Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft
File: AY9TOgxHePOMEstY3Xtq8l-MrOc.mft (raw, json)
Hash identifier: SCxpUZZrshvrQiRAA3mTDnE1hkhvnUj7zdrdT3ZpYAY=
Subject key identifier: 74:4C:EB:C5:CB:B4:82:CC:90:C3:17:69:34:14:FF:22:2F:19:10:44
Authority key identifier: 01:8F:53:3A:0C:47:78:F3:8C:12:CB:58:DD:7B:6A:F2:5F:8C:AC:E7
Certificate issuer: /CN=018f533a0c4778f38c12cb58dd7b6af25f8cace7
Certificate serial: 019D389BDFC103859DF0C040FC1FB98E5FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AY9TOgxHePOMEstY3Xtq8l-MrOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft
Manifest number: 0158
Signing time: Sun 29 Mar 2026 08:00:32 +0000
Manifest this update: Sun 29 Mar 2026 08:00:32 +0000
Manifest next update: Mon 30 Mar 2026 08:00:32 +0000
Files and hashes: 1: AY9TOgxHePOMEstY3Xtq8l-MrOc.crl (hash: X0mhYS61gcg0BtkeYnhLSkO5rrbom5+IafV3b3+VbUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AY9TOgxHePOMEstY3Xtq8l-MrOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:df:c1:03:85:9d:f0:c0:40:fc:1f:b9:8e:5f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018f533a0c4778f38c12cb58dd7b6af25f8cace7
Validity
Not Before: Mar 29 08:00:32 2026 GMT
Not After : Mar 30 08:00:32 2026 GMT
Subject: CN=744cebc5cbb482cc90c317693414ff222f191044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:2d:3a:f5:af:de:ea:68:60:21:c8:7f:6c:
84:8f:78:25:f8:ed:fa:12:4c:23:2d:c1:15:40:00:
de:c0:b0:d4:52:6a:50:fb:c8:c3:01:16:e1:09:96:
93:e4:9d:f1:cc:e2:38:0b:64:43:51:89:c1:06:28:
2a:bf:cb:8a:e6:d6:30:12:91:e8:00:25:0f:f8:da:
cf:77:bb:fd:3e:58:d7:9c:27:6c:87:95:c9:a6:39:
0f:c0:bc:5f:41:c6:82:4b:11:17:8f:ca:9e:50:e5:
71:47:8b:23:b9:87:44:e8:42:24:75:01:9f:bd:82:
68:c2:ee:a1:9e:ee:8d:80:77:65:7f:7a:ac:25:6e:
3d:88:bc:c6:c4:b4:66:55:ac:d8:1e:a3:eb:c2:b1:
89:9f:7a:0e:d6:c8:3f:06:d2:6c:93:23:a5:03:90:
bf:dd:aa:6a:53:1a:19:6b:e5:06:5f:85:0c:92:09:
47:8d:79:15:8f:3b:e0:e4:e7:69:95:b3:cc:8c:67:
e1:98:61:21:cc:fd:9c:37:e9:52:15:7d:21:84:04:
4d:43:8e:03:30:4d:13:6f:64:11:ed:31:bb:db:1c:
29:b9:b0:a2:bf:d5:1e:6b:85:1f:c2:0e:24:d8:89:
e9:bb:1f:13:28:5f:a4:12:64:7c:fb:bb:cf:7f:b7:
dc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4C:EB:C5:CB:B4:82:CC:90:C3:17:69:34:14:FF:22:2F:19:10:44
X509v3 Authority Key Identifier:
keyid:01:8F:53:3A:0C:47:78:F3:8C:12:CB:58:DD:7B:6A:F2:5F:8C:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AY9TOgxHePOMEstY3Xtq8l-MrOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:45:d9:cf:28:e3:83:e7:9b:d8:17:10:92:92:32:69:03:4c:
80:be:ce:5a:5b:a2:c9:7a:f7:46:9f:19:c9:d7:42:de:be:be:
8a:37:e2:7b:ca:e3:bc:49:4d:40:5f:72:e2:16:12:f3:fa:be:
77:b1:fc:cb:97:34:75:21:08:f5:97:90:7b:80:b1:41:e0:0f:
e7:9c:ef:81:47:de:e5:59:ee:a9:20:a8:a2:26:ef:59:32:67:
96:2d:bc:10:26:7d:51:cf:c9:bb:c7:1e:76:da:a7:05:2a:6b:
43:cb:c0:bb:e5:38:c0:aa:1a:8f:97:25:48:80:f5:53:df:7d:
5c:d8:03:c4:33:fc:85:e4:27:94:0d:92:88:f8:f4:05:31:07:
35:96:cc:ab:0b:33:b1:9f:4e:2f:1a:b7:b1:06:a6:af:b9:58:
40:ab:2b:5b:3d:94:3f:00:88:43:02:f8:63:6b:dd:ce:3d:df:
d6:e5:17:ea:be:6d:29:6b:3d:8e:22:5b:14:fe:a7:a8:64:cd:
a4:61:95:40:05:1f:60:9a:7d:98:cc:1b:fc:4e:93:c6:e1:7c:
f7:1d:6b:c9:45:c2:f0:da:15:0e:b3:f5:77:ba:d6:81:78:15:
c8:65:e9:24:00:6f:a7:1b:f1:f7:75:65:1d:21:5d:42:e9:a6:
15:66:5f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:56:46 2026 by rpki-client