Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
File: AyUDQljydbfIfl9PcHBsDPWI78M.mft (raw, json)
Hash identifier: UowryGoTzcatubi5jpkFH8bwDUXFiBFGMuoB1ZhvXns=
Subject key identifier: 4D:D8:72:C2:6D:41:13:69:AB:8F:E0:B3:B3:CE:E2:2B:04:D1:09:23
Authority key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
Certificate issuer: /CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Certificate serial: 019D2884E26D213AFAE07AA0878BE644FF76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
Manifest number: 1844
Signing time: Thu 26 Mar 2026 05:01:30 +0000
Manifest this update: Thu 26 Mar 2026 05:01:30 +0000
Manifest next update: Fri 27 Mar 2026 05:01:30 +0000
Files and hashes: 1: 3vVG8o2ITJwtPnNIQhuIxnCqGaY.roa (hash: 8/W7Ss/HYT0cvaLGI01I8cqgEGbSHHWsxyzYNVKNbA0=)
2: AyUDQljydbfIfl9PcHBsDPWI78M.crl (hash: KGZFpsvloAnEpveJHssgv7wjYX7tdlPmabk8b5vebM8=)
3: SLEbsnJN0TIrYMPUkwo_HtQI_YY.roa (hash: sEW6+6ZZRuXcX0E6lls/B3TG4bjdd1ae0xcdGkWi5Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:e2:6d:21:3a:fa:e0:7a:a0:87:8b:e6:44:ff:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Validity
Not Before: Mar 26 05:01:30 2026 GMT
Not After : Mar 27 05:01:30 2026 GMT
Subject: CN=4dd872c26d411369ab8fe0b3b3cee22b04d10923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:51:e7:3c:92:5d:f1:44:93:23:7f:67:1d:
4d:00:06:36:64:c2:cd:37:7a:cf:3e:e6:08:ba:38:
a1:b7:b1:d9:1b:3d:a3:60:a2:32:85:3b:36:7b:4a:
c9:0c:ee:03:a9:bf:ca:51:27:49:88:f3:1c:eb:1f:
ad:a7:2e:1c:f6:e6:dc:b2:da:68:f7:f5:ca:af:fe:
3a:40:f9:04:6a:95:da:7d:24:c3:3e:9c:b6:f2:43:
24:78:cd:a1:2f:82:b7:06:2e:cf:8b:5c:eb:c3:94:
a7:c4:cb:93:40:3d:c1:69:19:ea:b0:d9:10:3a:cc:
2c:bd:2b:c7:c1:4e:6e:38:8b:1e:c5:6a:97:29:99:
b6:16:a3:25:58:59:49:98:8c:3a:76:43:aa:ca:d7:
72:a7:7a:49:74:97:55:95:c4:e6:31:9c:a2:d2:b2:
e2:e2:99:00:a9:7c:43:4a:a0:7a:6b:13:df:0e:d2:
11:3b:f1:04:e3:5c:cf:9b:db:6b:75:65:b5:04:43:
2c:7a:29:de:f4:07:38:3c:53:2e:69:94:0f:61:da:
09:be:0a:5d:47:a6:89:3d:06:c0:09:88:8b:16:72:
60:65:e5:98:da:6b:dd:c5:92:97:33:bf:89:01:63:
59:b1:46:90:78:89:72:84:8c:be:92:cb:40:ea:f1:
c2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D8:72:C2:6D:41:13:69:AB:8F:E0:B3:B3:CE:E2:2B:04:D1:09:23
X509v3 Authority Key Identifier:
keyid:03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:00:e1:91:e9:ee:80:67:b7:e4:c8:79:66:78:fd:e7:09:7d:
70:70:44:b9:9c:bd:25:0e:1a:35:ba:d8:32:ee:ac:93:90:4e:
8f:4e:33:c0:8b:54:eb:7c:5b:ea:a1:3a:e5:a9:29:b8:10:c1:
e4:6b:9a:b0:49:cd:f4:07:f4:63:9f:63:47:04:a5:3f:40:cf:
02:09:55:9b:f0:c1:f3:72:55:47:24:f8:3e:92:e2:bd:4c:8f:
0a:f4:0e:a2:ba:78:09:de:93:bb:83:0e:85:de:59:a6:51:c4:
ea:49:cf:50:99:4b:7d:e5:2e:1f:fc:90:dc:13:d7:e7:db:45:
90:e6:09:90:0b:34:0a:4f:dd:d2:25:6d:dd:40:42:7b:d6:df:
13:31:cf:02:94:bd:3e:a5:38:7b:14:01:59:bb:b5:2f:02:06:
9f:96:e5:17:23:c4:f7:10:27:c1:66:8c:5a:6d:16:29:7f:a3:
7f:c6:20:db:70:9a:3e:e1:44:16:65:d1:04:6b:62:d0:aa:52:
33:a1:b8:21:23:12:06:1d:ec:b2:cd:b0:ae:5f:af:05:68:5c:
7a:b5:fe:f5:75:17:91:fd:a8:3e:b8:45:5b:5d:ca:04:f4:a1:
1c:62:af:50:2a:71:ee:71:41:a8:af:d8:1f:ec:ac:1c:70:ac:
c0:c3:24:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohOJtITr64Hqgh4vmRP92MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjUwMzQyNThmMjc1YjdjODdlNWY0ZjcwNzA2YzBjZjU4
OGVmYzMwHhcNMjYwMzI2MDUwMTMwWhcNMjYwMzI3MDUwMTMwWjAzMTEwLwYDVQQD
Eyg0ZGQ4NzJjMjZkNDExMzY5YWI4ZmUwYjNiM2NlZTIyYjA0ZDEwOTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzBR5zySXfFEkyN/Zx1NAAY2ZMLN
N3rPPuYIujiht7HZGz2jYKIyhTs2e0rJDO4Dqb/KUSdJiPMc6x+tpy4c9ubcstpo
9/XKr/46QPkEapXafSTDPpy28kMkeM2hL4K3Bi7Pi1zrw5SnxMuTQD3BaRnqsNkQ
OswsvSvHwU5uOIsexWqXKZm2FqMlWFlJmIw6dkOqytdyp3pJdJdVlcTmMZyi0rLi
4pkAqXxDSqB6axPfDtIRO/EE41zPm9trdWW1BEMseine9Ac4PFMuaZQPYdoJvgpd
R6aJPQbACYiLFnJgZeWY2mvdxZKXM7+JAWNZsUaQeIlyhIy+kstA6vHCEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3YcsJtQRNpq4/gs7PO4isE0QkjMB8GA1UdIwQY
MBaAFAMlA0JY8nW3yH5fT3BwbAz1iO/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTIt
OWEzN2M2MDY5YmMxLzEvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTItOWEzN2M2MDY5YmMx
LzEvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgDhkenu
gGe35Mh5Znj95wl9cHBEuZy9JQ4aNbrYMu6sk5BOj04zwItU63xb6qE65akpuBDB
5GuasEnN9Af0Y59jRwSlP0DPAglVm/DB83JVRyT4PpLivUyPCvQOorp4Cd6Tu4MO
hd5ZplHE6knPUJlLfeUuH/yQ3BPX59tFkOYJkAs0Ck/d0iVt3UBCe9bfEzHPApS9
PqU4exQBWbu1LwIGn5blFyPE9xAnwWaMWm0WKX+jf8Yg23CaPuFEFmXRBGti0KpS
M6G4ISMSBh3sss2wrl+vBWhcerX+9XUXkf2oPrhFW13KBPShHGKvUCpx7nFBqK/Y
H+ysHHCswMMk6Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:33:28 2026 by rpki-client