Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
File: AyUDQljydbfIfl9PcHBsDPWI78M.mft (raw, json)
Hash identifier: eWdK9dSWP8h0Ndc0E6D9m8DIwSeluBfq+AP1VodmGEo=
Subject key identifier: 7C:89:EE:21:7E:E6:09:03:58:8D:7D:72:DA:50:07:E5:0F:9E:BF:39
Authority key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
Certificate issuer: /CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Certificate serial: 019E1BD8B22D2BA3A1CD9DA580A869603AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
Manifest number: 18C2
Signing time: Tue 12 May 2026 11:00:46 +0000
Manifest this update: Tue 12 May 2026 11:00:46 +0000
Manifest next update: Wed 13 May 2026 11:00:46 +0000
Files and hashes: 1: 3vVG8o2ITJwtPnNIQhuIxnCqGaY.roa (hash: 8/W7Ss/HYT0cvaLGI01I8cqgEGbSHHWsxyzYNVKNbA0=)
2: AyUDQljydbfIfl9PcHBsDPWI78M.crl (hash: unaXCrEOaqroGQR7lRhPViX9SvCQKOiQdQxb6X+DMuE=)
3: SLEbsnJN0TIrYMPUkwo_HtQI_YY.roa (hash: sEW6+6ZZRuXcX0E6lls/B3TG4bjdd1ae0xcdGkWi5Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:b2:2d:2b:a3:a1:cd:9d:a5:80:a8:69:60:3a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Validity
Not Before: May 12 11:00:46 2026 GMT
Not After : May 13 11:00:46 2026 GMT
Subject: CN=7c89ee217ee60903588d7d72da5007e50f9ebf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:50:72:a7:1a:8f:9a:bd:30:5b:01:b4:06:
b8:55:64:62:ee:76:f3:6b:30:99:e3:ae:c8:b7:59:
05:5d:c2:ea:a3:a9:62:f1:6b:36:62:c7:80:21:af:
99:d0:71:90:e3:3f:79:fa:ca:a7:ed:ec:59:a5:20:
0a:80:1a:40:7c:0b:a7:ee:be:bf:fe:54:5f:7a:9e:
d9:fb:a9:c2:fb:79:11:9b:50:f0:da:cf:8b:b9:0f:
88:3b:06:b2:2a:17:e4:cb:e1:87:5f:69:03:ad:31:
e0:de:e1:c1:2f:c5:a3:c0:cc:3c:2d:d3:3d:31:a2:
66:4c:7a:45:39:31:42:bc:75:c0:b7:c5:e5:0b:95:
f4:6e:c9:88:3e:7c:c1:16:29:ce:b6:83:92:fb:3b:
a5:76:f5:a5:ca:49:51:55:19:a9:3d:23:44:ef:41:
0b:a9:3a:dd:1c:b4:46:d6:82:65:16:b7:12:32:ef:
5e:7e:ac:ec:cf:47:9b:63:61:e5:e7:e8:7a:09:ba:
e4:dc:be:1a:a2:52:ba:da:89:c0:2f:1d:50:dd:e7:
fa:2b:0d:4d:b5:b7:db:d1:dd:8e:20:4d:99:42:7a:
77:14:56:80:c1:5a:ae:f0:d8:3c:d9:0b:94:f3:59:
f9:b1:56:43:9f:c8:35:c3:43:70:cd:4b:c4:d1:7e:
52:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:89:EE:21:7E:E6:09:03:58:8D:7D:72:DA:50:07:E5:0F:9E:BF:39
X509v3 Authority Key Identifier:
keyid:03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3d:60:c4:99:f2:e4:b4:77:5a:4a:e5:0a:b1:94:75:96:3e:
6e:8a:61:d3:86:c7:c2:b9:a6:8c:aa:d1:45:eb:44:82:4b:b7:
28:dc:18:a1:33:6b:82:0d:eb:22:f7:24:5c:b9:4b:72:c1:22:
53:ec:98:c6:31:dd:0c:75:2d:a9:c5:65:e7:f7:f5:08:b0:9f:
f0:31:7c:2d:e0:c8:b8:bc:e4:69:b8:f1:76:b5:d0:ae:8a:d2:
f1:7a:d7:ef:9a:ef:1d:c7:bf:c2:76:14:03:9b:b0:d3:c1:6c:
ef:de:b9:c5:3f:dd:0a:7d:10:d4:5f:07:73:70:91:c5:f5:dd:
ca:ba:e8:61:a0:85:f1:9b:8c:8d:68:55:1a:7f:ed:11:47:96:
58:6d:1d:94:bd:ae:51:99:25:ee:fe:d9:66:d1:b7:21:4d:8c:
87:58:0e:cc:3e:0e:97:5c:e8:0b:73:6d:4a:2a:a5:25:50:4d:
74:8e:e4:0f:03:14:a6:7a:7b:d3:49:2f:52:2c:ef:41:58:a7:
bf:af:c8:49:0d:02:ff:71:0d:85:9d:47:a6:95:d4:a6:2e:2c:
4e:61:9d:c6:8e:95:85:5d:24:f9:72:f8:6a:27:b3:84:e1:35:
9c:45:81:6a:98:80:d8:35:5f:04:b2:3e:ea:aa:b1:17:9d:7a:
c7:c0:59:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2LItK6OhzZ2lgKhpYDrYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjUwMzQyNThmMjc1YjdjODdlNWY0ZjcwNzA2YzBjZjU4
OGVmYzMwHhcNMjYwNTEyMTEwMDQ2WhcNMjYwNTEzMTEwMDQ2WjAzMTEwLwYDVQQD
Eyg3Yzg5ZWUyMTdlZTYwOTAzNTg4ZDdkNzJkYTUwMDdlNTBmOWViZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxBQcqcaj5q9MFsBtAa4VWRi7nbz
azCZ467It1kFXcLqo6li8Ws2YseAIa+Z0HGQ4z95+sqn7exZpSAKgBpAfAun7r6/
/lRfep7Z+6nC+3kRm1Dw2s+LuQ+IOwayKhfky+GHX2kDrTHg3uHBL8WjwMw8LdM9
MaJmTHpFOTFCvHXAt8XlC5X0bsmIPnzBFinOtoOS+zuldvWlyklRVRmpPSNE70EL
qTrdHLRG1oJlFrcSMu9efqzsz0ebY2Hl5+h6Cbrk3L4aolK62onALx1Q3ef6Kw1N
tbfb0d2OIE2ZQnp3FFaAwVqu8Ng82QuU81n5sVZDn8g1w0NwzUvE0X5S6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyJ7iF+5gkDWI19ctpQB+UPnr85MB8GA1UdIwQY
MBaAFAMlA0JY8nW3yH5fT3BwbAz1iO/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTIt
OWEzN2M2MDY5YmMxLzEvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTItOWEzN2M2MDY5YmMx
LzEvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOT1gxJny
5LR3WkrlCrGUdZY+boph04bHwrmmjKrRRetEgku3KNwYoTNrgg3rIvckXLlLcsEi
U+yYxjHdDHUtqcVl5/f1CLCf8DF8LeDIuLzkabjxdrXQrorS8XrX75rvHce/wnYU
A5uw08Fs7965xT/dCn0Q1F8Hc3CRxfXdyrroYaCF8ZuMjWhVGn/tEUeWWG0dlL2u
UZkl7v7ZZtG3IU2Mh1gOzD4Ol1zoC3NtSiqlJVBNdI7kDwMUpnp700kvUizvQVin
v6/ISQ0C/3ENhZ1HppXUpi4sTmGdxo6VhV0k+XL4aiezhOE1nEWBapiA2DVfBLI+
6qqxF516x8BZVQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:17:18 2026 by rpki-client