Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: oO62OM6ss9vuS+Vc7JpuiMMxAAcxJjAxOFqVqOesKfo=
Subject key identifier: 51:C8:7C:B5:4A:CB:91:B8:6F:59:1F:FD:00:03:BB:6B:22:78:6A:30
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 019D27A867B3B82FFD5CA01B0C9DA746B9A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 14FA
Signing time: Thu 26 Mar 2026 01:00:41 +0000
Manifest this update: Thu 26 Mar 2026 01:00:41 +0000
Manifest next update: Fri 27 Mar 2026 01:00:41 +0000
Files and hashes: 1: WrRSKzPOj6BgLow6AweYah_e1dA.roa (hash: zp8UwEZpI6bsmG4yaK4JetrekeKEEBLqIzJ3Rz0Eig8=)
2: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: gGQXYW54sPqWOwtkmB/jyMPxBo6d4AIegwCQROr23Sc=)
3: uR1vfe6fR6lmKLx_KpYnu1pkQe8.roa (hash: rrB4HqghjaNhMjUMgJmTsjzw4hoiQcENyKRyhlNILHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:67:b3:b8:2f:fd:5c:a0:1b:0c:9d:a7:46:b9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Mar 26 01:00:41 2026 GMT
Not After : Mar 27 01:00:41 2026 GMT
Subject: CN=51c87cb54acb91b86f591ffd0003bb6b22786a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:25:83:73:a3:f0:f8:7d:c4:ff:8e:ff:75:f9:
99:88:86:aa:f8:ca:94:d1:de:70:58:a7:03:d8:c8:
84:d9:66:7f:77:89:6c:24:b4:0d:34:17:d7:e6:41:
7c:18:ae:0e:44:9c:38:ec:03:2f:56:df:7c:7b:fb:
6b:7c:d6:d0:fa:3f:b6:b9:fa:1f:85:7e:ce:de:81:
6e:b5:48:ac:9c:41:e3:b2:77:0d:65:45:ea:c2:6d:
dc:db:a7:cf:3a:1e:35:46:d8:a8:d9:7a:a0:00:b0:
eb:47:89:be:c4:c6:d9:63:e9:ea:44:46:00:93:43:
7f:f7:3c:5f:94:f5:b1:f0:a1:0e:07:50:89:a6:87:
78:79:e7:fd:7b:48:f0:be:3e:63:59:31:4e:5f:f1:
24:36:15:ec:34:a8:e2:48:cf:7d:12:6c:8e:a6:ba:
01:b4:32:fb:66:62:6b:db:cb:c0:08:bf:eb:e9:c0:
2f:9b:05:82:f3:53:88:fd:a2:c4:46:9b:ca:d0:98:
93:f8:26:49:d0:bf:2c:b8:bc:b9:f0:64:1f:df:4e:
18:75:62:14:7a:04:43:5b:5c:1c:8f:cc:34:3e:17:
60:1b:e7:ab:2e:b4:d9:3c:76:9f:ee:26:73:01:32:
8a:c9:dd:1f:d5:e4:e7:b0:be:85:ad:de:96:3e:ea:
ff:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C8:7C:B5:4A:CB:91:B8:6F:59:1F:FD:00:03:BB:6B:22:78:6A:30
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:55:72:64:61:bb:a4:d9:25:a5:d8:7e:f4:5e:f1:9c:21:dd:
73:ac:01:6e:a0:ce:3f:c5:5a:a3:3a:e8:c6:30:bc:bc:3b:28:
51:d7:0b:08:1e:d4:90:69:bb:2b:4b:a2:eb:26:ee:04:d6:fd:
55:28:0d:f2:04:96:d5:55:a8:ba:70:fa:42:45:9e:cc:01:1f:
fc:e6:83:e6:77:56:fb:d5:c3:13:08:26:e1:01:9e:6c:7a:ac:
c9:6e:1e:b4:f4:1a:cb:39:b5:d3:b1:fb:14:5c:6a:44:15:8d:
12:9b:e2:1b:01:09:1c:78:bf:f6:ed:d6:89:ab:6b:12:ec:6b:
cf:24:41:81:e3:4f:7b:bf:ad:dd:7f:f6:81:22:79:57:75:23:
48:06:ed:ff:dd:1c:28:3d:0e:ab:a2:a1:3b:86:6f:a7:7a:7f:
ad:21:3f:e7:33:76:29:97:7a:2f:c6:75:27:7a:29:0a:b3:e5:
f8:54:ce:a4:8c:c9:33:26:ea:86:82:9e:e7:2a:db:49:6c:fb:
f1:58:5e:30:2a:8d:5e:bf:04:52:26:78:38:d5:28:96:eb:79:
ad:59:c1:60:ce:9a:b5:02:2a:64:45:5b:1a:ae:e1:84:68:3f:
f7:0d:ea:0a:2a:ed:06:1e:40:70:c4:de:ea:ee:0a:2e:22:8d:
69:2c:f1:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqGezuC/9XKAbDJ2nRrmpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMjJhZDRjZjY0N2E0OGI2MzFmZjg0ZjIyN2VhMDI1MjEz
MDU1MmQwHhcNMjYwMzI2MDEwMDQxWhcNMjYwMzI3MDEwMDQxWjAzMTEwLwYDVQQD
Eyg1MWM4N2NiNTRhY2I5MWI4NmY1OTFmZmQwMDAzYmI2YjIyNzg2YTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SWDc6Pw+H3E/47/dfmZiIaq+MqU
0d5wWKcD2MiE2WZ/d4lsJLQNNBfX5kF8GK4ORJw47AMvVt98e/trfNbQ+j+2ufof
hX7O3oFutUisnEHjsncNZUXqwm3c26fPOh41Rtio2XqgALDrR4m+xMbZY+nqREYA
k0N/9zxflPWx8KEOB1CJpod4eef9e0jwvj5jWTFOX/EkNhXsNKjiSM99EmyOproB
tDL7ZmJr28vACL/r6cAvmwWC81OI/aLERpvK0JiT+CZJ0L8suLy58GQf304YdWIU
egRDW1wcj8w0PhdgG+erLrTZPHaf7iZzATKKyd0f1eTnsL6Frd6WPur/CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHIfLVKy5G4b1kf/QADu2sieGowMB8GA1UdIwQY
MBaAFGsirUz2R6SLYx/4TyJ+oCUhMFUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2It
NjlhNDRmMDQ4ZGI4LzEvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2ItNjlhNDRmMDQ4ZGI4
LzEvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeFVyZGG7
pNklpdh+9F7xnCHdc6wBbqDOP8VaozroxjC8vDsoUdcLCB7UkGm7K0ui6ybuBNb9
VSgN8gSW1VWounD6QkWezAEf/OaD5ndW+9XDEwgm4QGebHqsyW4etPQayzm107H7
FFxqRBWNEpviGwEJHHi/9u3WiatrEuxrzyRBgeNPe7+t3X/2gSJ5V3UjSAbt/90c
KD0Oq6KhO4Zvp3p/rSE/5zN2KZd6L8Z1J3opCrPl+FTOpIzJMybqhoKe5yrbSWz7
8VheMCqNXr8EUiZ4ONUolut5rVnBYM6atQIqZEVbGq7hhGg/9w3qCirtBh5AcMTe
6u4KLiKNaSzxQQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:02 2026 by rpki-client