Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
File: aYROE3TxxFgb-_etRjihEtMW--Q.mft (raw, json)
Hash identifier: hQ9PXXFGhezRtehdgUwFaJd9w3Yso7v67tOg7nAC07s=
Subject key identifier: 48:5C:8A:86:6E:5D:59:B1:70:AB:30:F7:3E:A1:E2:79:8B:B2:CA:F6
Authority key identifier: 69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4
Certificate issuer: /CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
Certificate serial: 019D2816A00C3E8476D6E10D577A7194C862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
Manifest number: D3
Signing time: Thu 26 Mar 2026 03:01:04 +0000
Manifest this update: Thu 26 Mar 2026 03:01:04 +0000
Manifest next update: Fri 27 Mar 2026 03:01:04 +0000
Files and hashes: 1: _YyM5Fz0fRt9WBEEudyzbZgfybs.roa (hash: 4qY+Fv3RexE/YICr0m64zJ0sFOUpiGhvhqq4dKDZLy4=)
2: aYROE3TxxFgb-_etRjihEtMW--Q.crl (hash: Z3tphJ2ZgvGetfV2bYgSa0lq53fNzlQC4qrrQu7S03s=)
3: rYhwjOOa4-7RvBsKuPyCuJ2kOac.roa (hash: EeI2oHDpvRTGlcgIn02601fBNayk3lM8V1SAStGUI1w=)
4: seE8MA1IAHQhkFxKO3DiabXwc2k.roa (hash: 3toCWdrJKeaWZ1jR0rxFlsqTNbw+YdEAy/zdrsfgu1c=)
5: zvV261hgmMdkR1G7Cy93JC-Zxsw.roa (hash: hneXIhVn6/jTbVYrQJSFmDE3v0R1YG1vWQx+UejdDSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:a0:0c:3e:84:76:d6:e1:0d:57:7a:71:94:c8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
Validity
Not Before: Mar 26 03:01:04 2026 GMT
Not After : Mar 27 03:01:04 2026 GMT
Subject: CN=485c8a866e5d59b170ab30f73ea1e2798bb2caf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:51:b1:33:dc:7b:47:f9:70:00:ea:a1:a6:3f:
c7:e3:3a:ac:4f:6d:0b:80:cc:17:1b:63:28:28:f1:
ee:aa:d8:fb:5e:01:a9:5f:d2:82:22:12:2d:eb:52:
c5:6c:4b:22:22:0f:e3:c7:62:f9:90:5e:62:67:1c:
77:06:e1:4c:b0:c3:a1:f8:e5:75:8d:4b:90:ed:02:
eb:5d:dc:36:2d:a2:72:9a:ea:78:64:32:93:89:ea:
5c:3f:39:f6:21:43:fe:2f:b6:09:f4:c1:f6:e3:ba:
62:6c:f9:2a:e4:6a:e2:8d:99:58:03:4a:10:95:49:
9b:da:bc:9c:97:95:f3:ba:1c:72:7e:43:9d:1e:15:
fd:4c:90:d5:12:53:97:c0:a8:11:8c:09:9a:4a:df:
b1:d0:3b:c7:8f:5c:18:b8:92:ef:b1:37:a0:e6:5b:
1c:8b:30:69:20:0a:ec:d9:9e:ed:4e:65:c9:1a:41:
ee:75:d0:76:8c:53:87:3d:91:4c:a5:36:9c:a5:6f:
df:93:92:9e:79:d0:ad:f5:74:9d:00:24:25:83:94:
0f:f2:ed:43:d3:d2:a4:20:09:4d:c9:52:64:c1:0b:
06:1b:62:85:3a:5c:c2:8d:84:42:bb:52:4a:59:48:
f6:0d:e4:2b:4c:94:5c:96:65:f6:8b:62:b3:29:91:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5C:8A:86:6E:5D:59:B1:70:AB:30:F7:3E:A1:E2:79:8B:B2:CA:F6
X509v3 Authority Key Identifier:
keyid:69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c3:a8:f8:25:07:d4:33:af:70:f3:35:38:47:f6:ad:91:72:
a2:d5:02:e2:9e:72:39:61:9a:2f:50:32:29:85:fc:21:48:0f:
90:68:71:cd:08:e0:b2:4a:8b:f0:73:3c:a3:72:b3:fd:ef:33:
47:84:dc:25:24:d7:86:35:d8:c5:da:fc:35:f4:64:03:f8:16:
94:ee:0d:1f:e7:48:ca:5d:87:06:6b:a8:ab:0b:1b:17:ef:df:
38:a0:1f:80:8c:48:8d:8d:c3:1a:95:03:0b:2e:9f:8d:39:7f:
94:ab:d9:36:1c:77:3c:bd:ac:c8:6e:83:42:e0:b1:34:14:cd:
dd:ce:e6:58:fa:b9:f5:82:37:89:a6:ce:96:11:98:5e:bc:04:
79:97:c6:a1:ec:7c:70:c5:e2:07:ca:38:b0:66:95:1a:e6:40:
41:4f:98:8c:e3:85:32:93:4c:cc:45:22:83:5f:43:f8:d3:2d:
5d:ba:dc:98:4c:0d:10:c6:fd:11:bc:57:37:5f:20:b2:59:d7:
6a:e9:97:a0:37:f5:dd:cd:bd:9e:a0:5a:b3:25:58:80:24:82:
5d:24:b4:0d:8d:3f:32:4d:ba:94:ee:ab:a9:1b:1c:ee:88:d9:
98:f7:80:bb:7e:a1:01:a6:fb:14:7f:35:82:92:05:da:d7:4d:
3d:cc:d7:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFqAMPoR21uENV3pxlMhiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ODQ0ZTEzNzRmMWM0NTgxYmZiZjdhZDQ2MzhhMTEyZDMx
NmZiZTQwHhcNMjYwMzI2MDMwMTA0WhcNMjYwMzI3MDMwMTA0WjAzMTEwLwYDVQQD
Eyg0ODVjOGE4NjZlNWQ1OWIxNzBhYjMwZjczZWExZTI3OThiYjJjYWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVGxM9x7R/lwAOqhpj/H4zqsT20L
gMwXG2MoKPHuqtj7XgGpX9KCIhIt61LFbEsiIg/jx2L5kF5iZxx3BuFMsMOh+OV1
jUuQ7QLrXdw2LaJymup4ZDKTiepcPzn2IUP+L7YJ9MH247pibPkq5GrijZlYA0oQ
lUmb2rycl5XzuhxyfkOdHhX9TJDVElOXwKgRjAmaSt+x0DvHj1wYuJLvsTeg5lsc
izBpIArs2Z7tTmXJGkHuddB2jFOHPZFMpTacpW/fk5KeedCt9XSdACQlg5QP8u1D
09KkIAlNyVJkwQsGG2KFOlzCjYRCu1JKWUj2DeQrTJRclmX2i2KzKZFTTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhcioZuXVmxcKsw9z6h4nmLssr2MB8GA1UdIwQY
MBaAFGmEThN08cRYG/v3rUY4oRLTFvvkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVlST0UzVHh4RmdiLV9ldFJqaWhFdE1XLS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8zZDU0YjktYTc2My00NTE0LTk0Njct
OGFhZWY3NmMyZTk4LzEvYVlST0UzVHh4RmdiLV9ldFJqaWhFdE1XLS1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8zZDU0YjktYTc2My00NTE0LTk0NjctOGFhZWY3NmMyZTk4
LzEvYVlST0UzVHh4RmdiLV9ldFJqaWhFdE1XLS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsOo+CUH
1DOvcPM1OEf2rZFyotUC4p5yOWGaL1AyKYX8IUgPkGhxzQjgskqL8HM8o3Kz/e8z
R4TcJSTXhjXYxdr8NfRkA/gWlO4NH+dIyl2HBmuoqwsbF+/fOKAfgIxIjY3DGpUD
Cy6fjTl/lKvZNhx3PL2syG6DQuCxNBTN3c7mWPq59YI3iabOlhGYXrwEeZfGoex8
cMXiB8o4sGaVGuZAQU+YjOOFMpNMzEUig19D+NMtXbrcmEwNEMb9EbxXN18gslnX
aumXoDf13c29nqBasyVYgCSCXSS0DY0/Mk26lO6rqRsc7ojZmPeAu36hAab7FH81
gpIF2tdNPczXbw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:36:13 2026 by rpki-client