Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: xKoOYxhKLrHyBjRRhFZjsea6ckZebw+dEEkXBp0kots=
Subject key identifier: 5E:F5:D4:19:CF:B2:B3:F7:FA:F7:A3:C2:C2:B4:9E:6A:79:93:B4:F7
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 019E1ED9A983B7F7D1D8BFACEC3D54E0EF16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 157A
Signing time: Wed 13 May 2026 01:00:41 +0000
Manifest this update: Wed 13 May 2026 01:00:41 +0000
Manifest next update: Thu 14 May 2026 01:00:41 +0000
Files and hashes: 1: WrRSKzPOj6BgLow6AweYah_e1dA.roa (hash: zp8UwEZpI6bsmG4yaK4JetrekeKEEBLqIzJ3Rz0Eig8=)
2: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: MmWdgevU694aFBNLI/2MxAWCTmZSuSFzVke5tSzXWn0=)
3: uR1vfe6fR6lmKLx_KpYnu1pkQe8.roa (hash: rrB4HqghjaNhMjUMgJmTsjzw4hoiQcENyKRyhlNILHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:a9:83:b7:f7:d1:d8:bf:ac:ec:3d:54:e0:ef:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: May 13 01:00:41 2026 GMT
Not After : May 14 01:00:41 2026 GMT
Subject: CN=5ef5d419cfb2b3f7faf7a3c2c2b49e6a7993b4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:7a:73:2d:25:e3:fb:bf:31:c6:01:33:f2:
74:41:42:f0:92:a7:04:53:72:92:dd:40:0a:d6:74:
b7:b5:c0:94:27:aa:db:72:37:9b:01:d8:4e:28:a9:
50:ba:6e:5d:d0:20:38:33:10:30:b2:88:f3:13:09:
15:30:ee:5e:48:69:72:26:b8:00:f2:0f:41:00:c6:
d9:0e:c7:54:0c:e0:93:49:17:84:f2:ef:df:ce:0c:
d4:8d:a8:03:7b:08:46:be:40:4c:9c:8c:40:b3:36:
d5:ce:5a:29:c1:79:ad:81:04:f1:89:d6:e6:0a:ce:
fc:bc:66:3d:90:93:47:7c:cf:c2:44:3b:79:37:59:
a8:82:b3:1e:ef:18:a0:f8:a5:ca:6d:0d:1b:4f:0f:
11:29:24:4d:06:76:14:8f:b4:7c:76:af:cc:a3:8d:
6e:88:c9:58:1b:07:3b:e0:d4:18:1f:8b:4b:1b:0f:
c3:e7:6e:f8:b2:fe:28:54:fa:cc:93:80:6e:04:f8:
d3:e1:61:33:df:74:a7:f1:7b:ee:79:8d:61:db:c4:
4b:23:b4:6f:84:22:1f:9c:d4:2b:5b:5a:d8:ae:ef:
06:e2:e1:35:98:b6:68:f6:c4:a8:81:5c:11:d7:fe:
f1:15:0a:3a:9b:8c:35:42:21:d9:81:d9:a6:1c:89:
c2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F5:D4:19:CF:B2:B3:F7:FA:F7:A3:C2:C2:B4:9E:6A:79:93:B4:F7
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7d:05:52:b5:8d:0d:f0:38:bb:a4:12:9f:fd:4d:1b:92:37:
e4:ff:ed:aa:df:19:e4:9c:e2:79:cc:56:dd:68:14:75:75:f4:
1f:70:ea:bb:78:1c:a0:66:98:a6:74:33:8a:bd:21:b0:68:b6:
77:2f:48:82:12:98:13:ae:ee:70:f1:9d:18:1b:ac:6c:bd:25:
f9:d6:0b:4d:a1:6c:a1:17:9e:c8:ec:e2:89:d1:af:43:04:d9:
a8:5d:3f:a5:0c:3d:75:8f:78:1a:23:3a:80:7a:33:7c:2a:20:
29:0a:92:9d:4d:b3:56:01:b7:bb:9d:f6:dd:70:82:da:31:2e:
d0:18:69:24:02:43:2e:b2:1f:e4:ef:0a:17:f0:f0:63:9e:ad:
dc:e9:1a:29:be:09:97:97:68:40:f7:96:c2:65:e6:38:ea:40:
4b:b3:77:41:ac:e2:a3:43:af:e1:a8:d5:12:d7:0f:c4:1d:1d:
6c:72:7e:60:dc:6c:e6:4c:7a:5e:54:31:26:8e:be:3c:07:03:
90:b1:66:65:c6:b1:1a:40:60:db:4e:88:f8:eb:10:9d:f0:a6:
3b:8d:ed:c3:23:aa:4b:49:71:60:44:32:c3:c2:55:0e:3c:74:
be:c3:6a:90:71:2e:1f:85:a9:a3:00:75:bc:bf:c0:f6:ce:50:
2f:d8:dd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:20 2026 by rpki-client