Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
File: Ay1SsyOaHOPN00MxNIzngN3xZMA.mft (raw, json)
Hash identifier: iNUIFCyy9AzkTQGbxSYhxbQBFEDp4JTYolvKM0ZUeMw=
Subject key identifier: D9:49:6E:7F:0D:D1:BB:BE:09:80:F5:CD:CB:3C:4E:D0:88:29:85:CB
Authority key identifier: 03:2D:52:B3:23:9A:1C:E3:CD:D3:43:31:34:8C:E7:80:DD:F1:64:C0
Certificate issuer: /CN=032d52b3239a1ce3cdd34331348ce780ddf164c0
Certificate serial: 01A1476057EF5F743B9C79F3DCED22E36D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ay1SsyOaHOPN00MxNIzngN3xZMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
Manifest number: 0B5A
Signing time: Sat 17 Oct 2026 01:00:58 +0000
Manifest this update: Sat 17 Oct 2026 01:00:58 +0000
Manifest next update: Sun 18 Oct 2026 01:00:58 +0000
Files and hashes: 1: Ay1SsyOaHOPN00MxNIzngN3xZMA.crl (hash: nImgaMVAVZ6VXhdxQqIN68fDzXLU5uWR6gn/McA1USI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ay1SsyOaHOPN00MxNIzngN3xZMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:60:57:ef:5f:74:3b:9c:79:f3:dc:ed:22:e3:6d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032d52b3239a1ce3cdd34331348ce780ddf164c0
Validity
Not Before: Oct 17 01:00:58 2026 GMT
Not After : Oct 18 01:00:58 2026 GMT
Subject: CN=d9496e7f0dd1bbbe0980f5cdcb3c4ed0882985cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c8:1c:59:e1:27:23:eb:9e:c3:c1:84:e0:36:
46:eb:9a:f4:d1:95:8f:9d:f4:8e:29:1e:01:70:a3:
85:18:0f:95:1c:5b:ef:c8:3c:fb:14:15:09:38:81:
bc:a8:5d:70:e6:d3:c6:dd:2a:10:8b:7a:ca:bd:3c:
9b:57:70:0b:a1:36:9d:5b:47:e9:0a:77:80:dd:25:
7a:f5:c2:d0:56:36:3c:33:4d:6d:75:63:12:25:ab:
dc:9f:fa:f9:29:47:13:1a:e0:77:b4:86:c0:22:4d:
f9:ef:c4:25:63:aa:0a:c4:7a:31:10:e3:91:7c:01:
f7:51:b3:8a:af:35:31:6b:23:9f:5e:f1:72:ff:89:
28:6a:a1:0c:35:ea:ec:d0:08:f8:23:fc:15:eb:60:
5e:37:f0:3c:4f:73:14:f5:13:73:c2:63:ae:ed:a0:
9c:d6:70:a4:fb:e7:e1:0c:06:f6:65:95:f3:d6:16:
ff:b0:92:3e:07:a7:d8:06:9b:af:47:04:6d:dc:21:
1f:54:54:ae:c8:03:ce:2d:b5:40:43:27:49:32:72:
fc:b4:69:3a:12:8f:10:63:3e:1c:4a:f8:39:49:de:
e1:15:d7:ec:3d:51:bf:7c:fd:74:a0:88:52:02:a4:
79:1f:d6:f8:46:3c:13:07:cd:40:71:0c:c8:ce:2f:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:49:6E:7F:0D:D1:BB:BE:09:80:F5:CD:CB:3C:4E:D0:88:29:85:CB
X509v3 Authority Key Identifier:
keyid:03:2D:52:B3:23:9A:1C:E3:CD:D3:43:31:34:8C:E7:80:DD:F1:64:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ay1SsyOaHOPN00MxNIzngN3xZMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bd:3b:16:59:20:2b:23:bd:f6:64:a8:b9:0a:26:68:7c:3e:
34:1a:02:e9:c0:62:a4:56:8f:22:f3:00:c0:22:68:d8:fd:13:
64:90:a2:76:15:50:ed:38:d5:fb:b3:c9:e3:6a:bc:be:52:2b:
df:90:07:42:10:49:6c:b7:c9:4b:61:7d:29:95:5e:0b:67:ab:
e7:ba:fd:c7:3e:75:24:14:e3:6c:48:0c:cb:bf:55:5c:9e:f5:
5f:c7:41:6c:3f:8b:a3:47:bb:35:33:dd:e5:e7:66:84:af:e4:
66:08:b8:08:fb:bd:77:d9:94:d8:fd:8c:59:94:b9:32:b0:56:
49:01:22:1a:ef:fb:71:6f:c6:00:48:6d:cc:4c:27:d1:e8:e8:
b7:8a:83:e8:95:e9:a3:c0:35:ce:8d:85:7b:1a:7f:29:7d:95:
63:cb:9b:2f:f2:d6:d0:79:97:66:83:4f:87:92:95:e0:f6:fd:
8e:f8:5b:c0:fd:49:52:64:0d:ef:bd:90:6f:fd:2b:c8:54:bc:
79:2e:97:a7:c9:7b:7c:06:9f:c4:57:b6:c1:6c:81:d2:ae:46:
6c:1b:58:58:87:fe:14:dc:fa:43:ec:1d:91:24:bd:75:39:8b:
e6:57:78:7b:71:07:09:37:0d:e6:d3:12:f8:5f:17:bd:0d:86:
38:f9:31:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:49:52 2026 by rpki-client