Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
File: AyHqOVCODhemUf6SrCnqOIMtC_8.mft (raw, json)
Hash identifier: 2vdWXV3i7eOzu/AjUuq4t3Jc8KLbnv3vW8rfPAkgwQg=
Subject key identifier: BC:24:14:2A:1D:58:D1:41:B7:9A:4F:C2:F5:1B:35:F2:4A:96:AB:93
Authority key identifier: 03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
Certificate issuer: /CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Certificate serial: 019D27A8F4F25933D7F49510968F4AF6E480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
Manifest number: 1725
Signing time: Thu 26 Mar 2026 01:01:17 +0000
Manifest this update: Thu 26 Mar 2026 01:01:17 +0000
Manifest next update: Fri 27 Mar 2026 01:01:17 +0000
Files and hashes: 1: 8UGI1s0WR4wlzQNu5QcJqIgdD6o.roa (hash: 0o0yTMQX8eIMkMe3RKQudDE1yMjJHai1D53A4eswsuo=)
2: AyHqOVCODhemUf6SrCnqOIMtC_8.crl (hash: coNA4O2wkpxz0fpGb3kUGtjvPe3tN98zcDUU4dwnHGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f4:f2:59:33:d7:f4:95:10:96:8f:4a:f6:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Validity
Not Before: Mar 26 01:01:17 2026 GMT
Not After : Mar 27 01:01:17 2026 GMT
Subject: CN=bc24142a1d58d141b79a4fc2f51b35f24a96ab93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:4b:ba:c9:c9:cf:52:7f:38:cc:22:37:ab:
08:1b:34:4f:3c:39:4d:2a:9d:f4:df:53:d3:c6:ec:
55:28:b5:2b:9b:28:fb:9a:78:c2:25:d4:21:62:a2:
a5:5a:28:6d:a9:35:57:71:66:39:9a:a0:04:ea:43:
24:65:5d:7e:0f:ad:d2:05:79:c1:2e:e7:0d:cc:23:
2e:95:8a:b8:bb:4b:b2:85:92:f9:13:7e:25:cb:f5:
a2:01:f5:8f:81:f7:24:a3:38:3a:74:37:e8:3f:9a:
1b:97:a3:0e:92:0f:1d:35:fa:19:3c:f2:5b:a7:25:
21:25:6a:97:a2:03:a8:18:fd:f2:20:5e:ff:dd:a9:
25:59:c1:ce:27:ce:b1:b7:1f:d2:9e:ef:59:fc:31:
1d:f8:6b:a9:92:d4:ce:69:e2:18:c0:58:85:f9:74:
58:2f:e6:a2:be:74:9c:18:0e:e6:a6:ce:22:ea:3b:
14:d5:bf:fb:3f:d8:53:89:3d:4c:3d:04:e8:8b:43:
cd:f0:aa:4b:d5:bd:67:43:d0:bc:74:df:83:cc:9c:
47:76:1a:ab:b5:51:8f:90:67:0f:98:b4:15:6b:8b:
52:4e:e7:46:2a:06:15:ef:71:5b:7f:87:e6:2a:e8:
fa:24:2c:e0:01:fc:43:93:ff:4b:d1:a3:e9:86:98:
48:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:24:14:2A:1D:58:D1:41:B7:9A:4F:C2:F5:1B:35:F2:4A:96:AB:93
X509v3 Authority Key Identifier:
keyid:03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bd:0a:8f:b3:28:ed:00:ba:40:7c:aa:8e:54:27:8a:ad:3c:
7d:5e:95:71:bc:ca:4c:c2:77:a1:29:c3:e5:31:aa:dd:94:62:
b7:3c:d5:8c:11:7a:62:a6:a0:bc:f0:f4:d5:fe:a4:6a:aa:d7:
7b:df:44:65:27:9b:7d:f8:f0:94:9b:fb:95:28:21:0f:d3:49:
a5:1e:0b:39:cc:db:1c:1b:03:e8:b1:78:19:66:3a:be:15:6b:
2b:99:14:94:6c:91:79:df:62:c4:15:8c:f5:ee:5b:8e:6e:33:
cf:93:96:89:85:68:2d:e4:ad:aa:f6:4f:56:cf:e1:a5:db:90:
37:3c:72:2c:e4:7e:61:0a:94:44:cb:3d:ef:d8:e6:87:5b:2d:
6d:40:61:22:fa:7c:9e:bf:6f:2c:ca:10:cd:46:a5:d9:10:0e:
de:47:ae:8c:81:8e:b3:b3:b2:67:f6:70:7f:68:d4:ec:45:84:
89:9f:de:a7:ab:d7:50:01:d1:0b:5f:b6:93:b5:4d:43:94:b1:
1e:54:92:9b:c0:45:5d:28:18:55:ba:53:e9:6e:6b:4b:a9:64:
86:e8:40:a3:e9:91:dc:a4:15:aa:0f:e1:62:7e:10:fc:9b:c3:
3f:c7:2d:f6:0f:f0:0d:e0:a4:42:e4:31:75:7c:0c:ad:71:f6:
db:9b:d7:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqPTyWTPX9JUQlo9K9uSAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjFlYTM5NTA4ZTBlMTdhNjUxZmU5MmFjMjllYTM4ODMy
ZDBiZmYwHhcNMjYwMzI2MDEwMTE3WhcNMjYwMzI3MDEwMTE3WjAzMTEwLwYDVQQD
EyhiYzI0MTQyYTFkNThkMTQxYjc5YTRmYzJmNTFiMzVmMjRhOTZhYjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCtLusnJz1J/OMwiN6sIGzRPPDlN
Kp3031PTxuxVKLUrmyj7mnjCJdQhYqKlWihtqTVXcWY5mqAE6kMkZV1+D63SBXnB
LucNzCMulYq4u0uyhZL5E34ly/WiAfWPgfckozg6dDfoP5obl6MOkg8dNfoZPPJb
pyUhJWqXogOoGP3yIF7/3aklWcHOJ86xtx/Snu9Z/DEd+GupktTOaeIYwFiF+XRY
L+aivnScGA7mps4i6jsU1b/7P9hTiT1MPQToi0PN8KpL1b1nQ9C8dN+DzJxHdhqr
tVGPkGcPmLQVa4tSTudGKgYV73Fbf4fmKuj6JCzgAfxDk/9L0aPphphIhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwkFCodWNFBt5pPwvUbNfJKlquTMB8GA1UdIwQY
MBaAFAMh6jlQjg4XplH+kqwp6jiDLQv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlIcU9WQ09EaGVtVWY2U3JDbnFPSU10Q184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNDgxN2UtODI4MS00MmY3LTlmNGQt
OGNmODA1NTExMDAyLzEvQXlIcU9WQ09EaGVtVWY2U3JDbnFPSU10Q184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNDgxN2UtODI4MS00MmY3LTlmNGQtOGNmODA1NTExMDAy
LzEvQXlIcU9WQ09EaGVtVWY2U3JDbnFPSU10Q184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANr0Kj7Mo
7QC6QHyqjlQniq08fV6VcbzKTMJ3oSnD5TGq3ZRitzzVjBF6YqagvPD01f6kaqrX
e99EZSebffjwlJv7lSghD9NJpR4LOczbHBsD6LF4GWY6vhVrK5kUlGyRed9ixBWM
9e5bjm4zz5OWiYVoLeStqvZPVs/hpduQNzxyLOR+YQqURMs979jmh1stbUBhIvp8
nr9vLMoQzUal2RAO3keujIGOs7OyZ/Zwf2jU7EWEiZ/ep6vXUAHRC1+2k7VNQ5Sx
HlSSm8BFXSgYVbpT6W5rS6lkhuhAo+mR3KQVqg/hYn4Q/JvDP8ct9g/wDeCkQuQx
dXwMrXH225vXKg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:38 2026 by rpki-client