Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
File: Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft (raw, json)
Hash identifier: IUJD6cBoYQJJXtkjzLmatOsDE7QHf7PDEqty5IUDF48=
Subject key identifier: 8D:3D:B5:20:69:32:43:2F:AE:D3:88:9B:D7:27:01:CF:E7:66:C2:75
Authority key identifier: 03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A
Certificate issuer: /CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
Certificate serial: 01A0D7CD452B3D5453A28D7D4CCA5DE0615E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
Manifest number: 0287
Signing time: Fri 25 Sep 2026 09:02:29 +0000
Manifest this update: Fri 25 Sep 2026 09:02:29 +0000
Manifest next update: Sat 26 Sep 2026 09:02:29 +0000
Files and hashes: 1: Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl (hash: lvTqtslaA5WSzLPrX9254GkT7JvVpecb52WCFHvP4u4=)
2: eLRzDYpH6ctJoMbMPtU-ULGxRIo.roa (hash: OdzMUAVnw7I56wJuOq/9aOkYjscK9Sg8yKOxq15PvwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cd:45:2b:3d:54:53:a2:8d:7d:4c:ca:5d:e0:61:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
Validity
Not Before: Sep 25 09:02:29 2026 GMT
Not After : Sep 26 09:02:29 2026 GMT
Subject: CN=8d3db5206932432faed3889bd72701cfe766c275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:8d:6e:17:f4:47:d8:4e:3f:6b:4d:20:6a:
c0:a8:92:e0:7f:ba:c2:86:ac:9c:22:88:92:8e:77:
52:a3:34:c7:a8:f6:8d:e4:12:ef:e0:18:6a:c4:a8:
cf:52:c6:78:b9:37:a1:55:33:8a:99:3c:11:1a:0b:
ac:10:29:9c:c0:35:e4:de:8c:77:2b:10:4a:12:ec:
1b:8b:4c:eb:17:61:79:72:ce:c2:c2:f0:2f:ae:b7:
95:22:95:bb:48:cc:46:ff:ec:dc:09:b9:06:43:32:
6f:d6:d0:1e:c3:a5:de:4e:5c:1b:3a:94:63:77:f8:
50:18:a7:f4:6e:5e:40:44:04:68:2b:30:04:11:0a:
13:14:2f:28:af:27:2d:03:ba:9a:19:b8:7e:09:83:
fb:29:38:55:90:35:31:c4:0d:df:c9:65:73:d7:6b:
2e:af:b6:4e:15:73:68:b1:56:6f:91:70:3c:c7:f9:
c5:c1:ef:42:85:06:ec:f4:e0:78:75:b9:29:d3:fc:
a9:71:94:41:18:87:c0:0a:48:99:be:b2:b7:b8:50:
3d:e1:5e:b8:4c:bd:17:11:03:aa:05:39:79:22:36:
23:5f:a0:57:b3:07:0e:3b:bb:a3:0f:a2:a9:8b:55:
7f:6b:8a:34:61:67:0f:b1:37:8c:36:05:e6:53:35:
0b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3D:B5:20:69:32:43:2F:AE:D3:88:9B:D7:27:01:CF:E7:66:C2:75
X509v3 Authority Key Identifier:
keyid:03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f7:eb:49:1a:7a:d8:3a:df:59:7f:a1:5c:99:9b:51:53:ab:
b8:c3:92:e9:b4:0d:7a:21:3f:25:ef:0a:af:5d:1b:9d:07:4a:
2c:d2:c4:1a:af:6b:e8:ca:dd:ee:bc:42:91:c8:3e:52:04:df:
33:db:6f:05:42:3e:4c:98:0d:48:4c:fd:f8:9e:30:57:1b:67:
32:46:c5:e5:f6:4c:71:e6:6d:8e:ea:0c:19:f3:45:89:33:0f:
3e:0c:fa:09:2e:37:8e:4f:53:ef:61:52:0b:ad:54:64:01:20:
79:ee:1c:7f:94:79:c7:f3:08:d0:9b:46:9e:9f:b3:81:90:a8:
12:b4:46:f3:d7:1b:4e:0a:27:6c:13:15:c9:80:67:32:1f:22:
79:25:a6:15:12:98:af:70:9a:8e:e7:93:ee:63:d3:31:d1:ce:
7c:72:42:86:0b:60:24:a8:b2:42:cd:44:0b:a1:67:fb:4c:b2:
03:33:3e:7d:d9:98:53:6e:9d:3b:f7:cb:d4:6c:ba:97:19:23:
94:17:40:1d:52:65:84:f2:10:16:2d:b8:1d:52:56:0d:e8:0a:
32:8b:5f:8d:5f:dc:6b:d8:13:6d:3c:89:29:64:63:77:37:bf:
5e:30:e4:31:49:06:1b:ee:8b:c6:86:69:92:39:9f:91:88:8e:
fb:7e:4d:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXzUUrPVRToo19TMpd4GFeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjc3NjljMWEwMWUxMjUwZjFmMjhhNjA1YjVjOWQ5YjZk
MzQxOWEwHhcNMjYwOTI1MDkwMjI5WhcNMjYwOTI2MDkwMjI5WjAzMTEwLwYDVQQD
Eyg4ZDNkYjUyMDY5MzI0MzJmYWVkMzg4OWJkNzI3MDFjZmU3NjZjMjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQWNbhf0R9hOP2tNIGrAqJLgf7rC
hqycIoiSjndSozTHqPaN5BLv4BhqxKjPUsZ4uTehVTOKmTwRGgusECmcwDXk3ox3
KxBKEuwbi0zrF2F5cs7CwvAvrreVIpW7SMxG/+zcCbkGQzJv1tAew6XeTlwbOpRj
d/hQGKf0bl5ARARoKzAEEQoTFC8oryctA7qaGbh+CYP7KThVkDUxxA3fyWVz12su
r7ZOFXNosVZvkXA8x/nFwe9ChQbs9OB4dbkp0/ypcZRBGIfACkiZvrK3uFA94V64
TL0XEQOqBTl5IjYjX6BXswcOO7ujD6Kpi1V/a4o0YWcPsTeMNgXmUzULFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI09tSBpMkMvrtOIm9cnAc/nZsJ1MB8GA1UdIwQY
MBaAFAMndpwaAeElDx8opgW1ydm200GaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlkMm5Cb0I0U1VQSHlpbUJiWEoyYmJUUVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kOTRlMjktYWQ5NC00YjBlLWFmYTIt
NjUzM2I3MmM2YTZiLzEvQXlkMm5Cb0I0U1VQSHlpbUJiWEoyYmJUUVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kOTRlMjktYWQ5NC00YjBlLWFmYTItNjUzM2I3MmM2YTZi
LzEvQXlkMm5Cb0I0U1VQSHlpbUJiWEoyYmJUUVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPfrSRp6
2DrfWX+hXJmbUVOruMOS6bQNeiE/Je8Kr10bnQdKLNLEGq9r6Mrd7rxCkcg+UgTf
M9tvBUI+TJgNSEz9+J4wVxtnMkbF5fZMceZtjuoMGfNFiTMPPgz6CS43jk9T72FS
C61UZAEgee4cf5R5x/MI0JtGnp+zgZCoErRG89cbTgonbBMVyYBnMh8ieSWmFRKY
r3CajueT7mPTMdHOfHJChgtgJKiyQs1EC6Fn+0yyAzM+fdmYU26dO/fL1Gy6lxkj
lBdAHVJlhPIQFi24HVJWDegKMotfjV/ca9gTbTyJKWRjdze/XjDkMUkGG+6LxoZp
kjmfkYiO+35NWg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:31:49 2026 by rpki-client