Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
File: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft (raw, json)
Hash identifier: 3EtqVYoZ2dklXgvPlFQPh5UH66RAo22gwPWS0AlRwdc=
Subject key identifier: A6:08:39:AF:00:EC:C9:34:5A:DB:B3:AD:B9:9D:83:4F:3F:71:7F:35
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Certificate issuer: /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial: 019D2A04AE58BA8568047B071E5DCF60F08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 12:00:42 +0000
Manifest this update: Thu 26 Mar 2026 12:00:42 +0000
Manifest next update: Fri 27 Mar 2026 12:00:42 +0000
Files and hashes: 1: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl (hash: obOe764144IgUqNz5rlu/L/hiF43fy5Ha0pouEo/I4c=)
2: nu_nfWvngwD8Y74CXi065T5OVuQ.roa (hash: d92WDDshr8YLz0+Twkg4dzAWaxn6uiHcpqEqs+83HsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:ae:58:ba:85:68:04:7b:07:1e:5d:cf:60:f0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Validity
Not Before: Mar 26 12:00:42 2026 GMT
Not After : Mar 27 12:00:42 2026 GMT
Subject: CN=a60839af00ecc9345adbb3adb99d834f3f717f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:bd:4c:5c:d2:38:28:6a:fb:96:13:9c:1b:
e2:86:13:ca:d3:0d:78:05:4c:8f:43:a1:06:af:47:
91:85:59:2f:ff:06:78:f4:06:02:22:cb:16:67:f6:
81:a6:a1:d1:ee:0e:e8:52:5b:99:bb:10:b8:06:e4:
c0:1d:54:e5:de:3a:1e:66:1d:93:31:66:2f:90:1e:
a7:71:be:4e:66:c6:da:6e:a2:a6:cf:af:3a:a0:dc:
c8:2c:16:3c:2f:d1:2c:63:a1:9d:39:66:09:ba:34:
11:6d:30:37:fe:ef:0f:65:d9:2b:26:b6:18:e1:67:
eb:6a:05:ea:0c:b2:fa:ac:c1:40:03:e2:e4:e0:67:
4f:cc:92:de:2f:97:e9:1f:da:2a:9a:d1:75:34:19:
e6:14:56:fa:c0:bc:cf:57:3d:cc:c6:4c:57:7a:6f:
eb:09:f7:8d:6f:c3:8d:29:95:61:6b:4c:b8:e0:2a:
03:d6:81:c0:4b:df:dd:12:c4:0e:11:87:d9:9b:dd:
5a:7d:58:84:dc:73:cf:bd:69:46:9f:ac:a9:b3:9e:
f7:a7:37:bc:50:c1:a1:c8:bf:cc:1b:4e:82:93:77:
43:56:34:34:38:40:ec:3a:00:d1:8a:ee:ad:a6:5b:
a4:c5:b9:63:c5:5f:4e:e2:d3:7a:ce:4c:15:4c:00:
69:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:08:39:AF:00:EC:C9:34:5A:DB:B3:AD:B9:9D:83:4F:3F:71:7F:35
X509v3 Authority Key Identifier:
keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5d:1b:34:e5:83:d5:81:b2:ca:3a:1e:dd:d0:38:14:0c:d6:
ff:ff:77:0a:26:6e:b1:74:f5:05:a8:a6:45:3f:aa:73:5c:e7:
f6:07:82:65:f9:a7:7d:f4:e4:86:fb:58:ac:09:ee:55:2e:95:
1e:48:32:e3:eb:f0:75:5d:2d:0b:a3:24:78:08:97:65:f3:7e:
db:13:8a:8d:c1:6f:b4:43:6d:d2:d2:33:24:65:4f:cb:2e:fe:
58:93:c3:6a:93:56:8e:38:f4:f5:07:a2:3e:44:0b:b5:9a:81:
07:09:7d:b3:66:94:0b:0f:37:bc:c5:1a:f9:65:93:97:be:6c:
7e:c2:6b:a8:73:6c:83:d9:14:f3:ca:fe:95:c1:04:e2:f8:11:
0b:79:ab:91:87:9d:14:da:3a:61:e8:f6:a3:83:df:1c:2f:0b:
83:15:d4:77:ce:5b:a5:6c:bd:94:95:79:41:04:d2:c4:17:b4:
c1:1d:50:2e:85:34:05:4e:b7:ee:80:eb:1a:f1:4a:b7:3b:c7:
83:3a:08:c1:98:07:f2:1a:be:09:b0:70:91:90:95:b2:68:ef:
b0:bf:17:2d:59:df:19:50:47:ab:f8:61:1a:f3:52:88:63:b9:
6a:92:5d:86:3f:b7:9e:87:d9:9a:40:f0:d8:f8:ee:2c:63:30:
6b:ff:b8:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBK5YuoVoBHsHHl3PYPCLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjRkMTY5NzdlZWUyZjU4YmViMWJiN2FhMmY0YjJmYTFh
YmZjNDgwHhcNMjYwMzI2MTIwMDQyWhcNMjYwMzI3MTIwMDQyWjAzMTEwLwYDVQQD
EyhhNjA4MzlhZjAwZWNjOTM0NWFkYmIzYWRiOTlkODM0ZjNmNzE3ZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1u9TFzSOChq+5YTnBvihhPK0w14
BUyPQ6EGr0eRhVkv/wZ49AYCIssWZ/aBpqHR7g7oUluZuxC4BuTAHVTl3joeZh2T
MWYvkB6ncb5OZsbabqKmz686oNzILBY8L9EsY6GdOWYJujQRbTA3/u8PZdkrJrYY
4WfragXqDLL6rMFAA+Lk4GdPzJLeL5fpH9oqmtF1NBnmFFb6wLzPVz3MxkxXem/r
CfeNb8ONKZVha0y44CoD1oHAS9/dEsQOEYfZm91afViE3HPPvWlGn6yps573pze8
UMGhyL/MG06Ck3dDVjQ0OEDsOgDRiu6tplukxbljxV9O4tN6zkwVTABplwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYIOa8A7Mk0Wtuzrbmdg08/cX81MB8GA1UdIwQY
MBaAFAMk0Wl37uL1i+sbt6ovSy+hq/xIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80NTc4YTYtMWExYy00OTQ0LWE3NzMt
YzI1ZDdmY2EwMDM3LzEvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80NTc4YTYtMWExYy00OTQ0LWE3NzMtYzI1ZDdmY2EwMDM3
LzEvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArl0bNOWD
1YGyyjoe3dA4FAzW//93CiZusXT1BaimRT+qc1zn9geCZfmnffTkhvtYrAnuVS6V
Hkgy4+vwdV0tC6MkeAiXZfN+2xOKjcFvtENt0tIzJGVPyy7+WJPDapNWjjj09Qei
PkQLtZqBBwl9s2aUCw83vMUa+WWTl75sfsJrqHNsg9kU88r+lcEE4vgRC3mrkYed
FNo6Yej2o4PfHC8LgxXUd85bpWy9lJV5QQTSxBe0wR1QLoU0BU637oDrGvFKtzvH
gzoIwZgH8hq+CbBwkZCVsmjvsL8XLVnfGVBHq/hhGvNSiGO5apJdhj+3nofZmkDw
2PjuLGMwa/+44A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:29:44 2026 by rpki-client