Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
File: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft (raw, json)
Hash identifier: rFJpJ0Fu+l8BrRYAMpK6dtpZBPBFuAUBMiGiOX7m+MM=
Subject key identifier: A7:D3:E0:67:66:D0:E5:97:E2:64:B9:5B:3F:9C:23:3F:1B:37:2B:DF
Authority key identifier: 03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
Certificate issuer: /CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Certificate serial: 01A1249D80EE3E62494043A5D79FF46954DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
Manifest number: 1A95
Signing time: Sat 10 Oct 2026 07:01:04 +0000
Manifest this update: Sat 10 Oct 2026 07:01:04 +0000
Manifest next update: Sun 11 Oct 2026 07:01:04 +0000
Files and hashes: 1: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl (hash: nA/mHl2y0l3ULheDL6DVG1G5fR69g5dO/GF3ucQKlpE=)
2: eCyziES9pqG-mQfeLtr0n6C5-NA.roa (hash: l6vsyJV9WvrG97VV98IwTWvWh3E/Ue4n2AyaMsNRcxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:9d:80:ee:3e:62:49:40:43:a5:d7:9f:f4:69:54:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Validity
Not Before: Oct 10 07:01:04 2026 GMT
Not After : Oct 11 07:01:04 2026 GMT
Subject: CN=a7d3e06766d0e597e264b95b3f9c233f1b372bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:52:1a:44:e1:5a:e5:37:8b:a7:69:c5:2c:
97:77:c6:2c:54:0e:a2:d1:02:a7:88:c8:84:7c:aa:
2d:71:dd:b3:c4:53:dd:70:55:f0:22:b3:8b:92:30:
d3:6d:c1:cf:2b:61:eb:21:46:f2:28:a7:ee:2a:c8:
80:1b:f6:78:2d:f7:2c:62:13:92:58:11:66:90:fc:
3d:a7:87:35:b8:7d:65:2c:6e:11:ed:89:03:c1:e4:
20:cd:04:0f:06:90:54:81:a4:67:96:1b:8d:ee:fd:
62:a9:22:a2:da:b7:a8:3c:58:76:80:63:bd:90:dc:
6d:db:3d:a3:ca:3d:73:71:64:ef:a4:b6:23:41:d2:
20:be:b3:b2:94:6f:f4:c5:ab:71:6c:50:22:ec:b2:
1d:be:9f:a2:54:f6:75:29:08:57:75:ab:5f:84:c2:
ab:13:23:34:47:62:bc:bc:26:a1:3b:9f:7d:f0:40:
b4:37:cb:29:75:35:44:47:5a:40:9c:0f:c0:d4:92:
27:fe:58:d8:85:37:b3:6f:85:3e:bd:92:79:1d:cb:
2f:2b:a2:4a:85:08:6d:c0:32:32:af:64:4e:da:f9:
12:a1:9e:c9:1d:22:b2:38:2e:b3:ee:21:a1:fd:0d:
bb:f3:7b:6a:5c:ad:a7:79:6b:c8:d0:e1:bb:63:18:
c6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D3:E0:67:66:D0:E5:97:E2:64:B9:5B:3F:9C:23:3F:1B:37:2B:DF
X509v3 Authority Key Identifier:
keyid:03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f7:85:4a:4c:22:48:5d:90:c3:9f:81:6f:1d:e5:c7:88:00:
db:b5:2f:d6:bc:1e:d2:81:b4:cf:70:fb:07:b6:3b:85:90:db:
82:f9:b4:fb:c8:82:94:65:9b:46:fa:06:ec:be:57:8e:04:4d:
35:bf:91:dd:94:1b:33:6b:fb:69:59:17:31:c5:c7:46:38:1e:
cb:f8:df:b9:52:bd:1c:22:9e:d3:fd:57:c8:2c:a3:1f:51:15:
ac:19:01:12:40:a7:53:79:a0:47:ee:b5:b9:f3:63:80:50:63:
13:17:4e:39:d5:5f:2c:ca:1c:78:30:b0:b3:eb:99:33:96:aa:
a0:6f:86:f2:ea:24:c0:84:90:38:5a:67:06:73:67:f0:cb:a6:
49:7a:0a:de:56:e8:5a:ac:16:40:9f:98:43:1a:79:f8:a9:82:
39:66:4c:10:c8:95:a4:88:58:53:c7:4c:31:4d:c2:b4:2a:27:
c4:96:b1:01:7c:f4:4d:bb:0f:8f:4c:86:21:78:5d:ae:fd:77:
1c:fe:15:d9:ad:e4:e3:d9:e5:c2:85:80:b0:86:23:ec:df:43:
e4:e6:0c:7e:80:07:53:55:c9:ef:f5:2c:e5:52:f6:79:37:d3:
21:71:da:07:ff:a3:ac:6f:70:a7:0d:c9:27:b7:b7:84:44:d6:
20:8c:e3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:35:58 2026 by rpki-client