
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
File: AYZ9mLBSF68a-spyJrvWEzcHSfA.mft (raw, json)
Hash identifier: Zp3Yam1Z4osyu0GB0vhduJEYNKGvNB+3Z1YQ3jmkdbk=
Subject key identifier: CD:49:0B:54:64:E9:C5:4F:4F:03:5D:49:CD:8C:B2:D9:5D:1D:10:DF
Authority key identifier: 01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
Certificate issuer: /CN=01867d98b05217af1afaca7226bbd613370749f0
Certificate serial: 01A13F39497FDE695F5C8153D2D9CAC5ACC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
Manifest number: 078B
Signing time: Thu 15 Oct 2026 11:01:21 +0000
Manifest this update: Thu 15 Oct 2026 11:01:21 +0000
Manifest next update: Fri 16 Oct 2026 11:01:21 +0000
Files and hashes: 1: AYZ9mLBSF68a-spyJrvWEzcHSfA.crl (hash: HXtGm34tLqY9SVuCdQINNKBZcFGcUF+OdE4RonRQ9no=)
2: Ezve964v81lYlWQeavbK7g7CJGk.roa (hash: iRAr6mZP/rQywgyAaTeChLJgFIykzhfGwc22gfj7mcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:49:7f:de:69:5f:5c:81:53:d2:d9:ca:c5:ac:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01867d98b05217af1afaca7226bbd613370749f0
Validity
Not Before: Oct 15 11:01:21 2026 GMT
Not After : Oct 16 11:01:21 2026 GMT
Subject: CN=cd490b5464e9c54f4f035d49cd8cb2d95d1d10df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:dc:df:29:44:eb:16:d4:6b:2a:36:28:24:
11:38:18:15:85:2c:44:08:c3:5c:c2:b2:9c:c5:5a:
da:ad:0e:24:fa:00:87:e5:03:fc:76:9a:a9:b2:5d:
71:22:3e:eb:24:ce:72:c4:ca:b1:92:27:2b:0e:42:
fd:70:9b:f9:7c:07:4a:24:6b:f0:d2:b4:01:40:79:
ca:48:e4:4c:10:3f:7e:54:4f:d4:2b:25:8f:5b:cd:
d6:26:20:d3:61:50:fa:30:63:13:d6:47:90:4b:eb:
cf:a8:8a:11:1b:0f:c3:25:54:b0:58:4b:66:5c:e9:
a6:ae:e4:95:96:5e:2a:d8:45:56:96:74:88:c2:13:
d0:d3:c4:92:bd:a5:50:e8:05:7e:85:08:08:e9:71:
8c:51:32:e1:f7:3d:1c:c8:6d:dd:43:27:1d:d5:91:
db:87:49:3c:96:fb:5f:6f:56:81:10:47:79:12:9c:
e1:a1:90:37:6b:98:b6:a1:fc:a4:ea:d6:56:49:3e:
5f:84:3d:da:02:b1:6f:a7:3d:34:39:98:e1:c6:8f:
06:e2:be:7a:01:b2:19:d0:51:c9:37:e1:6b:82:87:
96:d6:45:6b:04:91:35:97:9d:52:11:4b:fa:5a:ed:
5f:33:d9:28:ab:8b:96:e8:81:d0:35:07:39:a5:43:
ea:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:49:0B:54:64:E9:C5:4F:4F:03:5D:49:CD:8C:B2:D9:5D:1D:10:DF
X509v3 Authority Key Identifier:
keyid:01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:eb:f9:0b:cb:fc:74:6b:f1:2d:52:64:43:8f:e9:f3:a2:60:
b3:53:e4:b5:4e:16:83:c6:bb:f4:94:3c:88:8c:8c:3f:3c:a2:
04:2c:09:eb:d7:66:d3:9c:9b:df:78:57:39:ac:3a:72:17:e4:
ec:e3:c0:8d:e3:33:55:82:2c:91:98:eb:95:6f:e0:9f:17:70:
fb:e4:60:6e:b4:87:76:62:b6:83:9e:62:13:1b:24:be:5f:f2:
e4:b6:85:df:08:23:b2:0d:55:24:0d:b1:ea:69:d0:7a:80:48:
3e:5f:58:8d:16:8f:c4:ab:bd:d6:87:2a:ee:41:fb:7a:16:b7:
25:53:db:aa:96:92:61:59:0d:39:fe:ae:8f:57:5c:5f:53:fc:
34:0d:17:e6:50:24:9d:18:ef:03:18:69:c8:29:49:b6:16:33:
54:df:0e:73:7e:16:5c:10:53:15:93:cc:1a:e4:57:bc:3f:60:
0a:81:2f:d7:66:23:cb:9b:d3:10:7e:e1:6d:70:0e:1c:43:6f:
f9:1e:e6:02:d3:c0:1e:1c:06:b2:b4:31:a4:3d:af:d9:c5:d9:
c3:15:5e:b8:7b:04:d5:16:02:47:fe:c6:0b:ab:b8:cf:b5:d8:
e1:09:33:51:31:84:68:0f:b7:4d:d1:31:de:2e:75:38:0e:51:
08:61:54:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:42 2026 by rpki-client