Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
File: AYJcep4nAba6NnDQjSoQqeoV0-M.mft (raw, json)
Hash identifier: 6qh48N6q5FRV5sHROgzc8eam918UTYp0c8QffU51kBc=
Subject key identifier: E6:BB:D4:81:76:79:A0:BD:F2:ED:91:0C:93:E5:D3:1D:BA:5A:AE:8C
Authority key identifier: 01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
Certificate issuer: /CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Certificate serial: 019D382E74C2E3A5B3565476295989470A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
Manifest number: 09D6
Signing time: Sun 29 Mar 2026 06:01:01 +0000
Manifest this update: Sun 29 Mar 2026 06:01:01 +0000
Manifest next update: Mon 30 Mar 2026 06:01:01 +0000
Files and hashes: 1: AYJcep4nAba6NnDQjSoQqeoV0-M.crl (hash: uknVt59VHUc9J9pz/8aBp1tSkLHjVqAZZ91niHZmZzE=)
2: MZejqw04W8XvDSTgyhF_vZtjtHk.roa (hash: y+X1OSPqc8Aw+l04NXTCLvm9a9sOckjKF5RYXVztnSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:74:c2:e3:a5:b3:56:54:76:29:59:89:47:0a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Validity
Not Before: Mar 29 06:01:01 2026 GMT
Not After : Mar 30 06:01:01 2026 GMT
Subject: CN=e6bbd4817679a0bdf2ed910c93e5d31dba5aae8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:35:5c:c9:94:cb:9c:4b:59:17:94:ae:66:5e:
f2:ec:c3:ac:2a:96:6e:7f:82:2a:40:23:a4:e5:4f:
c8:1f:e0:d9:e2:66:82:85:6b:80:25:36:ad:b6:65:
7c:0e:a9:6b:63:10:72:e0:f1:b7:fa:27:ae:90:28:
71:b4:d4:e1:6e:6a:e2:0c:a5:a4:e6:bf:cb:da:0a:
03:c2:6b:75:f5:8c:8e:de:78:f1:8d:2c:a8:78:13:
0e:14:68:50:c0:98:05:7a:ba:ad:57:4a:45:18:f9:
c0:ac:88:42:e5:5a:54:81:36:8f:39:32:c3:58:70:
84:68:bb:70:78:4f:c2:36:a2:08:61:c2:7b:e9:f1:
84:b2:53:3b:75:5c:ac:6f:e5:b7:77:57:be:f4:7d:
6c:20:57:14:db:d4:ae:fb:98:bb:55:2c:0f:05:63:
67:34:33:56:08:13:1d:71:3d:3a:5a:0b:e1:35:bb:
9f:ad:fc:be:f1:90:55:55:00:af:30:82:a0:02:60:
e0:59:94:19:6e:cf:58:bf:b7:67:21:15:f6:94:cb:
75:b6:9f:e9:a7:16:46:01:82:e3:4c:3e:ef:cb:81:
3e:0e:7a:a0:4a:05:fa:82:73:cc:d6:64:06:2b:0a:
47:81:89:8b:21:f3:1c:7f:66:8a:f1:f5:18:64:87:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BB:D4:81:76:79:A0:BD:F2:ED:91:0C:93:E5:D3:1D:BA:5A:AE:8C
X509v3 Authority Key Identifier:
keyid:01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a5:ea:dc:80:9e:b5:09:93:87:69:65:53:46:8f:19:67:4b:
3d:76:4c:3a:2f:19:4c:aa:c6:13:45:07:00:2d:91:f3:c9:d9:
2b:d0:bf:a2:53:d6:b9:2e:f7:4c:a9:1d:59:44:e4:a1:da:96:
40:ce:94:14:7e:d1:db:7c:11:07:36:0a:8a:5e:c9:b2:14:00:
19:a3:ba:24:36:6a:6a:be:c4:1f:98:6c:77:13:39:e7:b9:85:
69:6c:53:f2:fc:f8:6c:91:67:e5:19:9f:1b:02:d9:f1:44:24:
d7:fb:51:c4:1b:1e:09:00:66:b3:8e:44:80:6b:39:c0:50:ce:
08:69:61:43:1e:e1:99:48:ab:c4:b4:ed:d1:2f:8b:4e:74:66:
ca:9e:d7:8c:f2:78:5b:4e:13:16:9c:2a:84:d0:10:3f:c1:e3:
11:cd:2a:e2:1d:2d:0a:03:eb:82:36:2a:e2:98:e8:56:69:71:
5b:63:c0:f3:16:12:ee:27:12:c8:38:37:09:5d:6c:4d:1a:52:
7c:e1:83:38:c2:e4:a9:6e:ab:e0:c7:4b:50:b6:76:37:88:e1:
a8:fe:97:95:af:1b:2e:68:fb:c1:8f:ba:07:98:18:ec:a7:d8:
f6:6d:c6:e3:69:98:b9:29:bf:68:a4:2d:c2:59:0b:ca:08:bc:
0c:b6:1c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:21 2026 by rpki-client