Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier: MTz6+wjs63sE2PYNzuftYpoW2AiXG0WZzUzA81uFqfo=
Subject key identifier: 51:58:F1:F2:D4:48:55:0A:34:23:D9:27:FB:33:A8:39:A5:63:5F:AF
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial: 019F190CA5261354F085837771D9A717C659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number: 11F0
Signing time: Tue 30 Jun 2026 15:01:26 +0000
Manifest this update: Tue 30 Jun 2026 15:01:26 +0000
Manifest next update: Wed 01 Jul 2026 15:01:26 +0000
Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: pgCeC9M2DOJyb4fCTNL6ZyxeDgx1iBKI8qV7U1eLPn8=)
2: PgXrvWBADSv7xH4LgHKpTQQ0144.roa (hash: rmC8h6+zobbErP+gvycV1mNmmNbI0Zsk3t4WrqWuDNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:a5:26:13:54:f0:85:83:77:71:d9:a7:17:c6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Validity
Not Before: Jun 30 15:01:26 2026 GMT
Not After : Jul 1 15:01:26 2026 GMT
Subject: CN=5158f1f2d448550a3423d927fb33a839a5635faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:de:fc:4c:66:a7:4a:07:94:c1:b5:40:7e:
b0:ad:a9:71:47:4e:77:f6:6b:cb:6a:17:15:c5:02:
a2:43:46:99:f7:d2:a4:97:63:c3:3d:1e:8d:41:7a:
8a:2b:29:62:5c:53:d6:a3:1b:4f:07:e6:d9:b6:cf:
d4:bb:53:e9:dd:5f:74:c9:bb:ff:92:a1:f2:cf:bf:
ec:5e:7b:72:c5:b4:38:d3:87:e8:28:dc:c9:1d:66:
24:28:b5:bd:04:0e:fd:4a:93:39:30:1b:d0:51:72:
22:92:51:2d:a5:e0:09:dc:94:56:f8:b4:b7:cf:02:
b1:ff:81:65:f4:b5:46:c1:59:bc:59:5a:8b:55:b6:
ad:24:dd:dd:ef:69:33:fd:77:64:16:75:4a:11:06:
22:a2:64:1e:3c:97:17:5e:f5:dd:22:65:77:a8:47:
c1:a5:c3:14:0b:34:57:64:84:f4:ea:60:3b:bf:fb:
cd:84:07:05:5c:e6:ae:68:aa:af:26:33:72:ae:6a:
e8:92:fd:05:02:3f:85:39:02:2f:34:d3:8d:e3:50:
c0:db:b5:a7:3f:0c:8c:7a:a3:92:fd:37:c7:ae:8c:
2c:91:4b:3b:96:cf:20:b6:13:a5:40:e9:cc:14:57:
9b:ed:10:06:ba:d4:0e:4d:8a:0e:03:44:f8:8a:2f:
c0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:58:F1:F2:D4:48:55:0A:34:23:D9:27:FB:33:A8:39:A5:63:5F:AF
X509v3 Authority Key Identifier:
keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4b:e8:51:f4:3d:d4:4e:b0:52:4c:54:d7:ff:02:e4:1d:da:
91:d6:8f:68:23:9c:7a:78:d8:31:7f:eb:48:2c:db:80:81:79:
73:55:e3:ce:75:f3:21:18:20:61:a6:4d:33:7f:89:3d:1a:0b:
9c:de:cb:bc:70:57:7c:25:b7:5d:54:18:12:29:7d:d0:4b:b2:
43:9f:da:cb:81:b4:7e:b8:68:cf:80:df:69:30:e3:d6:82:05:
7e:3b:e9:57:87:bd:86:c3:39:aa:38:d9:71:d7:ca:35:89:da:
33:5f:90:fd:d2:c9:80:0a:a8:a4:3c:f3:26:bd:b6:59:8f:ef:
75:20:10:63:0c:d5:c6:dd:28:e7:1f:f0:e6:ff:bd:28:54:f5:
66:83:04:37:f9:a0:c7:26:37:6b:a2:16:23:17:b8:ef:af:21:
56:fe:4a:88:48:d0:ff:d2:ab:97:17:de:c7:e8:94:90:22:2e:
3c:10:ae:72:06:47:d6:f2:00:e9:30:c2:10:77:b3:c0:d0:5b:
d8:c5:d8:d9:2f:99:f6:d5:b3:83:38:35:02:22:c0:27:7c:47:
60:9f:34:6b:2b:ba:22:71:64:ef:00:20:51:f2:15:2c:db:51:
a2:d7:1b:a7:d5:21:b8:9d:d5:2c:16:e3:4e:ea:09:fb:a5:59:
c4:47:2e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:18 2026 by rpki-client