
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
File: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft (raw, json)
Hash identifier: oJ8gM3MlkqQEVYGq1UK1bJASOHSE/plXQE4lNDHjK2o=
Subject key identifier: 45:CB:AE:D6:34:03:C1:F6:47:71:38:3F:DB:2F:93:87:DF:04:46:C6
Authority key identifier: 03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
Certificate issuer: /CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Certificate serial: 019E1C471BB27BB8D12768F545A684F48564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 13:01:22 +0000
Manifest this update: Tue 12 May 2026 13:01:22 +0000
Manifest next update: Wed 13 May 2026 13:01:22 +0000
Files and hashes: 1: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl (hash: 0KsBIehB3NyD3YGLasR7Ej37xQZvuVGZHJn+lc8xh4E=)
2: eCyziES9pqG-mQfeLtr0n6C5-NA.roa (hash: l6vsyJV9WvrG97VV98IwTWvWh3E/Ue4n2AyaMsNRcxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:1b:b2:7b:b8:d1:27:68:f5:45:a6:84:f4:85:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Validity
Not Before: May 12 13:01:22 2026 GMT
Not After : May 13 13:01:22 2026 GMT
Subject: CN=45cbaed63403c1f64771383fdb2f9387df0446c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:00:26:dc:b7:de:55:a5:ce:c2:6f:9b:bc:
0c:88:19:56:fb:c5:8a:6e:ec:af:82:2b:1e:3b:a1:
e8:b7:04:a4:54:15:48:86:ee:39:19:ef:2a:d3:e6:
68:71:9d:36:41:4c:9a:dc:7c:5f:ec:f3:72:16:68:
6f:8e:a3:8f:4a:ef:23:90:ea:4d:11:fc:07:9a:72:
48:42:4d:ad:bb:39:25:58:48:de:e4:d6:60:34:b3:
28:29:db:87:d0:d6:67:db:10:08:2d:09:95:c3:57:
b2:22:ba:a5:50:8b:ed:aa:3a:26:71:96:b0:1d:f9:
e3:7e:fd:22:0a:cd:11:7c:0b:88:f2:de:59:4a:90:
89:62:8d:5b:48:e1:44:35:8e:55:de:27:0a:ab:42:
63:97:bd:16:7c:29:16:d6:71:30:87:16:1b:f6:20:
3e:24:00:6d:00:e2:34:00:f5:39:4c:78:38:75:97:
16:f7:42:e6:0c:97:ca:69:01:08:14:a6:5c:fa:a7:
b0:95:12:6a:ce:eb:78:8b:18:1b:22:3f:4c:7b:47:
9e:92:5b:a7:d2:cc:65:f3:2e:6a:41:98:b0:9c:14:
13:74:51:fb:2b:d5:06:a2:e4:d6:0e:d5:c0:ed:68:
06:92:62:98:86:cf:fe:54:f3:e3:b2:d7:1c:2b:67:
08:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CB:AE:D6:34:03:C1:F6:47:71:38:3F:DB:2F:93:87:DF:04:46:C6
X509v3 Authority Key Identifier:
keyid:03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d1:01:16:9b:83:8b:d5:f6:7f:55:cb:4d:8f:ca:04:9d:23:
34:24:59:95:57:ce:d1:6f:6c:b8:24:13:88:f3:c0:28:54:39:
4d:ff:f9:82:dd:96:bf:cf:b3:70:cc:55:f5:59:00:d6:aa:9a:
4f:99:42:fd:bb:71:47:68:1d:85:40:4e:5b:ce:ab:75:47:f4:
ec:0d:c1:b7:2b:3e:fc:7f:59:5d:a2:65:87:9e:1e:13:3e:89:
b8:e1:74:58:aa:e9:54:9f:69:f6:b8:73:b3:ba:35:8d:80:d0:
49:ba:f5:2c:d7:b2:c3:dd:43:58:21:05:35:4f:82:c9:8d:af:
f4:19:24:a2:f3:54:49:36:e4:80:95:4f:64:aa:96:b2:b3:5f:
af:73:c3:2d:79:cf:ba:77:b3:a7:53:f9:d8:c4:47:64:a5:f7:
e6:6e:2c:ac:a8:29:b6:3e:54:75:38:84:a7:9f:a9:0e:10:69:
e0:e3:18:74:c1:5d:a9:3e:a2:35:06:63:ca:86:7b:1a:81:f2:
06:47:9e:ed:d9:9e:50:eb:f3:c4:6f:95:9a:7d:7e:a6:f1:8a:
f1:8f:6c:da:39:e8:85:fd:e3:05:6b:d3:b5:6c:85:b6:76:62:
cd:23:ac:cd:7d:fe:ff:8c:5e:a5:cd:78:ef:96:a7:9b:eb:e2:
31:27:00:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRxuye7jRJ2j1RaaE9IVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMmQzOWNlOTFiZTg2N2NmNWNlMWI2MDA5ZDUyNjJjMjhi
NjUyMDkwHhcNMjYwNTEyMTMwMTIyWhcNMjYwNTEzMTMwMTIyWjAzMTEwLwYDVQQD
Eyg0NWNiYWVkNjM0MDNjMWY2NDc3MTM4M2ZkYjJmOTM4N2RmMDQ0NmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9YAJty33lWlzsJvm7wMiBlW+8WK
buyvgiseO6HotwSkVBVIhu45Ge8q0+ZocZ02QUya3Hxf7PNyFmhvjqOPSu8jkOpN
EfwHmnJIQk2tuzklWEje5NZgNLMoKduH0NZn2xAILQmVw1eyIrqlUIvtqjomcZaw
Hfnjfv0iCs0RfAuI8t5ZSpCJYo1bSOFENY5V3icKq0Jjl70WfCkW1nEwhxYb9iA+
JABtAOI0APU5THg4dZcW90LmDJfKaQEIFKZc+qewlRJqzut4ixgbIj9Me0eeklun
0sxl8y5qQZiwnBQTdFH7K9UGouTWDtXA7WgGkmKYhs/+VPPjstccK2cIuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXLrtY0A8H2R3E4P9svk4ffBEbGMB8GA1UdIwQY
MBaAFAMtOc6RvoZ89c4bYAnVJiwotlIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXkwNXpwRy1obnoxemh0Z0NkVW1MQ2kyVWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9jYmU4ZTctNWE3OC00NTU4LTk5NTEt
ODRhY2NlY2M1MWYwLzEvQXkwNXpwRy1obnoxemh0Z0NkVW1MQ2kyVWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9jYmU4ZTctNWE3OC00NTU4LTk5NTEtODRhY2NlY2M1MWYw
LzEvQXkwNXpwRy1obnoxemh0Z0NkVW1MQ2kyVWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsNEBFpuD
i9X2f1XLTY/KBJ0jNCRZlVfO0W9suCQTiPPAKFQ5Tf/5gt2Wv8+zcMxV9VkA1qqa
T5lC/btxR2gdhUBOW86rdUf07A3Btys+/H9ZXaJlh54eEz6JuOF0WKrpVJ9p9rhz
s7o1jYDQSbr1LNeyw91DWCEFNU+CyY2v9BkkovNUSTbkgJVPZKqWsrNfr3PDLXnP
unezp1P52MRHZKX35m4srKgptj5UdTiEp5+pDhBp4OMYdMFdqT6iNQZjyoZ7GoHy
Bkee7dmeUOvzxG+Vmn1+pvGK8Y9s2jnohf3jBWvTtWyFtnZizSOszX3+/4xepc14
75anm+viMScAJw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:15:20 2026 by rpki-client