Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
File: AYzG9GaiQWV79exSpjDa6wEiL4U.mft (raw, json)
Hash identifier: nGFBBUVX/rEHwYuWoR4KKm/YxiEXL/0Co8TVqJOxX9k=
Subject key identifier: 73:C8:F7:B3:F6:F6:7F:F8:E9:0E:DF:93:17:F3:29:75:C5:A5:29:17
Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
Certificate issuer: /CN=018cc6f466a241657bf5ec52a630daeb01222f85
Certificate serial: 01A13D4AB845C01D934AF71FF06ECC58B9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 02:01:09 +0000
Manifest this update: Thu 15 Oct 2026 02:01:09 +0000
Manifest next update: Fri 16 Oct 2026 02:01:09 +0000
Files and hashes: 1: AYzG9GaiQWV79exSpjDa6wEiL4U.crl (hash: L7PFmFBr6BmiQMjbDDGJyGfaMsVcvcXlqNKUpuRq+Eg=)
2: TM56q_Km90IofYyolcjUGG4s9_E.roa (hash: +vMdN883JqiJ4BCwwMasiDlvt3eGgHHdJPYkXZCMObo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:b8:45:c0:1d:93:4a:f7:1f:f0:6e:cc:58:b9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85
Validity
Not Before: Oct 15 02:01:09 2026 GMT
Not After : Oct 16 02:01:09 2026 GMT
Subject: CN=73c8f7b3f6f67ff8e90edf9317f32975c5a52917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:10:d4:fb:7e:96:d5:11:19:6a:01:c2:c3:
82:24:c5:22:25:1d:40:79:f8:53:18:38:56:32:8b:
a4:ff:82:0c:77:88:b2:4f:69:82:11:5e:5b:83:72:
79:f9:f6:4d:c5:29:2a:f6:94:ce:40:4a:cd:10:29:
da:31:30:0d:44:46:2c:16:a9:72:5a:e5:53:78:03:
41:ee:3c:20:69:ed:33:75:54:d7:f1:10:ab:f1:f9:
e5:0f:d5:dc:49:74:99:da:f3:35:b2:d5:cf:a6:2e:
df:95:59:8d:ab:a1:29:17:77:1a:2d:2a:a9:b6:7b:
ba:90:17:0e:2b:2f:9d:fe:9d:ee:af:ab:e1:c0:1a:
74:c8:64:9d:85:83:84:6e:36:8b:8f:2b:68:9c:1e:
16:fd:33:0c:51:91:60:57:8d:3b:ca:38:64:78:7f:
03:1f:82:1d:36:66:21:9b:f7:e8:05:3a:a4:2e:c7:
6d:93:c1:de:0d:a6:b1:7d:d3:6b:da:19:16:36:1c:
de:46:be:fc:14:c7:7f:dc:62:c5:cc:7d:31:89:b3:
f5:92:eb:4c:c4:8f:ca:c1:b2:b6:d6:8d:93:22:51:
fe:e2:18:bc:8b:c9:9a:35:ab:28:b2:1f:48:de:3e:
56:a0:b2:df:80:3e:5d:7f:8d:4b:44:ff:07:65:6e:
f9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C8:F7:B3:F6:F6:7F:F8:E9:0E:DF:93:17:F3:29:75:C5:A5:29:17
X509v3 Authority Key Identifier:
keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0c:0a:5d:e0:0c:0a:bc:66:b2:47:d4:d2:d9:c1:03:e1:11:
a4:c7:52:55:8e:b5:61:5b:b1:74:e1:2b:c7:51:e0:b1:f6:fd:
38:d9:02:f2:38:35:d8:c6:be:94:7b:44:2c:94:53:7a:87:e3:
ab:77:6c:b4:d3:79:8f:42:cd:12:71:83:1a:1a:28:b5:fb:ba:
1c:7f:f8:11:ff:33:5d:fc:cc:b3:3f:36:65:45:d9:9d:42:b2:
ac:88:bf:04:3f:b6:84:20:8e:ca:60:16:45:f5:c6:a8:de:84:
78:97:95:38:cc:eb:74:bd:ac:12:9c:8c:1a:66:95:38:1c:8f:
46:a6:75:f6:a9:9e:75:3c:8a:08:56:4d:4f:ea:c2:be:e9:ee:
79:84:21:20:2c:9f:d0:b0:be:a3:77:30:8c:44:5a:1f:fe:1a:
90:0c:a1:dd:16:1e:52:5e:b5:f5:f5:15:2e:c3:93:e7:bf:0e:
74:78:8d:e9:2d:29:93:05:0f:8b:c2:a1:ba:99:50:7a:f0:3d:
36:70:9d:5d:ee:49:42:ee:d9:e0:f4:74:00:91:1c:84:3e:6c:
8a:2e:c3:c0:20:51:cc:a5:26:ae:cb:6d:14:f4:e2:fa:b3:14:
3b:90:e0:33:da:79:c4:8f:f5:05:a4:ff:5f:c0:d3:50:07:15:
e0:82:8c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:24 2026 by rpki-client