Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
File: AYODB_eazcWa1uuC6Miq76PYgok.mft (raw, json)
Hash identifier: BKPO7rXCeAhk358ZfzQDaFqP4qA6NgPyZOmNKaRFgis=
Subject key identifier: 43:76:94:59:D0:16:FD:3A:70:BE:EA:77:82:80:21:D3:97:F8:A6:AA
Authority key identifier: 01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
Certificate issuer: /CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Certificate serial: 01A140B9F9FB6916B74280F062DF250756AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 18:01:32 +0000
Manifest this update: Thu 15 Oct 2026 18:01:32 +0000
Manifest next update: Fri 16 Oct 2026 18:01:32 +0000
Files and hashes: 1: AYODB_eazcWa1uuC6Miq76PYgok.crl (hash: GET0qmWDqqwthPN3ZjW6U329QiukT02ceQSbSq0VaIs=)
2: SBaxEKn6omM3IqhrS7K0Wod8GDA.roa (hash: SyVRYDfJpMcJBFiaCrbmVlK9aAfcGPsjIqUsOCOATQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:b9:f9:fb:69:16:b7:42:80:f0:62:df:25:07:56:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Validity
Not Before: Oct 15 18:01:32 2026 GMT
Not After : Oct 16 18:01:32 2026 GMT
Subject: CN=43769459d016fd3a70beea77828021d397f8a6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:87:45:63:3a:0c:0b:25:7e:a2:45:8e:d7:
4f:6f:24:78:e1:c3:4e:64:cb:75:a5:69:83:01:ca:
6b:e4:20:4a:09:1f:dc:9a:d1:3b:4b:95:51:ac:c9:
6f:fb:c9:4b:d8:7e:d0:c8:ad:21:bd:dd:99:3b:ba:
d5:ae:0a:63:74:d3:89:49:13:a5:68:75:45:4d:85:
5d:12:84:f4:0c:2e:ff:53:bf:04:b7:38:89:ce:93:
42:b9:39:3f:d7:a6:25:f8:02:d8:f1:6b:5b:81:87:
aa:85:8f:37:7b:8d:98:71:b6:85:03:0a:a1:f5:4a:
78:4f:8d:15:40:f5:54:29:70:a4:e6:4e:c7:bc:3d:
9d:20:7b:ec:c9:d1:f0:f7:5f:f5:ca:18:31:fb:7e:
b0:f7:86:8e:3d:c3:fb:e4:e3:0a:ea:81:d4:15:d0:
27:04:7d:95:5c:37:df:92:92:28:77:df:cf:64:9d:
31:03:ef:71:b3:46:a0:af:dc:97:c2:b9:66:26:8c:
91:a2:05:4b:e7:b3:a9:bd:8c:c8:9c:24:a6:90:42:
be:51:00:ab:b2:f2:b2:4f:0c:d7:0b:2f:63:ed:db:
b3:30:70:53:27:29:37:7f:57:db:ff:9e:26:b4:0e:
f5:b2:41:06:48:a9:db:18:20:17:51:bf:69:be:e9:
29:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:76:94:59:D0:16:FD:3A:70:BE:EA:77:82:80:21:D3:97:F8:A6:AA
X509v3 Authority Key Identifier:
keyid:01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a6:78:e6:65:c9:10:46:b6:d8:fc:6c:51:57:58:18:7e:7f:
d7:7b:35:29:8f:31:60:fc:f6:ec:8a:3f:c5:eb:ff:4a:ca:ab:
ed:59:61:d4:93:9c:27:0e:04:c5:8f:08:d2:af:1a:4f:94:d4:
3f:c7:38:e8:47:8a:57:c2:02:40:6c:e3:c7:48:52:2b:93:55:
69:93:b6:19:29:fa:2b:cb:e8:20:0d:e2:0c:da:b1:f5:db:54:
64:9e:f9:56:11:6d:98:3b:57:d7:b9:46:19:54:36:8b:8b:be:
7d:c2:31:35:bb:b9:0c:ab:5a:dd:0e:f4:db:4c:b3:c2:02:ca:
19:42:91:7b:09:0c:4c:f6:78:93:c8:04:c1:f8:18:25:ba:dc:
94:fd:20:5f:db:e0:ad:3c:ee:7f:56:10:c8:2e:ed:c8:00:2c:
b5:5a:36:11:4b:bf:56:41:2c:d7:d2:69:08:ef:05:88:1c:c5:
79:ae:9b:fa:06:ad:1c:93:f6:2d:0b:34:4f:f3:af:bf:df:ca:
5a:97:ce:8b:0d:86:b5:50:83:ad:1c:97:00:93:99:eb:65:90:
56:c0:33:4f:63:cb:97:9b:11:b1:3b:a9:63:c6:a9:41:84:06:
5c:a6:70:26:8e:76:44:c8:d3:61:6b:bc:3f:73:b8:12:6d:8f:
df:2b:f9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:43:06 2026 by rpki-client