Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft
File: AY9TOgxHePOMEstY3Xtq8l-MrOc.mft (raw, json)
Hash identifier: nMZvwe26uIv+jYM3vV6ef/v5dEekwh8FBahbnR+MzTs=
Subject key identifier: 68:69:4B:6C:3A:00:99:9C:1A:83:29:02:D1:13:4F:6F:BD:AD:47:94
Authority key identifier: 01:8F:53:3A:0C:47:78:F3:8C:12:CB:58:DD:7B:6A:F2:5F:8C:AC:E7
Certificate issuer: /CN=018f533a0c4778f38c12cb58dd7b6af25f8cace7
Certificate serial: 01A040F2F1C97045E13E5C6CA0F2CBB518B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AY9TOgxHePOMEstY3Xtq8l-MrOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft
Manifest number: 02EA
Signing time: Thu 27 Aug 2026 02:00:58 +0000
Manifest this update: Thu 27 Aug 2026 02:00:58 +0000
Manifest next update: Fri 28 Aug 2026 02:00:58 +0000
Files and hashes: 1: AY9TOgxHePOMEstY3Xtq8l-MrOc.crl (hash: gORmstMwEdK6M0qx1LsxQEi98khWEl61DuGfslBGtoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AY9TOgxHePOMEstY3Xtq8l-MrOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f2:f1:c9:70:45:e1:3e:5c:6c:a0:f2:cb:b5:18:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018f533a0c4778f38c12cb58dd7b6af25f8cace7
Validity
Not Before: Aug 27 02:00:58 2026 GMT
Not After : Aug 28 02:00:58 2026 GMT
Subject: CN=68694b6c3a00999c1a832902d1134f6fbdad4794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a5:23:91:d4:99:31:6c:f9:62:fa:d7:25:11:
69:1e:d1:a5:ae:96:71:92:f3:5a:9c:e8:3c:bc:c3:
63:a7:ae:da:e3:b8:83:86:d6:67:07:be:7e:ce:d0:
49:a1:ed:68:11:28:73:67:67:51:5d:04:f5:8f:d7:
c6:6e:72:1a:7d:4d:07:1c:34:0b:23:62:58:6a:c8:
99:c9:11:bc:a3:e0:5e:3c:0e:74:6f:8f:60:7e:fc:
ce:80:82:7c:da:a3:a4:d4:ac:15:32:75:45:01:79:
29:1b:fa:92:87:7d:47:9f:f4:40:c5:56:8e:a3:6c:
15:08:9c:95:63:52:c4:94:e9:cb:23:cf:05:40:df:
48:14:1a:79:8f:e4:6b:99:1d:c5:9a:42:2d:06:de:
23:45:0c:8e:bc:e0:e8:58:a9:64:d6:2a:6c:b9:6c:
dd:c1:8c:7d:1a:eb:a6:a6:36:96:c9:d4:07:a8:df:
df:3f:4f:3f:af:ff:fc:66:03:9d:e2:ca:de:ee:2e:
94:60:46:af:8b:42:2e:dd:32:44:fa:80:8b:56:75:
2d:2f:6a:b7:52:57:88:ea:fb:f8:04:11:81:5d:12:
e9:3c:65:7e:ba:99:6f:b3:51:d1:08:2d:ad:a6:9b:
03:f2:57:e0:48:86:e6:54:65:a6:88:3e:ca:cd:7c:
5d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:69:4B:6C:3A:00:99:9C:1A:83:29:02:D1:13:4F:6F:BD:AD:47:94
X509v3 Authority Key Identifier:
keyid:01:8F:53:3A:0C:47:78:F3:8C:12:CB:58:DD:7B:6A:F2:5F:8C:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AY9TOgxHePOMEstY3Xtq8l-MrOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8c:1c:b1:f6:87:53:a2:8e:e9:fb:95:6a:77:1d:f6:5f:df:
d9:8e:50:93:a1:34:35:8c:bd:3e:09:fc:fb:ea:28:c5:66:f4:
93:2b:29:68:dc:dd:11:a0:81:0b:b3:1e:63:42:cf:9c:ef:7b:
49:27:7b:27:34:27:a9:35:9c:cd:63:ec:12:a4:b2:6c:8b:84:
4c:b7:89:bd:22:69:36:3f:f6:de:d0:62:e3:c1:ea:5e:b3:75:
19:43:14:c1:a8:d2:fc:31:ee:94:ec:cc:1c:e5:4a:dc:01:55:
d4:61:2e:ae:0f:6f:7f:28:db:c6:c5:88:04:87:7d:f1:cf:cb:
fa:16:76:37:42:86:b6:b2:94:be:b9:02:15:b0:50:6f:d8:ed:
ff:b6:1d:ae:80:61:4e:29:73:65:c6:e0:e1:94:b8:b7:48:3e:
3c:f8:8f:b0:38:0f:0a:d9:8e:97:90:3d:7b:cc:09:a1:50:ee:
14:1f:a9:a6:5b:77:b0:42:d7:e7:e5:86:87:1c:05:db:93:d4:
27:9e:06:20:e5:c5:ce:83:e7:47:5d:e5:dd:da:58:35:7b:4b:
fb:23:27:42:39:4f:ec:5e:20:7f:5e:17:da:4f:7a:b8:f1:fa:
35:a2:e5:e2:e8:ca:97:31:91:fc:09:f9:84:fe:b2:59:33:90:
fc:7c:ee:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:51:34 2026 by rpki-client