Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File: AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier: gjD4L0h7NsRxcj8ZguLe3xxlgWgyZqh9aWVUZhm3VUA=
Subject key identifier: E4:AE:76:AC:E8:43:18:54:C2:08:B7:B8:07:B2:EE:C4:0D:B1:F2:1E
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial: 019F916D485B2026EEF50D62F447F77B4262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number: 0A9D
Signing time: Fri 24 Jul 2026 00:01:25 +0000
Manifest this update: Fri 24 Jul 2026 00:01:25 +0000
Manifest next update: Sat 25 Jul 2026 00:01:25 +0000
Files and hashes: 1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: kapHMQt9j6UNmk1TAumYWoOjlVKJlrVJysXT/NdV1I0=)
2: JpSPlDAfnmaVaihRumPcTPfmvXc.roa (hash: Y5Z9rAeAn1T7cnOOHo3m55iyERIOyEhwXNrdUR5k5k4=)
3: joOy9zn86SRS3S0JJdQNk7WRD1s.roa (hash: 6Lg/ZII9MO/NUIL4lYaxUeR/rqOY01y6TRhSs+4wA6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:48:5b:20:26:ee:f5:0d:62:f4:47:f7:7b:42:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Validity
Not Before: Jul 24 00:01:25 2026 GMT
Not After : Jul 25 00:01:25 2026 GMT
Subject: CN=e4ae76ace8431854c208b7b807b2eec40db1f21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:69:5e:e1:ce:f4:83:2c:f5:15:d7:3d:cf:
f7:dc:b4:67:d3:1b:e9:d7:d5:62:42:6f:30:93:e7:
1f:11:d5:da:89:5f:88:0b:bd:95:59:30:e9:32:44:
aa:38:b2:dd:06:4c:c0:ce:a5:79:bd:ec:1d:d1:b5:
5a:e9:6d:ae:49:3b:0e:bf:f5:32:b8:07:94:f3:fc:
8c:8d:45:8c:f0:45:9e:3f:d4:85:7f:c3:59:3d:31:
85:60:cf:e7:2a:92:39:68:9f:01:dc:df:99:06:ef:
b5:1f:ca:a7:86:b3:a9:92:7b:60:27:d4:2c:a0:23:
35:27:68:51:f1:f8:63:e8:ec:01:d5:75:d9:ff:c2:
ea:8d:3f:36:33:53:3f:0c:53:be:fd:69:7a:13:b5:
db:87:b2:c1:93:99:b7:3a:77:11:c4:d8:b8:ed:d2:
c8:63:9b:ce:6f:69:6c:d1:33:5a:a1:aa:ee:2e:67:
0c:81:5c:be:1a:f6:f4:5a:16:8c:5f:ce:17:55:3f:
58:a2:c9:82:3b:94:13:5d:b4:e3:ea:b3:00:c7:a4:
ca:09:95:60:f4:fc:63:29:01:5e:cf:91:cc:3f:17:
03:b5:95:5e:bc:8d:71:12:04:95:8b:b0:aa:16:92:
21:84:14:aa:7a:29:7b:ae:e4:44:71:91:91:93:33:
29:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AE:76:AC:E8:43:18:54:C2:08:B7:B8:07:B2:EE:C4:0D:B1:F2:1E
X509v3 Authority Key Identifier:
keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bc:10:95:3b:c1:e5:7a:9b:39:b0:87:15:a8:cb:0b:70:eb:
31:ee:c1:0a:54:5d:b1:08:e4:f5:d4:bc:bf:b8:a8:43:6e:2b:
a7:90:75:b7:ca:cb:3f:b5:8a:c2:e3:78:b2:21:ef:71:24:02:
ef:94:f9:6f:e1:f9:ac:17:b5:2d:e5:3c:21:b4:52:76:82:6d:
13:c0:b3:03:d7:99:ad:f7:bd:3f:72:c2:88:20:2a:24:37:2a:
9f:34:63:47:6d:e4:18:b2:11:6d:4c:0b:f1:5b:bd:2d:5d:5f:
60:e9:47:b5:e7:1a:8d:c8:55:b0:fd:b5:06:a9:00:66:3e:10:
fe:2c:d3:e3:c3:6b:d3:57:30:bf:52:02:c1:2a:7d:11:7d:f6:
62:0b:47:19:23:fa:70:e3:ef:77:b2:71:b7:22:5c:62:dc:ba:
c1:dc:70:95:be:f4:f1:48:be:72:1d:71:db:c6:f3:ad:68:d4:
40:fc:3d:07:73:8b:f7:33:fb:b6:df:57:e8:02:aa:71:e0:ba:
0a:cd:4c:22:69:b5:c0:a2:9b:1a:20:6b:3b:8c:6d:81:e0:71:
aa:b8:8d:fd:a8:32:a6:03:68:44:b5:69:f6:9d:52:b4:82:fd:
1b:a8:57:f5:3a:ac:b6:37:a8:4b:1c:e9:c5:bb:92:0c:9e:9f:
02:b6:57:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbUhbICbu9Q1i9Ef3e0JiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjRkYjFkY2YwYzI0MjllMTIxNTE2YWUyNzkyZmMzMjUz
ZmQzYmEwHhcNMjYwNzI0MDAwMTI1WhcNMjYwNzI1MDAwMTI1WjAzMTEwLwYDVQQD
EyhlNGFlNzZhY2U4NDMxODU0YzIwOGI3YjgwN2IyZWVjNDBkYjFmMjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTlpXuHO9IMs9RXXPc/33LRn0xvp
19ViQm8wk+cfEdXaiV+IC72VWTDpMkSqOLLdBkzAzqV5vewd0bVa6W2uSTsOv/Uy
uAeU8/yMjUWM8EWeP9SFf8NZPTGFYM/nKpI5aJ8B3N+ZBu+1H8qnhrOpkntgJ9Qs
oCM1J2hR8fhj6OwB1XXZ/8LqjT82M1M/DFO+/Wl6E7Xbh7LBk5m3OncRxNi47dLI
Y5vOb2ls0TNaoaruLmcMgVy+Gvb0WhaMX84XVT9YosmCO5QTXbTj6rMAx6TKCZVg
9PxjKQFez5HMPxcDtZVevI1xEgSVi7CqFpIhhBSqeil7ruREcZGRkzMpDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSudqzoQxhUwgi3uAey7sQNsfIeMB8GA1UdIwQY
MBaAFAMk2x3PDCQp4SFRauJ5L8MlP9O6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85MGY5NDItNjUxMS00MDU0LTk0YmUt
NGQyYzRkYTcyMWQ0LzEvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85MGY5NDItNjUxMS00MDU0LTk0YmUtNGQyYzRkYTcyMWQ0
LzEvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrwQlTvB
5XqbObCHFajLC3DrMe7BClRdsQjk9dS8v7ioQ24rp5B1t8rLP7WKwuN4siHvcSQC
75T5b+H5rBe1LeU8IbRSdoJtE8CzA9eZrfe9P3LCiCAqJDcqnzRjR23kGLIRbUwL
8Vu9LV1fYOlHtecajchVsP21BqkAZj4Q/izT48Nr01cwv1ICwSp9EX32YgtHGSP6
cOPvd7JxtyJcYty6wdxwlb708Ui+ch1x28bzrWjUQPw9B3OL9zP7tt9X6AKqceC6
Cs1MImm1wKKbGiBrO4xtgeBxqriN/agypgNoRLVp9p1StIL9G6hX9TqstjeoSxzp
xbuSDJ6fArZXbA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:04 2026 by rpki-client