Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File: AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier: I6ey+BNHiQNz8u0Q5zw4Y/OHL98+Tna2ifC18BLfBb0=
Subject key identifier: F9:F3:52:07:05:B3:2F:6D:77:16:E6:25:F7:B0:51:E0:18:65:7B:BF
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial: 019D25838DCD7371027267B286D681C28587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number: 095C
Signing time: Wed 25 Mar 2026 15:01:11 +0000
Manifest this update: Wed 25 Mar 2026 15:01:11 +0000
Manifest next update: Thu 26 Mar 2026 15:01:11 +0000
Files and hashes: 1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: xlGl1jurPN4Y+lSrAucHRjwL/I59hmRQLK/Mnf8pURs=)
2: JpSPlDAfnmaVaihRumPcTPfmvXc.roa (hash: Y5Z9rAeAn1T7cnOOHo3m55iyERIOyEhwXNrdUR5k5k4=)
3: joOy9zn86SRS3S0JJdQNk7WRD1s.roa (hash: 6Lg/ZII9MO/NUIL4lYaxUeR/rqOY01y6TRhSs+4wA6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:8d:cd:73:71:02:72:67:b2:86:d6:81:c2:85:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Validity
Not Before: Mar 25 15:01:11 2026 GMT
Not After : Mar 26 15:01:11 2026 GMT
Subject: CN=f9f3520705b32f6d7716e625f7b051e018657bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:51:63:8b:1a:25:fe:d6:8b:42:14:04:e6:
35:57:e7:41:ea:02:9d:97:f9:c7:42:9f:30:9d:7a:
77:5a:1d:18:e1:cb:c3:a7:b2:96:dc:65:e7:0b:61:
da:7d:14:0f:94:b6:88:4d:13:ff:d0:0c:d4:75:f4:
70:58:31:6b:a2:24:8e:ff:02:ea:0c:f8:98:bf:87:
db:be:d8:11:d7:50:d8:84:93:1b:eb:ba:6b:fa:e0:
61:f5:c6:58:3d:09:4a:bc:58:0c:a3:c4:9a:f7:37:
96:88:cc:39:34:c4:92:4d:f7:79:3f:5e:8d:a5:af:
20:74:49:cd:ac:ca:f9:11:21:eb:28:51:41:d8:86:
88:84:2c:18:26:f4:5b:70:1a:19:0c:9d:3c:17:65:
49:95:54:3a:11:ac:60:f5:29:bf:e7:43:ac:c9:93:
7c:51:bd:33:61:02:6a:ef:69:f7:71:23:8c:74:f0:
a0:9f:db:21:73:82:95:7d:ae:70:ba:a6:63:42:ce:
c7:d3:fd:93:9a:a9:ec:96:68:bf:2c:c2:d2:0e:75:
5a:2f:06:7a:0d:10:94:03:cf:0b:1c:4f:b3:cd:dd:
88:59:da:f1:32:bb:c2:d4:c9:00:9a:c3:ee:42:47:
9b:87:2b:e5:15:23:a1:d3:10:d6:3d:38:2d:7d:eb:
d9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F3:52:07:05:B3:2F:6D:77:16:E6:25:F7:B0:51:E0:18:65:7B:BF
X509v3 Authority Key Identifier:
keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9c:48:f9:f5:98:5c:52:93:1d:72:50:1e:bf:2f:c0:a3:69:
c2:69:18:b3:44:ce:43:ea:21:4f:03:10:b7:dd:e6:59:e3:ad:
4a:60:36:e3:d4:23:0e:a9:17:dd:a0:c2:0d:7e:8a:ad:8e:dc:
9e:c4:0d:e9:bb:9d:5c:97:01:17:eb:b3:17:a8:b6:78:7a:eb:
f2:dc:9e:97:e3:53:03:3c:f1:9f:82:46:7a:54:e7:cf:63:d2:
3c:62:0b:47:71:1d:c5:df:19:ef:d0:3d:ae:78:87:99:4c:0d:
1f:9c:94:2e:03:57:a8:9b:d6:d1:db:82:59:15:f0:98:f1:21:
71:21:d1:8d:b5:aa:f9:1a:12:26:84:47:c2:8d:6b:5d:2e:76:
2f:30:3a:b6:ef:4c:08:b7:dc:a4:98:98:66:21:e4:be:29:38:
6d:21:53:3b:e5:c8:06:55:5d:d5:9d:f3:65:21:ad:8f:8b:ac:
9a:a7:33:a8:c8:d5:3f:dd:cf:f9:2b:d9:67:db:4b:55:0e:2f:
39:0a:f1:18:b2:cb:a5:e7:29:22:da:08:69:cf:29:43:91:40:
a6:55:d8:83:32:b3:40:e6:52:45:db:51:93:46:39:7b:1a:db:
ed:52:fe:d9:b4:25:a1:6a:e3:a5:68:19:d5:a5:59:98:b8:c4:
d4:c7:32:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:46 2026 by rpki-client