Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json)
Hash identifier: /ApUBMv3sAnzeYq6VwU9eZ5dbsmC8RuszIVCCuPKRdE=
Subject key identifier: 89:D8:96:20:D7:29:96:02:C6:16:1A:8D:55:5E:6E:A2:D5:47:FA:9D
Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Certificate serial: 019F860D33C99179FE3489FE37794B542AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
Manifest number: 0506
Signing time: Tue 21 Jul 2026 19:00:39 +0000
Manifest this update: Tue 21 Jul 2026 19:00:39 +0000
Manifest next update: Wed 22 Jul 2026 19:00:39 +0000
Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: mgSL/qLQVxjJCzGjFdB+RaUAAN41yCCdvcXkSd/uxsE=)
2: Ys_4DR1wULGBNA_eDYgXZEWOD2Q.roa (hash: qjKc7M+pEY0qhXBmrNC0EBe740v+5vXbrYaxAIWy74Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:33:c9:91:79:fe:34:89:fe:37:79:4b:54:2a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Validity
Not Before: Jul 21 19:00:39 2026 GMT
Not After : Jul 22 19:00:39 2026 GMT
Subject: CN=89d89620d7299602c6161a8d555e6ea2d547fa9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:f5:ed:64:3a:41:6b:b7:ed:15:4b:c1:60:
d6:60:d4:f7:bb:46:df:b0:11:7e:01:bd:8b:c6:a3:
4c:31:d0:44:96:4e:91:49:32:d6:59:43:26:68:17:
9f:6c:a9:fa:25:25:75:63:a9:62:70:86:e7:c8:a7:
b4:9c:1e:2d:31:a2:08:67:de:b9:a0:04:3e:d9:a8:
f6:05:8b:ce:a1:51:af:a3:ac:5d:da:c2:f6:5c:eb:
b0:04:fa:dd:e6:1d:07:7d:2a:bc:a6:ed:ef:80:37:
19:f9:13:de:1c:bd:60:34:0e:83:62:cb:4f:5c:2c:
21:ca:f0:48:a7:27:2c:82:0a:d1:8d:e2:94:cb:52:
28:e9:07:8a:8a:9c:3e:58:e5:1e:af:ac:e0:ae:d2:
64:78:00:f4:d2:ea:60:31:ee:4a:67:ca:42:42:1e:
29:09:e6:d4:cc:66:57:a8:b1:cb:b1:bf:31:18:87:
ad:41:24:ec:0d:d6:06:9e:99:31:77:58:fc:af:37:
df:fb:da:f4:bf:a3:24:d9:a9:09:8a:ae:86:03:64:
21:c3:5c:78:0c:22:91:2b:0d:a1:e7:6b:3e:e7:7b:
23:1a:e9:75:a5:ef:14:7a:35:03:42:cc:34:31:30:
f9:4a:15:36:73:f2:26:21:47:c6:25:9f:19:e5:b7:
a1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D8:96:20:D7:29:96:02:C6:16:1A:8D:55:5E:6E:A2:D5:47:FA:9D
X509v3 Authority Key Identifier:
keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c1:bf:a5:1c:16:ff:a1:ba:d1:0d:a7:a4:e7:03:83:f3:b9:
02:0b:3f:64:70:38:99:bd:ba:5c:ed:56:df:c6:f3:e4:c1:5d:
4d:46:08:7b:72:c3:52:03:e0:d4:fd:41:db:33:02:02:be:16:
8e:26:08:9f:83:d6:cd:4a:79:47:d5:78:68:8f:e9:43:96:df:
c2:1c:a2:31:9b:b1:a7:01:66:c9:87:a6:80:6d:1b:88:d5:05:
7d:21:77:d0:b6:e8:32:9a:a9:f7:5a:cf:69:75:af:5c:82:24:
01:cf:f6:42:ea:47:23:01:0a:19:63:79:d7:2f:e1:8d:a0:c6:
8a:6c:29:52:14:dd:45:b5:a3:8b:8d:b7:13:2e:0a:a4:75:23:
b3:c1:23:ab:ee:36:ea:19:10:05:8e:66:ed:13:52:4e:a0:13:
9e:e0:d6:68:73:8e:8c:cc:d6:49:43:70:42:83:15:31:8b:fa:
f9:94:ed:20:6d:bf:7e:6c:92:e8:51:07:9b:45:13:c3:ad:fc:
df:12:f5:82:fd:9d:9d:fc:12:2c:7f:84:63:8e:73:3d:40:4d:
d5:4b:5b:f4:ac:f6:9b:f4:ec:c8:07:f3:92:99:a1:44:87:e9:
db:22:ac:4c:80:4d:db:71:58:86:2a:cf:bd:ad:af:28:96:67:
8e:42:c9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:42:54 2026 by rpki-client