Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
File: AYODB_eazcWa1uuC6Miq76PYgok.mft (raw, json)
Hash identifier: msQNVToozctnGlvlsQ5HHevDTyf9eQ4GVqau+++PYZM=
Subject key identifier: A5:BE:4B:37:78:0C:50:ED:1D:2C:88:5E:9B:6B:6E:29:62:E1:BF:C7
Authority key identifier: 01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
Certificate issuer: /CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Certificate serial: 019F1867790DAA96CC73972DC86325F45B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 12:01:02 +0000
Manifest this update: Tue 30 Jun 2026 12:01:02 +0000
Manifest next update: Wed 01 Jul 2026 12:01:02 +0000
Files and hashes: 1: AYODB_eazcWa1uuC6Miq76PYgok.crl (hash: OFVImmzWt9LDtJrlb66bC/wccfCU3X6k/0wIdOHn7X0=)
2: SBaxEKn6omM3IqhrS7K0Wod8GDA.roa (hash: SyVRYDfJpMcJBFiaCrbmVlK9aAfcGPsjIqUsOCOATQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:79:0d:aa:96:cc:73:97:2d:c8:63:25:f4:5b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Validity
Not Before: Jun 30 12:01:02 2026 GMT
Not After : Jul 1 12:01:02 2026 GMT
Subject: CN=a5be4b37780c50ed1d2c885e9b6b6e2962e1bfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:f2:1e:8b:70:76:47:e7:44:7d:4a:95:3d:
0b:d0:cd:31:1c:66:8f:cb:7f:07:b6:a6:10:c2:25:
16:dd:ef:90:46:0b:cb:51:ed:d8:16:d2:bc:bf:76:
7b:09:2a:77:73:9b:7c:d5:66:38:e9:18:0c:00:04:
04:1f:6f:06:66:01:f6:d4:9a:97:5e:5f:fd:72:1f:
58:3a:17:db:66:cb:f7:d2:c6:fb:8c:84:fe:b1:f6:
6a:64:a5:44:88:7c:bf:6a:15:6a:26:d6:cd:4e:1b:
fc:cb:88:8b:9c:47:59:55:13:e4:84:cf:c0:05:21:
82:44:16:48:25:1e:a0:f2:18:75:f9:40:b2:6e:e9:
20:c2:39:47:9e:9a:7a:55:54:7e:ea:b2:1f:19:95:
96:5a:9a:16:c6:83:32:d8:ea:7a:70:61:cb:b0:02:
38:75:eb:9c:d2:87:5d:9d:76:6d:84:28:75:a7:3d:
95:4f:cf:b5:e6:0c:96:1b:e4:db:69:ca:dd:5d:0f:
a5:bc:65:30:da:03:84:4d:ff:69:88:90:20:20:7e:
97:db:90:0a:d1:eb:a0:f3:76:b9:e7:c6:50:32:36:
b8:a5:35:94:43:5c:28:37:cc:19:71:74:23:66:c3:
6e:fd:a6:2b:c5:57:58:9b:85:85:e5:00:c6:cb:41:
67:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BE:4B:37:78:0C:50:ED:1D:2C:88:5E:9B:6B:6E:29:62:E1:BF:C7
X509v3 Authority Key Identifier:
keyid:01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:28:03:e0:47:0c:bf:92:2f:a3:a1:7d:19:11:25:3e:24:5f:
eb:03:85:a6:f5:7a:ca:a1:91:2f:b0:ae:45:c2:ed:79:6d:c8:
f2:40:fc:58:a8:2b:b8:08:f9:d9:da:f8:1f:4f:10:84:65:48:
3a:b3:ec:07:5b:71:cc:59:7f:da:f6:26:d1:5a:4f:db:67:b7:
5c:25:54:67:c5:57:50:23:31:0c:29:8e:26:9b:fc:9e:f6:b3:
9b:e1:b7:47:41:fd:7d:a1:d2:cf:30:cc:e8:b1:d7:08:b7:5f:
5e:bd:91:8f:6e:cb:9c:67:66:84:fd:2a:9f:ba:bf:41:2b:df:
4c:e0:04:8a:ee:17:56:88:3f:0f:91:8e:78:56:02:94:fb:2a:
9d:6d:91:8e:5c:2f:74:86:b1:5b:08:32:e5:df:1d:ed:c8:45:
17:51:04:a5:27:77:9c:bf:63:cb:45:97:64:70:90:84:0d:60:
2f:40:17:42:e1:e3:05:f9:58:ef:20:fb:c8:74:35:3a:54:fe:
13:26:3f:cf:58:05:22:59:dd:7e:f3:cb:38:7c:20:68:c3:b3:
0d:a5:09:db:2a:0e:f5:26:dd:af:2b:9e:19:83:a7:a3:1e:2a:
c6:31:bf:55:02:d8:46:e3:bc:0b:53:e9:c5:7f:5c:23:45:64:
26:35:a9:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YZ3kNqpbMc5ctyGMl9FuTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxODM4MzA3Zjc5YWNkYzU5YWQ2ZWI4MmU4YzhhYWVmYTNk
ODgyODkwHhcNMjYwNjMwMTIwMTAyWhcNMjYwNzAxMTIwMTAyWjAzMTEwLwYDVQQD
EyhhNWJlNGIzNzc4MGM1MGVkMWQyYzg4NWU5YjZiNmUyOTYyZTFiZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTnyHotwdkfnRH1KlT0L0M0xHGaP
y38HtqYQwiUW3e+QRgvLUe3YFtK8v3Z7CSp3c5t81WY46RgMAAQEH28GZgH21JqX
Xl/9ch9YOhfbZsv30sb7jIT+sfZqZKVEiHy/ahVqJtbNThv8y4iLnEdZVRPkhM/A
BSGCRBZIJR6g8hh1+UCybukgwjlHnpp6VVR+6rIfGZWWWpoWxoMy2Op6cGHLsAI4
deuc0oddnXZthCh1pz2VT8+15gyWG+TbacrdXQ+lvGUw2gOETf9piJAgIH6X25AK
0eug83a558ZQMja4pTWUQ1woN8wZcXQjZsNu/aYrxVdYm4WF5QDGy0FnvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKW+Szd4DFDtHSyIXptrbili4b/HMB8GA1UdIwQY
MBaAFAGDgwf3ms3FmtbrgujIqu+j2IKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85ZjYxYmUtOGMzMS00OWJhLWI0MjQt
Y2EzZDRhYWU2ZjA5LzEvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85ZjYxYmUtOGMzMS00OWJhLWI0MjQtY2EzZDRhYWU2ZjA5
LzEvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApygD4EcM
v5Ivo6F9GRElPiRf6wOFpvV6yqGRL7CuRcLteW3I8kD8WKgruAj52dr4H08QhGVI
OrPsB1txzFl/2vYm0VpP22e3XCVUZ8VXUCMxDCmOJpv8nvazm+G3R0H9faHSzzDM
6LHXCLdfXr2Rj27LnGdmhP0qn7q/QSvfTOAEiu4XVog/D5GOeFYClPsqnW2Rjlwv
dIaxWwgy5d8d7chFF1EEpSd3nL9jy0WXZHCQhA1gL0AXQuHjBflY7yD7yHQ1OlT+
EyY/z1gFIlndfvPLOHwgaMOzDaUJ2yoO9SbdryueGYOnox4qxjG/VQLYRuO8C1Pp
xX9cI0VkJjWpKA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:35:43 2026 by rpki-client