNj4=
Subject key identifier: 99:D7:77:70:38:EC:DD:CB:C7:61:37:9C:C9:ED:D6:EA:F3:03:09:36
Authority key identifier: 6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5
Certificate issuer: /CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
Certificate serial: 019D9E1ABE29E9AD0A5B60FA0A6FCD75280A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
Manifest number: 03D2
Signing time: Sat 18 Apr 2026 01:00:45 +0000
Manifest this update: Sat 18 Apr 2026 01:00:45 +0000
Manifest next update: Sun 19 Apr 2026 01:00:45 +0000
Files and hashes: 1: E2O5g-3u7QFDSnqyhGOqtBMannc.roa (hash: LyXDleKJ3gZrrfu8ZQu1gqPieNpy6nIwJ9/Oz5vq8aE=)
2: ayuSHZprREq1jmbriPfBI5jqBLU.crl (hash: iMmqIyaPc0vzo97lz6M6wleMHVQXgnm24DaXHMe/j6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:1a:be:29:e9:ad:0a:5b:60:fa:0a:6f:cd:75:28:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
Validity
Not Before: Apr 18 01:00:45 2026 GMT
Not After : Apr 19 01:00:45 2026 GMT
Subject: CN=99d7777038ecddcbc761379cc9edd6eaf3030936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6c:0d:bb:fd:14:78:64:18:a3:ec:94:c8:d6:
65:3a:cc:ff:6f:68:06:6e:41:ac:85:72:d0:61:33:
48:5c:0d:27:75:5a:2b:f5:98:f8:2a:ab:93:16:ad:
bb:19:7b:aa:ee:be:07:0a:9d:50:c8:92:d4:89:e1:
9b:97:c7:7b:f0:d6:96:ab:c9:83:20:c9:38:ae:47:
24:a2:7b:d9:9f:06:5b:83:65:8c:e1:8a:f0:79:4b:
d1:3e:42:0c:e6:7b:29:17:d4:a5:bb:4b:f3:7e:a6:
aa:b1:b9:5f:d7:49:97:d7:57:8a:0a:6b:bd:4b:07:
f4:1a:c9:f1:ef:56:c4:61:d9:c5:21:d8:dd:c1:bb:
c7:0d:33:e1:84:b3:a2:e7:87:5b:8a:e6:95:58:4e:
19:da:02:2d:14:c7:9f:42:f7:0d:4f:ce:f7:05:67:
d7:73:c9:62:a3:c8:e3:62:97:40:a1:be:1e:53:50:
90:fb:b9:fa:8c:ce:bb:8e:8f:1b:ed:f5:20:ec:3f:
2f:bc:c9:3b:5b:ce:d4:83:42:50:8a:77:93:69:14:
36:d9:6b:c2:5f:5e:3d:0c:41:db:52:66:1e:6a:f9:
9d:12:50:52:72:c5:6e:d7:e1:e9:94:19:16:4e:f9:
f5:60:18:28:90:e6:bd:cb:8c:ae:6d:d9:6a:8f:c9:
ce:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D7:77:70:38:EC:DD:CB:C7:61:37:9C:C9:ED:D6:EA:F3:03:09:36
X509v3 Authority Key Identifier:
keyid:6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:95:2f:a9:05:a8:db:43:fb:46:26:ce:b3:99:e4:ca:7f:85:
72:8d:1b:b3:8b:f5:3f:15:a9:e2:9e:c9:b8:b7:c6:78:26:61:
a1:1e:36:47:9d:58:16:66:fa:a1:b9:4f:e4:84:3b:69:36:06:
92:5a:e6:32:92:15:aa:80:e3:6c:42:36:f5:c7:66:05:3d:e1:
34:db:f6:86:88:52:eb:b9:b9:df:a3:cc:db:62:24:20:59:f2:
9d:ec:f3:34:2d:7d:1c:4a:3b:82:6c:7e:19:6b:7e:27:3b:d7:
e2:0f:d2:39:5e:28:44:dd:c4:46:58:8d:85:02:8c:88:8b:9d:
ab:e6:79:f0:a3:12:2b:2b:fa:ff:ee:a9:c2:82:97:79:c3:0f:
b5:1c:ab:3c:2a:4e:7a:34:55:50:0c:1e:1b:21:f1:68:fd:c1:
d0:f0:be:ba:9b:24:14:52:c2:3c:3b:06:86:ad:76:ab:be:37:
80:1c:f6:c7:d5:6b:b0:29:14:96:ed:eb:0a:88:c5:0f:19:dd:
d0:76:df:8d:74:40:72:d8:24:1c:47:ea:c3:57:ae:a2:f5:c8:
31:5c:35:85:dd:ec:b1:01:4d:5f:7f:f9:20:ce:65:1d:f6:52:
c9:3b:63:06:d0:dd:7a:e3:31:7c:ba:5c:5f:8a:6f:7a:1c:a5:
b1:f7:cd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:54:17 2026 by rpki-client