
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
File: _AY2gjog5gJjQv6MiOpyqPj3p0k.mft (raw, json)
Hash identifier: OF8E7QWob4DoQ4Dt3UKghJJu0l4pCefNPw6YHmRLJGE=
Subject key identifier: 88:8D:D7:C9:AE:BB:75:00:AE:8E:3D:5E:A5:A4:B1:B1:06:B1:F1:E0
Authority key identifier: FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
Certificate issuer: /CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Certificate serial: 019E9B854EE8DC15672C2050D24697CF8540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
Manifest number: 156A
Signing time: Sat 06 Jun 2026 06:01:05 +0000
Manifest this update: Sat 06 Jun 2026 06:01:05 +0000
Manifest next update: Sun 07 Jun 2026 06:01:05 +0000
Files and hashes: 1: _AY2gjog5gJjQv6MiOpyqPj3p0k.crl (hash: CdZE70QwNx0YMnsPvfh5BwzKS/SwCq3V/t/tmtUq1PQ=)
2: uVqY2vkhR0d7ZrMF-F13PIFCP0Y.roa (hash: B7Ssp76u9RPQonP2oCi95fudfzNjxfG0p6HpSFM8NR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:85:4e:e8:dc:15:67:2c:20:50:d2:46:97:cf:85:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Validity
Not Before: Jun 6 06:01:05 2026 GMT
Not After : Jun 7 06:01:05 2026 GMT
Subject: CN=888dd7c9aebb7500ae8e3d5ea5a4b1b106b1f1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:c6:2f:d4:91:6c:4a:4c:1c:27:4f:58:ac:
d0:fb:c2:33:a0:d3:99:d8:34:1b:2d:4c:e8:ad:76:
f9:88:e7:9b:a4:f9:9c:33:0c:ec:21:ac:08:88:96:
03:ea:2c:de:ac:20:3e:23:d7:5f:e8:fb:cc:04:b7:
15:c3:9e:cf:d8:9b:74:a1:4a:c7:0f:bf:21:03:ea:
98:41:9a:7b:24:e2:f3:c8:25:1e:fc:6e:1d:ed:76:
46:78:7b:a2:57:c9:52:1d:bf:93:b1:10:f4:3f:0f:
c0:fe:f8:81:5a:34:6d:b2:4d:8e:df:05:14:75:b4:
84:4d:d1:e0:07:16:8f:96:22:40:17:e0:7d:63:63:
7c:4b:cb:55:0f:49:48:5a:6b:9b:81:50:a7:fe:bc:
36:23:7e:5b:ae:04:62:f7:30:3b:3b:b2:03:d9:09:
bb:eb:32:e1:9a:e8:e8:64:cf:59:b6:f6:35:cb:0d:
31:3c:6e:5d:74:ed:4e:62:b1:dc:e6:39:4f:ce:ba:
ac:34:61:7d:74:ea:6a:17:48:8b:b9:d2:88:02:d6:
cc:7a:1d:3b:9c:37:70:c0:ec:b0:c5:5b:ad:78:27:
22:b9:e9:0c:20:06:a3:23:e4:3b:78:00:36:1e:b2:
1a:c7:db:ce:23:4e:c6:04:23:37:a0:ac:5e:ef:07:
90:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8D:D7:C9:AE:BB:75:00:AE:8E:3D:5E:A5:A4:B1:B1:06:B1:F1:E0
X509v3 Authority Key Identifier:
keyid:FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:4a:b2:85:9f:37:0d:1a:bb:21:7b:35:3f:f6:1f:2a:2e:35:
63:c6:42:a2:f7:2b:6b:81:6d:a3:75:cc:21:0e:94:77:ac:fe:
6c:b8:00:33:07:40:be:11:4a:0a:9a:76:ec:d1:dc:a6:af:ac:
9e:d9:af:af:f0:57:e5:c0:6f:41:d9:0f:34:ce:07:b0:54:4c:
95:e5:76:94:d4:84:e2:b4:06:18:1a:ae:80:7c:42:de:7f:af:
34:0f:0f:3b:61:92:4a:5c:57:65:34:5f:6a:a5:ec:54:57:d0:
f1:b1:ee:79:b0:62:c9:86:2e:c4:e8:74:75:82:75:5d:91:70:
0f:da:ee:25:15:dc:9b:3e:4b:ec:1d:35:96:72:82:40:11:41:
41:2d:ca:2d:78:e4:fb:ec:42:e7:68:62:5a:17:b4:b5:83:28:
7b:d0:22:96:b8:3b:b4:c4:2a:78:98:c4:e6:30:ab:8c:89:e6:
e8:0e:3c:05:93:0d:7e:f0:25:08:2c:24:82:68:0b:d4:6e:4a:
2a:7b:c9:04:23:aa:4e:8b:a9:93:63:b0:e2:af:e8:b3:93:a5:
79:dc:95:f9:95:0a:64:0c:b9:bb:f2:13:24:aa:41:2e:ec:57:
5b:55:f8:f2:ed:c6:5f:d1:47:2a:77:64:05:84:6b:de:90:81:
f1:0a:2d:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6bhU7o3BVnLCBQ0kaXz4VAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMDYzNjgyM2EyMGU2MDI2MzQyZmU4Yzg4ZWE3MmE4Zjhm
N2E3NDkwHhcNMjYwNjA2MDYwMTA1WhcNMjYwNjA3MDYwMTA1WjAzMTEwLwYDVQQD
Eyg4ODhkZDdjOWFlYmI3NTAwYWU4ZTNkNWVhNWE0YjFiMTA2YjFmMWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubLGL9SRbEpMHCdPWKzQ+8IzoNOZ
2DQbLUzorXb5iOebpPmcMwzsIawIiJYD6izerCA+I9df6PvMBLcVw57P2Jt0oUrH
D78hA+qYQZp7JOLzyCUe/G4d7XZGeHuiV8lSHb+TsRD0Pw/A/viBWjRtsk2O3wUU
dbSETdHgBxaPliJAF+B9Y2N8S8tVD0lIWmubgVCn/rw2I35brgRi9zA7O7ID2Qm7
6zLhmujoZM9ZtvY1yw0xPG5ddO1OYrHc5jlPzrqsNGF9dOpqF0iLudKIAtbMeh07
nDdwwOywxVuteCciuekMIAajI+Q7eAA2HrIax9vOI07GBCM3oKxe7weQnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiN18muu3UAro49XqWksbEGsfHgMB8GA1UdIwQY
MBaAFPwGNoI6IOYCY0L+jIjqcqj496dJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0FZMmdqb2c1Z0pqUXY2TWlPcHlxUGozcDBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS85NDQ4OTYtM2M0MS00NzEwLTg2ZDIt
MDA1YTkyOWFjMTI0LzEvX0FZMmdqb2c1Z0pqUXY2TWlPcHlxUGozcDBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS85NDQ4OTYtM2M0MS00NzEwLTg2ZDItMDA1YTkyOWFjMTI0
LzEvX0FZMmdqb2c1Z0pqUXY2TWlPcHlxUGozcDBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArkqyhZ83
DRq7IXs1P/YfKi41Y8ZCovcra4Fto3XMIQ6Ud6z+bLgAMwdAvhFKCpp27NHcpq+s
ntmvr/BX5cBvQdkPNM4HsFRMleV2lNSE4rQGGBqugHxC3n+vNA8PO2GSSlxXZTRf
aqXsVFfQ8bHuebBiyYYuxOh0dYJ1XZFwD9ruJRXcmz5L7B01lnKCQBFBQS3KLXjk
++xC52hiWhe0tYMoe9Ailrg7tMQqeJjE5jCrjInm6A48BZMNfvAlCCwkgmgL1G5K
KnvJBCOqToupk2Ow4q/os5OledyV+ZUKZAy5u/ITJKpBLuxXW1X48u3GX9FHKndk
BYRr3pCB8QotMg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:22:55 2026 by rpki-client