Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
File: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft (raw, json)
Hash identifier: 6G4dnDJWBQIHaQz2Dbvp9zqL64WPwHLnfs+XIjgg7IM=
Subject key identifier: 54:5A:01:7C:8E:20:E1:71:1F:73:C2:C8:01:36:72:F7:4D:68:2C:B9
Authority key identifier: 03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
Certificate issuer: /CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Certificate serial: 019CAD59B5728163BF43E49554D513D91B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 07:01:03 +0000
Manifest this update: Mon 02 Mar 2026 07:01:03 +0000
Manifest next update: Tue 03 Mar 2026 07:01:03 +0000
Files and hashes: 1: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl (hash: YWTciDe//6tdODa94V9ReoBgJZSpNqPLUvjybFWhUAQ=)
2: eCyziES9pqG-mQfeLtr0n6C5-NA.roa (hash: l6vsyJV9WvrG97VV98IwTWvWh3E/Ue4n2AyaMsNRcxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:b5:72:81:63:bf:43:e4:95:54:d5:13:d9:1b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Validity
Not Before: Mar 2 07:01:03 2026 GMT
Not After : Mar 3 07:01:03 2026 GMT
Subject: CN=545a017c8e20e1711f73c2c8013672f74d682cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:5d:94:01:be:7c:03:82:7c:b0:4a:55:e3:
96:02:f6:3c:05:e1:d0:c4:12:06:83:2c:2b:5b:21:
76:62:c4:a6:be:2d:59:ee:e2:9a:14:56:ec:75:43:
7f:9c:7e:b5:2c:8c:fb:61:12:25:d5:3d:88:a0:87:
76:c9:f3:0d:08:3d:16:4c:2d:d4:e0:8a:6a:64:f5:
16:39:00:8d:b8:0e:6f:f9:1b:19:30:c2:fc:c6:d9:
b5:86:6d:b2:ae:68:80:29:5b:76:e6:43:8e:0b:1d:
26:f5:21:8a:13:ee:b4:5e:7f:94:fb:bc:70:11:d4:
ed:43:2a:72:b5:16:87:91:e6:a7:a4:74:bf:40:29:
e0:d5:7f:8c:1b:de:62:74:df:8f:46:d4:b9:a3:cd:
be:92:06:0b:fa:76:3f:82:d5:8f:12:b1:b1:2e:49:
cd:54:a6:ee:a8:5f:f7:2e:03:fa:de:09:58:34:5c:
f3:41:2e:69:23:74:6f:c8:30:20:57:73:aa:ba:2f:
40:c1:e9:99:a2:60:98:15:20:04:f0:8a:07:7e:68:
63:5b:c2:f6:f7:01:10:64:65:a2:97:4f:ca:7a:c2:
a8:2a:a7:85:75:94:d9:6d:77:f0:f0:ac:fc:1e:ba:
b9:22:5a:f6:8c:26:9c:9f:40:0d:a4:fd:51:3c:dc:
25:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5A:01:7C:8E:20:E1:71:1F:73:C2:C8:01:36:72:F7:4D:68:2C:B9
X509v3 Authority Key Identifier:
keyid:03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:7f:4e:e3:74:06:c5:16:56:3f:14:c0:92:1d:a9:a0:f3:b1:
c9:f9:0f:d0:75:ae:57:79:14:9b:4b:2a:90:97:17:cd:40:52:
1c:31:74:2b:b2:6c:8e:77:76:7c:72:74:a5:b3:43:1c:6f:fe:
e1:16:02:8e:eb:e8:e3:78:c4:dd:e5:b0:68:6f:2d:c1:e0:dc:
e8:df:2e:eb:f0:bd:57:d8:8b:14:02:9f:53:76:d4:08:7a:7d:
e5:9f:2e:5b:cd:8a:84:71:18:4b:17:da:6d:9f:b1:14:28:69:
f8:72:02:df:5a:39:53:45:66:05:85:5b:ff:3b:6f:1a:3b:42:
f2:d6:26:f4:e4:7d:13:c4:d1:54:c2:fc:f9:06:bb:70:0e:91:
b5:98:75:88:19:ed:93:75:2a:47:fb:15:a1:d2:97:75:48:78:
72:5c:50:b2:09:51:70:76:98:54:a7:cb:79:a5:58:4b:58:2a:
8e:0a:bd:2e:e5:3a:3a:ae:ce:bd:19:69:16:cd:e2:d2:b1:f2:
d4:d0:90:e4:9e:f2:ab:4f:fe:43:02:cd:b4:91:71:e3:fd:99:
f7:ca:50:9a:37:1a:76:6e:25:34:83:84:5c:32:c4:87:3a:85:
1e:c4:69:54:1a:3c:af:66:f5:48:92:26:6d:dc:10:03:0c:1d:
4c:ee:ef:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:10:15 2026 by rpki-client