Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File: AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier: WXySIedBlYu50Yh6hcsrOA+xEPQOvkbkypWmLj+kDZU=
Subject key identifier: 10:BB:63:89:33:E3:AC:0F:D6:24:CA:CE:B6:51:6C:F1:0E:3F:56:78
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial: 01A0CE241FF6266B1F9B9E580B21FBCC144B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number: 0B41
Signing time: Wed 23 Sep 2026 12:01:08 +0000
Manifest this update: Wed 23 Sep 2026 12:01:08 +0000
Manifest next update: Thu 24 Sep 2026 12:01:08 +0000
Files and hashes: 1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: FF2RczSjMnwJdJCIgNUANvoAtcbrMingbgkklSLYIx4=)
2: JpSPlDAfnmaVaihRumPcTPfmvXc.roa (hash: Y5Z9rAeAn1T7cnOOHo3m55iyERIOyEhwXNrdUR5k5k4=)
3: joOy9zn86SRS3S0JJdQNk7WRD1s.roa (hash: 6Lg/ZII9MO/NUIL4lYaxUeR/rqOY01y6TRhSs+4wA6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:1f:f6:26:6b:1f:9b:9e:58:0b:21:fb:cc:14:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Validity
Not Before: Sep 23 12:01:08 2026 GMT
Not After : Sep 24 12:01:08 2026 GMT
Subject: CN=10bb638933e3ac0fd624caceb6516cf10e3f5678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:bf:07:5b:a6:8e:3b:d7:45:c9:d6:5e:d8:
07:5f:e7:b2:13:c9:8d:e1:c3:48:e9:75:75:41:8d:
ef:9f:80:11:a7:8c:fe:cf:26:f3:c7:d7:db:ef:3d:
3a:c3:3a:30:a5:59:d3:e8:88:72:ac:bd:59:a6:39:
5e:5a:93:ae:9f:d0:56:2e:74:b2:cd:de:5e:a3:8d:
23:62:01:3f:af:9a:cc:bb:b6:1e:a2:2c:87:37:86:
60:bf:db:3b:d1:b4:71:c5:ba:8a:61:a6:c1:a7:9e:
10:f5:fe:fa:1d:fc:b2:21:46:fc:0a:57:ef:37:0e:
bd:83:01:20:9c:c4:d4:28:bc:67:1b:63:39:2f:09:
1d:31:84:8d:e9:cb:09:3f:34:db:2b:b9:ec:89:fd:
17:ca:ca:c5:88:63:23:b2:00:b6:07:79:60:be:5c:
22:72:f7:88:c9:e9:ae:ca:6f:6c:6c:e4:76:4c:f9:
e0:90:aa:ee:21:40:0e:ad:5c:d5:9d:ca:22:99:1e:
ce:c1:76:6d:69:00:e8:ff:04:1e:94:13:06:5f:44:
ed:6f:c8:b2:f9:1a:1b:b1:b8:fa:05:0d:99:ad:08:
0b:bc:a9:c8:a2:79:34:8c:1a:6b:84:ca:f9:b5:9b:
0c:e8:cd:83:e1:67:b4:30:2d:61:8f:bf:2f:bd:af:
35:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BB:63:89:33:E3:AC:0F:D6:24:CA:CE:B6:51:6C:F1:0E:3F:56:78
X509v3 Authority Key Identifier:
keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3a:24:d3:45:a0:d9:df:f2:70:cb:2a:7e:00:13:ba:8f:41:
14:9a:93:8f:65:cf:54:11:b8:6a:12:a3:cc:e8:37:fd:a5:78:
3b:bb:dd:59:6f:a0:81:44:5c:dd:0b:9b:53:f8:d9:65:57:59:
81:6c:00:1a:bc:bf:ff:e1:36:64:37:97:72:e7:39:b6:29:63:
f7:a6:9a:40:0c:95:25:5c:5f:47:6e:e9:96:84:ca:25:ac:21:
3a:97:c9:0f:4c:d0:92:0a:90:f3:3e:df:d1:41:50:4c:75:55:
eb:15:4b:e9:00:4b:c2:25:da:72:b0:79:62:be:a7:f9:ad:1e:
08:a5:ed:e8:63:45:c3:22:da:4c:f5:1e:3e:fb:f3:88:f2:91:
39:54:5b:56:bd:3c:62:8e:81:d6:c0:4d:46:05:be:51:b3:61:
a3:ce:50:b9:f1:56:27:ad:ab:3b:23:60:1c:7e:4b:34:f2:c6:
7d:39:c8:74:1a:20:7f:38:b6:47:fd:45:47:10:e0:45:36:cf:
a7:8e:a2:e5:50:f4:cf:3e:6a:65:5f:e9:b7:93:02:c0:8d:13:
96:74:4a:63:34:35:7b:72:6b:1f:ec:db:ae:41:34:18:3b:47:
6b:3b:71:76:43:0d:a8:2e:ca:a5:b9:12:2a:fa:8a:77:db:29:
0b:d9:3f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:02:20 2026 by rpki-client