Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
File: Ay1SsyOaHOPN00MxNIzngN3xZMA.mft (raw, json)
Hash identifier: 8pStb+vrlGnEoO6okmKmgUbHsskZ4SnhQa1h9j4u5UE=
Subject key identifier: 2D:1E:C9:05:A4:5D:4F:E3:1E:48:2C:DD:84:EF:0D:47:05:E8:DA:6E
Authority key identifier: 03:2D:52:B3:23:9A:1C:E3:CD:D3:43:31:34:8C:E7:80:DD:F1:64:C0
Certificate issuer: /CN=032d52b3239a1ce3cdd34331348ce780ddf164c0
Certificate serial: 01A00100F02F65669ACC3D9F6D95C643F9F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ay1SsyOaHOPN00MxNIzngN3xZMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
Manifest number: 0AB1
Signing time: Fri 14 Aug 2026 16:00:33 +0000
Manifest this update: Fri 14 Aug 2026 16:00:33 +0000
Manifest next update: Sat 15 Aug 2026 16:00:33 +0000
Files and hashes: 1: Ay1SsyOaHOPN00MxNIzngN3xZMA.crl (hash: Z5ERgmslz3OsyoGWXiVlRpQMzk2pxqlCiwSJELt09es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ay1SsyOaHOPN00MxNIzngN3xZMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:00:f0:2f:65:66:9a:cc:3d:9f:6d:95:c6:43:f9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032d52b3239a1ce3cdd34331348ce780ddf164c0
Validity
Not Before: Aug 14 16:00:33 2026 GMT
Not After : Aug 15 16:00:33 2026 GMT
Subject: CN=2d1ec905a45d4fe31e482cdd84ef0d4705e8da6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:cf:7c:f1:a7:30:78:21:25:53:86:2e:6a:
73:d8:05:af:0f:7d:f7:d8:5c:9e:fc:c6:54:18:f1:
ac:26:e4:36:e5:b7:3c:02:9f:7d:71:c4:e7:2b:3c:
18:85:92:6d:1a:13:9d:5c:2c:ca:8e:ad:3e:26:f1:
67:cb:dc:e0:e0:2e:2c:74:ac:c3:0c:27:69:da:37:
d0:5c:1b:16:92:aa:91:54:a9:f2:10:60:cd:ce:1b:
ba:fe:76:96:cd:6d:c4:76:12:81:3f:b9:80:5f:16:
49:bf:22:42:fa:74:ca:ed:dd:01:39:e9:48:ab:62:
cb:3c:de:82:28:69:32:19:7f:9c:e7:85:96:00:b4:
bf:b7:4b:49:ac:37:fe:21:25:2a:21:15:d6:a1:53:
cc:a5:22:54:8a:71:83:de:08:bc:09:89:6c:f0:a1:
ee:43:20:ec:61:2e:11:5f:97:87:6a:13:57:f3:24:
84:d4:41:53:99:5f:f9:c2:8c:e8:a5:31:ef:9a:f9:
94:ee:41:5b:ec:27:20:26:29:ea:2a:84:48:21:58:
46:3b:35:9b:10:ad:5a:13:19:da:57:90:0f:9f:fc:
23:bf:d1:21:c1:5f:48:1b:00:fb:fa:d9:f3:6a:8b:
6c:62:17:71:8f:57:47:89:25:38:7d:00:92:f3:df:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1E:C9:05:A4:5D:4F:E3:1E:48:2C:DD:84:EF:0D:47:05:E8:DA:6E
X509v3 Authority Key Identifier:
keyid:03:2D:52:B3:23:9A:1C:E3:CD:D3:43:31:34:8C:E7:80:DD:F1:64:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ay1SsyOaHOPN00MxNIzngN3xZMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:08:ca:54:6e:57:75:a7:fe:1e:07:f7:f1:c6:20:87:d5:b8:
5d:2c:47:3d:44:fd:ea:2f:5c:df:c2:9a:4a:f1:09:5f:e1:59:
78:ea:78:25:a8:a4:39:38:4a:d2:38:6c:64:2c:11:83:58:62:
5f:04:8c:14:6b:93:4c:c2:90:8d:d8:24:84:3a:35:f4:05:c4:
d4:89:b4:45:e4:9a:ca:c8:89:9f:5a:6f:af:a9:9d:89:57:fb:
7c:1f:a9:68:57:d7:d4:7d:4a:34:c6:2e:e5:5f:27:b7:81:db:
30:db:d8:80:d7:2c:7c:99:a1:bb:4f:9c:d7:66:5c:95:db:52:
8e:58:70:d3:ae:aa:c4:b0:a4:28:c4:0c:ea:8f:f8:ac:02:03:
4c:72:79:fe:97:06:6a:8c:b2:cf:4a:b8:a2:13:e7:c9:0c:fd:
af:a5:53:52:ba:fd:b8:b7:75:e5:bc:9d:4d:b6:bd:ec:b2:9f:
37:0d:32:f7:eb:81:a4:84:6d:4e:37:06:44:63:6a:1f:b3:fc:
8b:7a:6c:d4:3e:a4:e7:d4:bf:2b:6c:1b:56:40:79:c4:de:7d:
64:e5:d8:8e:52:c2:d1:ac:05:0d:00:c7:36:b1:35:bc:9f:3a:
4a:7f:22:31:ba:0d:93:7a:c1:de:c3:8a:4d:26:ec:74:8f:0a:
3f:51:89:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:25 2026 by rpki-client