Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
File: Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft (raw, json)
Hash identifier: p3K91GY3TwK/18angCfPhlWDNAPGE38KU0v5czKcmdU=
Subject key identifier: 48:BF:58:AC:3B:43:61:25:28:5B:95:51:C7:AD:5A:7E:53:0C:A9:F6
Authority key identifier: 03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A
Certificate issuer: /CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
Certificate serial: 019D29618E3C99025E8326E4ACC24129818D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
Manifest number: 9F
Signing time: Thu 26 Mar 2026 09:02:32 +0000
Manifest this update: Thu 26 Mar 2026 09:02:32 +0000
Manifest next update: Fri 27 Mar 2026 09:02:32 +0000
Files and hashes: 1: Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl (hash: H6UsBD5pVuldyp9jsQtDC3B+5fDNnIT3095t28RGA1Y=)
2: eLRzDYpH6ctJoMbMPtU-ULGxRIo.roa (hash: OdzMUAVnw7I56wJuOq/9aOkYjscK9Sg8yKOxq15PvwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:8e:3c:99:02:5e:83:26:e4:ac:c2:41:29:81:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
Validity
Not Before: Mar 26 09:02:32 2026 GMT
Not After : Mar 27 09:02:32 2026 GMT
Subject: CN=48bf58ac3b436125285b9551c7ad5a7e530ca9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:11:dd:07:0e:6e:80:bd:53:f7:7c:a4:47:12:
61:f4:e3:fd:91:e8:a2:9b:4a:fa:33:46:99:d5:0b:
bd:2f:e5:cc:07:01:1b:45:2a:74:49:b8:8e:e3:9a:
ef:6d:a9:d6:f7:91:61:1b:2e:0d:a6:ab:48:48:9a:
01:84:91:36:51:0c:92:b4:67:28:e3:29:ce:17:af:
00:9c:6d:a6:5b:60:73:f3:c3:3e:1a:b8:c1:8f:3a:
07:35:30:ed:00:96:9c:f6:c9:07:2c:c8:9a:9c:be:
81:a3:08:c2:04:42:51:26:bf:18:7a:9d:50:19:8f:
67:0d:31:2e:be:6d:ca:b8:29:1e:2e:30:ad:f3:0c:
07:8a:ed:fe:95:61:ae:06:ab:e6:3e:79:67:ba:66:
2c:72:66:98:81:c1:6d:17:99:2f:18:94:7b:7b:a0:
c3:1f:6a:48:75:d7:2e:60:8f:01:3c:89:7f:43:dc:
a5:ad:af:ef:e6:39:37:dd:dc:25:fa:f2:64:5a:e6:
80:51:2d:2c:4a:e6:b6:71:04:77:dd:0d:18:a1:ce:
94:10:ce:e0:1f:84:66:e8:5e:7c:bd:56:ec:ef:33:
3d:f2:b5:bc:29:d4:00:bf:c5:22:d4:9c:0b:29:23:
12:fd:55:0f:6a:f3:10:86:97:c7:dc:66:61:88:c4:
13:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BF:58:AC:3B:43:61:25:28:5B:95:51:C7:AD:5A:7E:53:0C:A9:F6
X509v3 Authority Key Identifier:
keyid:03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:55:be:c2:b0:5e:56:bb:42:3f:a0:b2:0e:99:d4:3b:85:e3:
3d:99:8d:c5:7b:4c:73:00:e2:5d:aa:fb:64:95:0e:84:fd:63:
63:57:d8:d9:65:da:5b:f3:de:22:60:05:2d:64:b5:a2:47:eb:
a9:4a:2e:34:a0:34:91:a5:11:34:f9:85:69:fb:29:0e:08:e9:
88:4a:5f:8e:84:b2:cd:8e:30:19:d2:3e:2b:0e:50:63:33:51:
b1:cd:a4:f4:68:e0:4f:58:3c:5b:96:b0:69:3b:8d:db:01:27:
47:f9:b8:f7:18:67:f3:63:eb:54:35:65:bc:52:54:5a:14:e2:
02:ee:f6:51:80:95:8a:e0:4f:5e:ac:89:a8:7a:2d:4a:44:5d:
97:48:4b:97:17:cf:c5:f2:19:52:92:e6:01:81:cb:9d:6c:8f:
7b:9a:a9:f2:08:48:10:4b:f1:77:9a:47:78:58:bb:da:48:56:
34:2e:aa:d3:50:bb:98:9c:c6:f9:c2:db:1c:62:7d:a4:29:68:
71:fc:bf:07:a5:4b:88:29:41:dd:f3:cf:69:74:4f:c9:8b:94:
ec:8c:5f:e9:c4:88:20:bb:6c:18:ba:f8:79:88:fd:18:84:d7:
d1:f4:a0:7e:64:b1:6e:f9:fd:a9:10:3b:d5:66:f6:23:89:2d:
c4:90:bc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:11:54 2026 by rpki-client