Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
File: AyUDQljydbfIfl9PcHBsDPWI78M.mft (raw, json)
Hash identifier: 0fQQDep4OVZuQ1igjTabXLSyRPvEQDtpOzs2wZBkB3A=
Subject key identifier: DA:D3:6D:6E:3A:4D:1D:18:3D:3D:CD:4A:02:33:2A:83:3B:6D:CC:B3
Authority key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
Certificate issuer: /CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Certificate serial: 019F927EF0F06E68E8DA6EFB956E04831B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
Manifest number: 1984
Signing time: Fri 24 Jul 2026 05:00:20 +0000
Manifest this update: Fri 24 Jul 2026 05:00:20 +0000
Manifest next update: Sat 25 Jul 2026 05:00:20 +0000
Files and hashes: 1: 3vVG8o2ITJwtPnNIQhuIxnCqGaY.roa (hash: 8/W7Ss/HYT0cvaLGI01I8cqgEGbSHHWsxyzYNVKNbA0=)
2: AyUDQljydbfIfl9PcHBsDPWI78M.crl (hash: 4KAqDRGcrLRl/1cExTuhFXdAAr9hUaFyyZ0dGgtSAv4=)
3: SLEbsnJN0TIrYMPUkwo_HtQI_YY.roa (hash: sEW6+6ZZRuXcX0E6lls/B3TG4bjdd1ae0xcdGkWi5Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:f0:f0:6e:68:e8:da:6e:fb:95:6e:04:83:1b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Validity
Not Before: Jul 24 05:00:20 2026 GMT
Not After : Jul 25 05:00:20 2026 GMT
Subject: CN=dad36d6e3a4d1d183d3dcd4a02332a833b6dccb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:48:77:a1:c2:88:77:ec:6f:68:51:f4:dd:
c3:75:d7:c1:32:fd:7a:df:06:46:8e:85:6a:c4:93:
73:33:ed:d7:61:86:c6:f6:ca:af:4e:0b:c0:e3:96:
f3:09:7c:b2:5c:ec:d4:d6:42:1e:b3:a2:4a:cd:37:
20:9f:19:84:29:12:c8:ba:50:41:64:0c:94:37:d9:
16:d9:e6:07:d2:89:58:c0:04:fe:f5:c6:b6:7e:c9:
31:bf:62:44:87:3a:f4:a8:4b:a2:9f:e4:db:e4:47:
c2:c1:17:d4:9f:a4:7a:62:63:af:78:d0:ad:72:7b:
18:f9:26:03:5b:a5:27:5b:02:75:23:9a:e2:0a:19:
82:4c:ec:12:ce:54:1c:7e:1c:2b:c0:86:d1:42:d2:
1f:88:d5:73:e8:07:84:75:40:46:53:23:8a:a1:fc:
3a:87:ea:d4:79:9b:f0:f9:fd:04:d1:d2:ee:e7:a0:
d9:c7:fa:c3:53:90:9e:20:a1:d9:64:57:b9:6a:de:
20:72:81:ae:73:72:13:47:d6:72:71:bd:cf:40:82:
a4:a8:c1:3c:ff:cd:3c:e5:e6:a7:fb:a9:a2:73:50:
1e:d8:a1:f4:39:e1:5b:17:36:73:ab:0c:93:cf:49:
4b:a1:78:21:62:6f:54:3d:b8:b1:8f:a8:06:45:ab:
da:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D3:6D:6E:3A:4D:1D:18:3D:3D:CD:4A:02:33:2A:83:3B:6D:CC:B3
X509v3 Authority Key Identifier:
keyid:03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7b:ce:29:8e:8c:90:74:8e:6c:d8:25:31:0b:e5:3d:2f:18:
f6:b0:0b:41:ad:ac:47:1f:aa:a0:25:1f:a1:cb:c8:55:5e:38:
17:6b:35:53:c5:41:23:46:2f:6d:74:c1:70:13:6a:a7:bd:a9:
56:89:87:5f:0d:17:31:23:07:19:79:55:19:2b:39:f0:d8:d1:
71:9e:72:5c:00:fe:a7:cd:d1:8c:7d:93:3a:2c:b1:09:76:5d:
4d:20:75:f9:ff:b9:23:00:37:b9:b3:b6:cf:40:b8:69:c2:ed:
29:78:9e:d8:30:16:a8:95:23:37:c6:8b:97:2d:93:1e:86:f7:
c5:2e:dc:12:2c:78:ff:2d:ce:19:c0:33:04:07:1a:04:34:67:
c2:d3:bf:19:35:c9:e4:e7:7a:c0:3f:d6:3c:da:59:2d:11:32:
74:86:48:3f:48:de:49:a3:40:b7:ad:ff:f5:4d:11:d1:80:33:
93:15:bb:20:7b:30:20:51:f4:1a:0f:48:37:ad:0c:a5:18:30:
1b:a7:0a:d9:f2:57:9c:d0:be:ec:2d:da:ba:8b:29:af:80:17:
27:54:2d:05:b9:72:79:ec:ca:5a:76:fe:eb:2e:8b:ee:48:0a:
ba:e0:56:d9:88:c9:d7:86:3c:c2:79:dd:88:39:74:cc:b7:d1:
f3:e5:80:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SfvDwbmjo2m77lW4EgxstMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjUwMzQyNThmMjc1YjdjODdlNWY0ZjcwNzA2YzBjZjU4
OGVmYzMwHhcNMjYwNzI0MDUwMDIwWhcNMjYwNzI1MDUwMDIwWjAzMTEwLwYDVQQD
EyhkYWQzNmQ2ZTNhNGQxZDE4M2QzZGNkNGEwMjMzMmE4MzNiNmRjY2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtVId6HCiHfsb2hR9N3DddfBMv16
3wZGjoVqxJNzM+3XYYbG9sqvTgvA45bzCXyyXOzU1kIes6JKzTcgnxmEKRLIulBB
ZAyUN9kW2eYH0olYwAT+9ca2fskxv2JEhzr0qEuin+Tb5EfCwRfUn6R6YmOveNCt
cnsY+SYDW6UnWwJ1I5riChmCTOwSzlQcfhwrwIbRQtIfiNVz6AeEdUBGUyOKofw6
h+rUeZvw+f0E0dLu56DZx/rDU5CeIKHZZFe5at4gcoGuc3ITR9Zycb3PQIKkqME8
/8085ean+6mic1Ae2KH0OeFbFzZzqwyTz0lLoXghYm9UPbixj6gGRavaLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrTbW46TR0YPT3NSgIzKoM7bcyzMB8GA1UdIwQY
MBaAFAMlA0JY8nW3yH5fT3BwbAz1iO/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTIt
OWEzN2M2MDY5YmMxLzEvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTItOWEzN2M2MDY5YmMx
LzEvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHvOKY6M
kHSObNglMQvlPS8Y9rALQa2sRx+qoCUfocvIVV44F2s1U8VBI0YvbXTBcBNqp72p
VomHXw0XMSMHGXlVGSs58NjRcZ5yXAD+p83RjH2TOiyxCXZdTSB1+f+5IwA3ubO2
z0C4acLtKXie2DAWqJUjN8aLly2THob3xS7cEix4/y3OGcAzBAcaBDRnwtO/GTXJ
5Od6wD/WPNpZLREydIZIP0jeSaNAt63/9U0R0YAzkxW7IHswIFH0Gg9IN60MpRgw
G6cK2fJXnNC+7C3auospr4AXJ1QtBblyeezKWnb+6y6L7kgKuuBW2YjJ14Y8wnnd
iDl0zLfR8+WAGw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:57 2026 by rpki-client