Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
File: AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft (raw, json)
Hash identifier: jyG8Zke9LgMCfqXo9usCWzeVUVHn1ebUXXRFrl9SgoU=
Subject key identifier: 8E:3D:27:10:B3:79:DD:11:37:90:B2:42:57:09:5F:02:CD:3C:07:09
Authority key identifier: 03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
Certificate issuer: /CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Certificate serial: 019D37C0F94628FD39C2199742C7D966640E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
Manifest number: 0352
Signing time: Sun 29 Mar 2026 04:01:26 +0000
Manifest this update: Sun 29 Mar 2026 04:01:26 +0000
Manifest next update: Mon 30 Mar 2026 04:01:26 +0000
Files and hashes: 1: AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl (hash: c/LOqQUsxhZOxe4kKDJsrhbDRc6dQ6OcGkOHy+5EZgY=)
2: vYbe5i0abM5OKc80hhLHQSxkx6I.roa (hash: 11dpUJpj4Md28m8DN1pCtjlW/06S3TdKsIGJmsfc4nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f9:46:28:fd:39:c2:19:97:42:c7:d9:66:64:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Validity
Not Before: Mar 29 04:01:26 2026 GMT
Not After : Mar 30 04:01:26 2026 GMT
Subject: CN=8e3d2710b379dd113790b24257095f02cd3c0709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:43:50:ad:fa:cd:ad:61:95:4f:4f:f1:8c:97:
62:6c:ef:00:45:ef:a3:d0:12:ab:66:50:80:97:f0:
46:6c:fd:08:e1:c1:6d:69:77:69:e4:27:5c:2b:b8:
0e:15:40:09:19:80:7b:c1:d8:5a:74:96:8a:98:df:
1a:8b:63:e5:9f:e2:44:c1:30:77:15:b0:63:ed:c1:
06:94:7b:3e:0e:95:4b:9d:48:ba:da:07:05:8e:c6:
e9:43:86:94:7b:e4:aa:c0:d0:aa:b5:fb:35:50:ad:
17:f4:15:40:11:83:0c:01:b6:89:6d:97:76:9f:54:
6f:c9:08:7c:94:02:c9:ec:df:a1:18:07:a8:ad:41:
46:af:70:d5:0e:f8:a6:ea:84:a8:20:5f:2a:1e:5e:
f0:5d:db:bc:0e:a8:74:0c:32:a6:89:02:cd:7a:5b:
fa:e8:2b:80:2a:88:2a:30:51:60:d3:e4:8e:f3:5c:
a7:5e:2d:39:5e:16:ab:36:61:93:a4:c8:af:38:2e:
bd:2d:f8:3b:f6:ca:1f:31:f7:43:4e:51:ff:d2:c1:
16:43:bd:92:b1:62:ef:59:5c:8f:07:f6:cc:2d:ac:
fe:2e:05:bf:bb:6f:59:5a:19:f7:e8:ee:f3:02:d0:
c8:f8:d8:11:2c:9c:d4:e5:0f:87:d6:63:83:49:11:
01:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3D:27:10:B3:79:DD:11:37:90:B2:42:57:09:5F:02:CD:3C:07:09
X509v3 Authority Key Identifier:
keyid:03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:05:8c:6e:f9:a1:ce:4a:88:ff:4b:f9:bd:d6:3d:91:f8:46:
25:bf:15:09:ab:74:77:07:65:bf:3b:22:5a:5a:2d:b4:74:91:
fe:ef:3e:85:3f:65:84:d5:e4:0c:65:ad:d2:d9:b8:be:ef:c1:
e7:7a:8a:27:08:51:5d:05:3a:19:65:76:d7:08:b5:e3:6b:30:
28:03:b6:70:33:07:dc:96:9e:fa:39:31:fb:7f:0e:ca:7a:3c:
5c:b3:bc:93:c8:5e:7a:f4:c4:47:40:9a:57:32:a9:44:65:cf:
95:65:07:eb:f6:e7:a9:00:54:f8:a8:94:3a:29:30:cc:f9:64:
a2:f7:d5:1c:3b:a4:79:14:56:b1:f3:45:7b:aa:ef:3b:a9:af:
c8:58:74:68:e2:04:81:69:f0:7b:e1:eb:7f:b6:ed:12:0d:35:
0f:dd:c1:16:78:66:c7:54:ee:32:84:31:69:47:2e:72:12:06:
8b:f4:3e:06:44:42:ce:fd:dc:91:a7:eb:81:21:5b:41:95:9e:
8e:90:06:8d:f7:a5:8a:b4:78:c6:c3:99:b7:d3:c6:f5:0c:44:
45:10:8a:31:48:d9:d2:50:7e:29:84:29:38:7e:86:c5:52:48:
61:53:b6:03:08:1c:4d:52:0c:3c:ee:7b:a6:5b:b4:63:c8:4a:
29:da:6a:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wPlGKP05whmXQsfZZmQOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjFiZjI0ZmYwMjU3YjNkMDVjZjcwMjkwYTFhY2Y4N2Nl
YTY0MzkwHhcNMjYwMzI5MDQwMTI2WhcNMjYwMzMwMDQwMTI2WjAzMTEwLwYDVQQD
Eyg4ZTNkMjcxMGIzNzlkZDExMzc5MGIyNDI1NzA5NWYwMmNkM2MwNzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0NQrfrNrWGVT0/xjJdibO8ARe+j
0BKrZlCAl/BGbP0I4cFtaXdp5CdcK7gOFUAJGYB7wdhadJaKmN8ai2Pln+JEwTB3
FbBj7cEGlHs+DpVLnUi62gcFjsbpQ4aUe+SqwNCqtfs1UK0X9BVAEYMMAbaJbZd2
n1RvyQh8lALJ7N+hGAeorUFGr3DVDvim6oSoIF8qHl7wXdu8Dqh0DDKmiQLNelv6
6CuAKogqMFFg0+SO81ynXi05XharNmGTpMivOC69Lfg79sofMfdDTlH/0sEWQ72S
sWLvWVyPB/bMLaz+LgW/u29ZWhn36O7zAtDI+NgRLJzU5Q+H1mODSREBlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI49JxCzed0RN5CyQlcJXwLNPAcJMB8GA1UdIwQY
MBaAFAMhvyT/Alez0Fz3ApChrPh86mQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlHX0pQOENWN1BRWFBjQ2tLR3MtSHpxWkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iM2NiNGMtNmUzNi00YzQ4LThmZGUt
OTQwNDZhYWJmZjlkLzEvQXlHX0pQOENWN1BRWFBjQ2tLR3MtSHpxWkRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9iM2NiNGMtNmUzNi00YzQ4LThmZGUtOTQwNDZhYWJmZjlk
LzEvQXlHX0pQOENWN1BRWFBjQ2tLR3MtSHpxWkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgWMbvmh
zkqI/0v5vdY9kfhGJb8VCat0dwdlvzsiWlottHSR/u8+hT9lhNXkDGWt0tm4vu/B
53qKJwhRXQU6GWV21wi142swKAO2cDMH3Jae+jkx+38Oyno8XLO8k8heevTER0Ca
VzKpRGXPlWUH6/bnqQBU+KiUOikwzPlkovfVHDukeRRWsfNFe6rvO6mvyFh0aOIE
gWnwe+Hrf7btEg01D93BFnhmx1TuMoQxaUcuchIGi/Q+BkRCzv3ckafrgSFbQZWe
jpAGjfelirR4xsOZt9PG9QxERRCKMUjZ0lB+KYQpOH6GxVJIYVO2AwgcTVIMPO57
plu0Y8hKKdpqrw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:53 2026 by rpki-client