Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier: lhk2kZ3pwUfpyJNB2sBFLfi+LWuOMKtMznRBYI7qkrg=
Subject key identifier: 75:F8:D1:72:3B:F0:F2:3E:BF:73:1A:4B:8C:F6:06:F3:EF:A6:C9:FC
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial: 019E2F5FA90CB9B6F9C1E93042A98D223F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number: 1177
Signing time: Sat 16 May 2026 06:00:58 +0000
Manifest this update: Sat 16 May 2026 06:00:58 +0000
Manifest next update: Sun 17 May 2026 06:00:58 +0000
Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: 1OxKhrj/+WDjsjYH6X2JSJftnx12bCMlQjNgr77hzck=)
2: PgXrvWBADSv7xH4LgHKpTQQ0144.roa (hash: rmC8h6+zobbErP+gvycV1mNmmNbI0Zsk3t4WrqWuDNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:a9:0c:b9:b6:f9:c1:e9:30:42:a9:8d:22:3f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Validity
Not Before: May 16 06:00:58 2026 GMT
Not After : May 17 06:00:58 2026 GMT
Subject: CN=75f8d1723bf0f23ebf731a4b8cf606f3efa6c9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:28:8f:4e:64:42:df:81:d5:66:ec:82:29:52:
a4:20:1c:dc:73:4f:e1:36:ae:ab:b6:96:1c:e6:c4:
83:ac:d1:0b:f5:3e:5f:2a:03:e5:3b:00:f5:8d:bc:
ac:2c:4a:97:38:ac:3c:9b:44:cc:c6:b6:78:47:34:
eb:d5:93:96:d7:81:4b:d3:db:1e:b0:37:4a:e1:0b:
67:5a:78:5b:9f:6b:d8:4e:d9:67:09:0d:ae:56:50:
a5:0b:5f:74:bf:dd:d2:71:e0:0b:ab:5e:0e:6b:85:
5e:ff:09:fd:11:9e:84:d5:ca:72:6c:d1:b4:9b:44:
4a:7a:99:c8:ea:95:19:85:25:88:47:97:5d:30:4d:
5a:a8:d3:cc:c9:6a:69:16:76:d5:c0:40:0d:71:69:
54:8e:c3:69:c9:9b:b1:3d:ff:48:5a:a9:c9:12:a1:
a6:3c:1a:0f:78:f5:0a:c7:b5:4b:00:e3:e4:c6:53:
93:c4:9f:58:14:84:fc:a6:4c:dc:9f:b7:27:70:18:
6c:c0:e3:ad:6f:a5:0c:d0:7d:d5:39:e4:5c:06:13:
91:e4:65:a9:8a:c8:df:e8:d7:cb:26:3c:a6:69:08:
e2:0b:be:f3:d9:2c:56:fc:fa:cc:e4:46:d1:cb:9b:
8f:8d:bd:a4:c9:54:b3:b1:16:4b:31:c6:3d:01:4b:
53:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F8:D1:72:3B:F0:F2:3E:BF:73:1A:4B:8C:F6:06:F3:EF:A6:C9:FC
X509v3 Authority Key Identifier:
keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:16:f0:ba:06:27:08:87:60:5a:9d:16:fc:4b:01:62:b9:34:
c0:21:00:e4:f3:70:a7:55:95:ed:f4:04:e9:97:79:80:bd:ac:
34:55:24:49:7f:5c:50:e4:18:f0:95:81:99:54:5c:77:54:32:
2b:2e:e7:d6:b4:e1:45:4c:c4:92:7e:e4:22:d5:00:8f:bb:6f:
b6:41:a7:a7:a7:97:39:15:65:4f:2b:4d:c0:7e:2c:dd:b9:3f:
99:18:76:04:9f:9d:03:23:e1:b7:8c:51:98:c2:e5:84:b6:29:
10:d3:78:28:10:5c:98:df:1b:d3:d4:a7:a5:cf:ff:36:a6:07:
88:ff:10:86:49:b8:3b:3c:42:e3:49:14:d2:28:7d:53:ec:71:
b4:2c:70:9b:42:d0:33:95:d9:d8:b7:e1:79:55:e7:66:cf:37:
4e:89:b1:42:c7:8e:3a:11:66:a3:e6:31:5c:99:a8:ed:29:ed:
d3:14:11:ff:35:99:89:0d:6e:92:ae:73:d0:84:d0:e4:11:eb:
cf:7d:b6:24:a2:e9:fb:53:96:33:ec:46:9d:1a:e5:28:fc:9c:
8d:00:b3:3b:fb:af:35:25:5e:7b:27:91:5d:2e:9e:22:93:b3:
d1:75:bc:5d:da:81:d7:3c:9a:00:39:66:00:6b:c3:d7:90:ea:
33:dc:1c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:56 2026 by rpki-client