Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File: AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier: pcPdRahC4Ohsv5by4AeJ7kD4rnNencuRzlAZ4PPguTc=
Subject key identifier: CB:54:28:42:E5:C1:2C:00:3E:F2:0D:F8:5E:05:12:5B:7C:2D:A5:B0
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial: 019E1CB5739502FF8E230E1382E3EA6CF10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number: 09DC
Signing time: Tue 12 May 2026 15:01:54 +0000
Manifest this update: Tue 12 May 2026 15:01:54 +0000
Manifest next update: Wed 13 May 2026 15:01:54 +0000
Files and hashes: 1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: yttRsNdPguufymbnx9U4lzFxM/F4F/fWV8d+r9HuPaY=)
2: JpSPlDAfnmaVaihRumPcTPfmvXc.roa (hash: Y5Z9rAeAn1T7cnOOHo3m55iyERIOyEhwXNrdUR5k5k4=)
3: joOy9zn86SRS3S0JJdQNk7WRD1s.roa (hash: 6Lg/ZII9MO/NUIL4lYaxUeR/rqOY01y6TRhSs+4wA6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:73:95:02:ff:8e:23:0e:13:82:e3:ea:6c:f1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Validity
Not Before: May 12 15:01:54 2026 GMT
Not After : May 13 15:01:54 2026 GMT
Subject: CN=cb542842e5c12c003ef20df85e05125b7c2da5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:4a:5c:c8:f1:ab:e8:ba:98:6c:bc:ea:d4:
03:f3:34:3a:ef:59:db:b8:c2:1c:56:cf:b6:e4:9e:
8f:e5:a5:9e:53:c8:b4:cf:cc:fd:1d:7b:82:7b:65:
9f:c8:80:c7:72:b2:48:d2:92:65:59:4d:39:19:d9:
93:93:66:f1:09:cb:04:28:dd:cd:24:3c:1a:62:76:
ee:0f:5c:a0:e9:92:4d:06:f6:e3:0b:bb:02:b3:3d:
1b:81:88:dd:ff:bc:29:d3:6a:50:52:09:10:6d:fb:
3f:52:05:a2:3f:66:f2:e9:84:33:76:56:10:7a:8e:
c4:51:52:10:92:5f:63:10:5e:dd:77:b0:84:98:27:
d7:52:1c:fd:8f:6b:42:fd:db:6c:bf:72:cf:65:d2:
d9:39:cc:9f:3b:fc:79:1c:4f:42:07:c6:53:57:26:
c6:f0:68:90:bb:3c:6b:a8:4c:ca:5b:3b:37:d2:0a:
26:a6:9e:94:c0:59:0a:a9:83:51:c2:5c:19:e8:f5:
90:ca:3a:f0:9a:e6:aa:52:82:86:2c:16:d9:25:91:
8a:99:7f:e3:88:42:5a:b4:cd:51:da:17:87:18:94:
e3:c3:c9:51:8d:ed:f4:47:0d:01:73:d2:09:1b:62:
12:4b:b1:91:42:ab:a6:a7:e7:79:53:15:47:1c:29:
38:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:54:28:42:E5:C1:2C:00:3E:F2:0D:F8:5E:05:12:5B:7C:2D:A5:B0
X509v3 Authority Key Identifier:
keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1f:ba:4c:29:52:62:af:1c:eb:1b:a3:fc:e7:a5:39:c5:60:
5e:b5:a0:8f:fc:37:4d:d4:f5:b8:33:ab:83:2f:e8:e8:4c:2e:
07:2e:c0:d7:95:bd:6b:f9:3f:35:9c:0b:0b:90:71:9b:84:31:
c0:50:4b:fe:d4:4e:95:bc:b2:c4:87:ca:9e:7c:e4:36:b8:d0:
14:d7:3d:80:67:ff:db:8b:eb:67:37:26:c5:5c:3e:81:66:37:
c1:9e:96:f0:39:8f:c6:a8:ae:a6:7a:78:f5:dc:e4:8c:9d:ab:
da:75:e7:f6:a0:91:02:37:91:16:cb:f9:ea:dd:8e:57:18:57:
66:66:90:00:1a:8f:89:c7:ea:20:31:5c:1f:27:17:4b:85:85:
ea:c0:4c:e4:37:58:86:96:61:7e:fa:fd:6e:32:60:1e:12:b0:
2d:1e:68:4e:2f:83:d1:59:53:47:7d:f6:d6:20:81:e6:52:5f:
e2:d5:c4:35:3b:50:4b:70:2b:d2:e4:4d:e5:10:a8:a0:35:bd:
4b:df:3b:6d:d1:95:c0:40:85:62:d1:87:32:93:d0:dd:5d:90:
fd:83:f9:d5:d8:20:e2:0a:c6:3a:f4:cc:d4:de:46:69:8d:20:
86:a0:e2:10:bf:66:2c:79:0d:4c:bc:96:cd:27:71:97:aa:b1:
99:a0:4e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:29 2026 by rpki-client