Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
File: AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft (raw, json)
Hash identifier: Vow/a82E/n+iBkwTPOBh6SHpVCIHFMiE53431sdniLs=
Subject key identifier: A9:98:38:1C:2F:23:9A:0E:0B:3F:0D:BB:3A:47:E3:22:13:8B:41:B8
Authority key identifier: 03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
Certificate issuer: /CN=0321bfea0305c48e949e6c249f4810b46905c886
Certificate serial: 019D38D3C8E45EA2CAC2B9A225E30EE91800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 09:01:36 +0000
Manifest this update: Sun 29 Mar 2026 09:01:36 +0000
Manifest next update: Mon 30 Mar 2026 09:01:36 +0000
Files and hashes: 1: AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl (hash: 9tenvCkSZDd3UAybq3ZA+r9fx3PwcPftm8I9/oCpP90=)
2: WAWNpiY2vwMuD_j8ek6kZ6L9jDw.roa (hash: Aqg/w+ScPNsoJT+d0QU5LliDLOZxPSYw1XwmYdmE6pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c8:e4:5e:a2:ca:c2:b9:a2:25:e3:0e:e9:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bfea0305c48e949e6c249f4810b46905c886
Validity
Not Before: Mar 29 09:01:36 2026 GMT
Not After : Mar 30 09:01:36 2026 GMT
Subject: CN=a998381c2f239a0e0b3f0dbb3a47e322138b41b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:25:92:4c:a8:25:1a:c0:32:82:7c:3f:ab:
12:70:e2:92:63:51:82:23:7a:60:f1:87:20:12:87:
f8:9d:08:df:2a:27:c8:52:a3:52:5f:2f:e5:4d:03:
7d:35:b9:e0:5e:fc:c0:8f:63:4b:8d:f6:7e:41:f8:
24:7e:42:89:f4:80:80:a8:6f:17:2d:f6:2f:43:bc:
e4:44:8a:98:b3:84:b0:61:58:3a:46:a7:c6:a2:d9:
ad:04:09:39:c8:7a:29:43:53:a9:ca:ba:a9:6a:4d:
1f:55:98:99:a4:58:c7:31:03:bd:b0:40:f2:64:0b:
3f:89:b1:62:23:33:23:d7:9e:37:13:19:8a:c9:2a:
73:92:a0:1f:a5:8a:15:e1:d9:40:59:01:38:9b:e5:
5a:5e:c6:85:4b:07:37:11:d7:f0:ff:e8:e5:3f:9b:
e9:0c:54:32:ff:4b:f8:5a:09:7d:7f:74:8d:f1:cb:
61:38:cf:0f:64:b0:9f:80:b2:00:d7:78:fe:e9:5b:
3a:4f:91:f2:55:d5:d3:89:8b:98:c0:18:ab:41:31:
4b:4e:eb:bd:5a:a2:54:2c:74:c2:f8:fb:64:83:e0:
c8:d9:80:9d:4c:fa:46:01:45:0a:4b:33:5c:67:14:
9e:c3:d3:38:cf:05:3c:74:51:f8:87:df:2a:ee:ab:
8c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:98:38:1C:2F:23:9A:0E:0B:3F:0D:BB:3A:47:E3:22:13:8B:41:B8
X509v3 Authority Key Identifier:
keyid:03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:75:e4:4d:05:f1:92:8d:e6:5b:ae:91:ea:31:ed:94:37:bf:
c7:15:b3:54:85:2b:dd:8c:59:0e:38:1f:1f:39:c8:52:2d:58:
db:9c:32:dd:dd:5f:5e:77:12:d4:83:0c:ec:ad:98:8c:2e:30:
43:b8:f6:fa:d3:1d:f9:f1:df:50:7a:e5:3a:8b:9e:b1:03:7b:
cb:c2:fb:9e:ef:1b:29:b1:47:3e:48:7d:6b:a0:48:a6:4d:69:
90:cc:ef:c1:18:a5:22:d6:18:ca:f9:94:fe:d4:03:33:7f:ac:
a0:4f:68:c8:35:89:cc:78:54:49:c5:68:2d:fa:fa:3c:24:45:
b0:c4:1b:18:cf:b4:4f:f6:09:0a:1c:b6:39:97:98:76:cf:23:
f1:3b:6c:c2:a0:cc:00:8d:08:fa:aa:05:c9:c2:1e:a9:c6:b5:
4a:ce:6e:c8:95:08:9a:2d:c9:20:46:38:b7:1f:7f:70:f5:57:
da:0b:8b:9a:12:6d:a2:ce:7e:ff:2e:fa:07:06:ca:03:14:3f:
63:7b:52:1f:f6:40:b6:fa:d0:52:f6:03:ac:a3:64:72:85:e6:
c4:52:77:b3:95:0f:5f:c2:90:ce:3c:d8:42:9a:5c:c7:28:d1:
65:db:6b:77:92:58:4c:dd:cb:27:c5:91:b3:41:20:79:5c:9d:
02:25:95:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:06 2026 by rpki-client