Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
File: AiyP_FBgnsDYtKcoBciZCmSq5x4.mft (raw, json)
Hash identifier: ljSvL9ldSlnwCdZW9JA9A3KLRLCl+8DKkDqVVoVAKSo=
Subject key identifier: F8:4A:F2:B7:31:A6:D9:E0:F5:E7:24:A0:20:A3:00:C9:9E:6D:EF:AF
Authority key identifier: 02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
Certificate issuer: /CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Certificate serial: 019D389BD1B10507A0CB5569470FF2E41ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
Manifest number: 0E04
Signing time: Sun 29 Mar 2026 08:00:29 +0000
Manifest this update: Sun 29 Mar 2026 08:00:29 +0000
Manifest next update: Mon 30 Mar 2026 08:00:29 +0000
Files and hashes: 1: AiyP_FBgnsDYtKcoBciZCmSq5x4.crl (hash: 8fP+CERveYTsfKwywzvZPZZgAEjZqtr00lB0lrm0r9Y=)
2: DWHyFvHwr99MtfkrMpHq2IQ1WQs.roa (hash: lZuuHU909ornFrQMygRPUOgb1PqH+8YBfhZUUM9nw/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d1:b1:05:07:a0:cb:55:69:47:0f:f2:e4:1a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Validity
Not Before: Mar 29 08:00:29 2026 GMT
Not After : Mar 30 08:00:29 2026 GMT
Subject: CN=f84af2b731a6d9e0f5e724a020a300c99e6defaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:6f:a6:c7:d7:8e:de:79:56:14:ba:1c:e6:
81:38:24:22:4a:69:10:fe:bc:09:4b:63:bf:8c:66:
b9:1d:70:7d:d0:ac:4a:bf:9e:24:2f:81:b3:63:c9:
91:4e:e7:f4:e2:d2:48:b7:70:66:2b:57:99:d2:03:
53:ed:78:f5:19:8c:a3:c6:9d:0a:8b:c4:c2:91:3c:
13:c4:0c:f2:2d:94:7c:1f:3d:8e:fe:af:74:8b:d9:
db:b6:9c:61:96:f3:b6:e8:df:c6:06:db:12:80:ca:
ba:af:7c:61:1f:b4:cd:73:2a:a9:df:1d:d3:87:19:
26:e9:d3:3f:93:4c:e7:23:a8:c9:e3:c0:3b:c2:0d:
ce:73:f3:dd:da:b3:6d:be:b2:02:54:31:5a:8d:0c:
38:72:60:0e:9b:f2:cf:12:89:f5:f0:28:16:61:c4:
40:68:41:1e:25:ea:e4:91:64:c3:7c:d0:42:25:1d:
fd:c4:ea:be:c2:34:1c:2f:d8:75:65:e3:a5:30:c1:
d4:ce:9d:0a:ac:6c:a2:fc:d6:22:c0:4d:cd:6b:d9:
19:c4:5a:ab:2c:26:be:48:d7:25:78:0d:08:40:a1:
ef:86:5c:f8:6f:7c:11:8f:da:d2:f7:76:4e:ba:c7:
4b:81:df:39:0e:e3:4e:ef:b0:15:b4:43:14:fa:d7:
92:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4A:F2:B7:31:A6:D9:E0:F5:E7:24:A0:20:A3:00:C9:9E:6D:EF:AF
X509v3 Authority Key Identifier:
keyid:02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:07:f1:71:f9:74:28:70:1a:9c:d3:3b:2c:3f:44:53:56:72:
c4:d5:56:0a:b2:f4:06:3c:0a:dc:d9:ed:a6:f9:76:ff:4d:f1:
a4:46:9e:94:8a:79:00:07:54:95:83:2d:15:0d:85:a6:82:5c:
c4:11:ee:0f:f5:27:ef:4a:09:1c:4e:1e:dd:8e:e5:59:ed:46:
f0:71:89:1f:fc:d6:c0:d9:70:39:eb:00:90:c8:7c:9b:e9:86:
d5:a9:ef:d7:b3:aa:da:b1:26:fd:36:e9:49:bd:e8:ab:02:63:
27:97:76:e6:98:47:78:44:31:e4:9a:8a:22:c8:f6:3b:cf:0c:
c6:2d:ba:fc:e1:2f:bd:e5:f9:19:4f:f1:3a:da:5a:94:80:5d:
05:35:e0:35:27:02:27:5d:83:a3:d8:8e:66:03:dd:19:33:eb:
83:7f:21:8d:62:f6:78:9a:46:a3:3c:43:eb:bc:90:cc:46:d5:
7f:20:cf:e1:45:df:77:61:75:d5:fe:d5:68:71:1c:06:cf:77:
d3:9c:71:6c:c3:e2:74:2f:93:7a:a3:69:bf:7a:f0:08:c0:cd:
8b:05:d4:df:fd:a6:c5:63:b0:b0:a0:fe:64:67:fb:16:91:71:
ba:2b:1c:e0:63:3a:d8:ef:9d:d7:5f:7f:40:99:57:ae:64:a6:
37:1b:92:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:21 2026 by rpki-client