Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: SmnFIDF+O4Qaff3wkSbiXJQxMEAb9PgxNf11bQjsv2g=
Subject key identifier: 94:14:BA:07:BD:AA:DC:2D:1B:27:8F:E8:DC:F2:43:CB:50:DC:54:68
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 01A1084A61C22A6BEECFB96E75EAD37AB82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 16FC
Signing time: Sun 04 Oct 2026 19:00:54 +0000
Manifest this update: Sun 04 Oct 2026 19:00:54 +0000
Manifest next update: Mon 05 Oct 2026 19:00:54 +0000
Files and hashes: 1: WrRSKzPOj6BgLow6AweYah_e1dA.roa (hash: zp8UwEZpI6bsmG4yaK4JetrekeKEEBLqIzJ3Rz0Eig8=)
2: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: pNjUeUgoUsEw7YQ3IgaeL9Nr/sd8SA+/oNmv0ghIACw=)
3: uR1vfe6fR6lmKLx_KpYnu1pkQe8.roa (hash: rrB4HqghjaNhMjUMgJmTsjzw4hoiQcENyKRyhlNILHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:4a:61:c2:2a:6b:ee:cf:b9:6e:75:ea:d3:7a:b8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Oct 4 19:00:54 2026 GMT
Not After : Oct 5 19:00:54 2026 GMT
Subject: CN=9414ba07bdaadc2d1b278fe8dcf243cb50dc5468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:f5:c7:2c:cc:fb:0f:08:2d:ef:a4:30:d3:
ca:67:de:46:cb:c2:f2:1c:5a:f7:c3:25:78:c8:f6:
8f:0c:58:f4:49:11:75:9c:09:9c:94:86:d0:b5:08:
c6:37:84:27:ae:db:05:55:11:f3:59:95:a6:78:2c:
d2:af:b1:36:2f:51:fb:a7:43:22:e6:0d:29:a3:72:
74:d6:de:eb:9e:e5:d9:98:5e:89:14:9a:2e:93:bc:
c4:46:58:57:03:87:28:69:b7:f6:2a:0e:fb:ec:29:
49:28:a7:b9:f5:87:50:f2:22:d7:80:95:db:9c:25:
ae:8e:ee:6a:9a:e7:7e:18:48:f3:e4:7b:8b:49:4b:
6c:48:f8:86:75:f4:88:ee:ce:dd:96:8c:9a:c0:b1:
a2:22:fe:b9:f4:b2:6e:86:dd:41:6b:ea:8f:d2:96:
e4:0a:59:b6:be:6f:71:87:c6:50:b9:1e:22:fc:74:
7e:2a:ac:f1:d2:f8:c1:c6:61:cc:05:f0:40:51:2a:
10:fa:e6:a4:47:99:c2:e3:2d:e6:cb:bc:5d:b2:79:
ad:98:0e:e8:92:46:1f:1b:e6:42:d7:af:cd:99:8c:
00:fb:59:5f:a4:21:45:f3:df:8c:43:b2:02:74:ef:
56:53:9f:32:5c:30:d4:9a:41:5f:37:07:f4:86:b3:
eb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:14:BA:07:BD:AA:DC:2D:1B:27:8F:E8:DC:F2:43:CB:50:DC:54:68
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d7:62:ed:01:4d:69:08:94:ad:59:0f:02:f3:f6:5c:77:18:
8d:90:e2:81:bb:0e:6d:b2:84:a7:2b:f9:84:f5:db:79:84:7a:
98:ea:73:81:c2:56:ee:a7:3b:99:dd:e5:d9:45:0c:82:37:d7:
6d:92:ee:2b:45:dc:15:93:f7:ee:6b:80:16:59:17:de:7b:ed:
5b:bf:70:01:43:92:f4:13:b5:74:12:0c:f7:dc:ff:22:a2:bc:
88:32:80:fa:46:d8:dd:d1:ac:d7:34:b7:ef:81:f4:12:55:63:
75:d1:14:4b:85:0a:17:00:9f:49:a1:b4:6d:5c:db:ef:7d:b0:
ae:62:39:e5:c7:ac:28:f1:20:a6:f0:65:23:1e:6d:fc:eb:32:
71:b1:12:f3:97:85:db:3f:fe:53:72:99:4a:ab:52:69:cd:1e:
d5:8b:89:14:15:ac:c2:39:73:8d:52:d1:81:ed:dc:e7:11:80:
67:69:e5:a7:2c:9d:0b:97:51:cd:21:6c:e9:cf:c9:be:d5:d0:
1a:22:4f:7a:8c:39:8a:22:5d:c9:d0:70:d8:32:f6:cb:f3:b1:
7d:a2:3d:4a:95:29:36:d2:64:c7:44:d4:58:95:f9:f3:c5:94:
9c:bf:d4:f6:d7:17:70:99:8a:66:79:b0:f8:8a:d8:df:82:82:
fd:dc:8f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:10:40 2026 by rpki-client