Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier: 1g/IajF5OGvrqWTH8FbaYwP3FGUMH405cy6Snw6h1+A=
Subject key identifier: 05:3C:2D:02:11:29:2D:6F:53:2C:84:AB:90:B4:74:34:20:B3:F0:75
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial: 019D3A1C71D69DA0ADFA24A3833BD2349652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number: 10F8
Signing time: Sun 29 Mar 2026 15:00:35 +0000
Manifest this update: Sun 29 Mar 2026 15:00:35 +0000
Manifest next update: Mon 30 Mar 2026 15:00:35 +0000
Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: D6SKuVhGUcyQuTqIyL+iPB7lBBNoc6wcskQymCYMl2o=)
2: PgXrvWBADSv7xH4LgHKpTQQ0144.roa (hash: rmC8h6+zobbErP+gvycV1mNmmNbI0Zsk3t4WrqWuDNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:71:d6:9d:a0:ad:fa:24:a3:83:3b:d2:34:96:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Validity
Not Before: Mar 29 15:00:35 2026 GMT
Not After : Mar 30 15:00:35 2026 GMT
Subject: CN=053c2d0211292d6f532c84ab90b4743420b3f075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:4f:f4:a1:07:6b:31:f6:19:40:e1:13:ae:
91:a6:0e:d9:d2:4a:b4:cd:71:f0:45:07:55:f5:12:
f1:2f:b2:94:d2:da:53:7e:e3:a0:03:87:f4:15:70:
d2:47:a5:9a:81:95:7e:05:c0:b7:56:34:9f:72:99:
b8:31:c7:c7:1f:97:20:52:70:ca:4b:70:7d:e8:ce:
e2:b9:37:89:2a:6e:f9:40:2f:71:0e:e8:a9:e2:12:
27:cb:36:33:8d:78:ea:36:e2:a1:9c:87:fa:33:9d:
c8:e6:88:bc:53:30:fa:c0:ca:f4:61:77:83:64:bf:
d8:27:cb:7f:f7:21:80:f3:53:4f:c2:70:27:35:65:
81:32:c8:c0:2a:c3:3a:d2:d0:6c:4d:ef:40:c2:36:
18:6d:2e:24:8a:4c:de:13:fb:23:ee:65:69:72:83:
68:44:43:22:0f:05:64:43:62:34:e1:36:81:9d:8e:
45:1c:0c:2c:d1:10:0a:db:c6:02:02:dc:7e:1a:be:
a3:6c:dd:c8:05:eb:d2:97:bc:76:54:28:64:d0:8e:
4c:19:00:50:3d:c2:d2:bb:23:2b:0c:0c:e6:dc:2d:
ea:4e:52:31:ae:60:9c:53:78:0f:f5:e5:ba:ad:7f:
f4:28:ec:c1:5d:55:53:f9:08:99:f2:6a:71:54:d7:
4e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3C:2D:02:11:29:2D:6F:53:2C:84:AB:90:B4:74:34:20:B3:F0:75
X509v3 Authority Key Identifier:
keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f3:7b:e2:70:62:f9:49:3a:ea:91:04:9b:65:6c:14:43:72:bd:
80:25:47:81:93:a6:ec:0b:ab:f4:cd:06:77:68:78:7c:84:5c:
9c:2a:0b:39:75:0d:00:b7:68:d5:df:08:dc:24:f4:60:2b:cc:
44:23:81:e6:fd:a8:4c:22:69:b1:b4:03:65:f1:a8:23:5b:8f:
5f:f1:1b:c1:bc:e7:81:b7:c9:df:74:73:6e:cd:c3:14:4c:0d:
05:77:48:7b:82:f7:e2:1e:db:09:71:c9:65:6a:3a:47:ca:c2:
fa:ce:00:28:ee:49:a9:69:e1:80:1a:7b:f5:78:fd:9b:d6:ef:
07:f4:95:a2:9c:3b:bf:b4:b0:d6:d7:6f:82:ae:b4:f4:63:79:
f4:3f:dc:77:f6:f7:67:ea:09:94:6e:65:82:2f:81:5b:6b:5f:
06:5d:26:e9:72:ef:26:6b:42:c5:f3:ac:8d:21:af:c7:5f:99:
1e:4d:07:b5:67:d0:84:4b:04:30:56:13:d0:aa:e7:75:3a:dc:
d0:e7:17:4c:64:97:37:c8:cb:b5:84:eb:55:d3:9d:bc:bc:f3:
35:5e:1e:87:0b:14:1e:1c:1d:f4:15:f2:82:ad:db:b9:01:da:
d5:12:5d:47:8f:07:02:bf:20:02:cb:14:99:51:3e:c8:bd:c4:
95:26:11:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:08 2026 by rpki-client