Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier: ZiIqFjKR1J/332/BAafKh6T5EVWu18ctHt2K58YBYxQ=
Subject key identifier: 85:C5:5C:8A:5F:CD:CD:C2:F1:60:AE:89:83:89:AC:CF:EA:52:E1:08
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial: 01A13F7059C2331DEC67B1A08F15856F228D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number: 130D
Signing time: Thu 15 Oct 2026 12:01:29 +0000
Manifest this update: Thu 15 Oct 2026 12:01:29 +0000
Manifest next update: Fri 16 Oct 2026 12:01:29 +0000
Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: zwmeS2xh9kJdCs7SWmzVP6/9u0Oe2MzrPmpsW+1YBTc=)
2: PgXrvWBADSv7xH4LgHKpTQQ0144.roa (hash: rmC8h6+zobbErP+gvycV1mNmmNbI0Zsk3t4WrqWuDNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:59:c2:33:1d:ec:67:b1:a0:8f:15:85:6f:22:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Validity
Not Before: Oct 15 12:01:29 2026 GMT
Not After : Oct 16 12:01:29 2026 GMT
Subject: CN=85c55c8a5fcdcdc2f160ae898389accfea52e108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:39:11:8c:b7:51:1d:7a:b2:7d:5e:01:84:
8e:8e:6a:c4:c2:a4:2d:6b:a7:08:53:2c:81:7f:09:
94:64:a2:51:7c:21:08:1d:62:90:0e:36:b2:3f:1a:
11:20:85:0d:11:da:2b:e8:0a:ae:95:a2:ee:bf:00:
b2:e4:d7:46:51:a9:89:2f:14:08:16:5b:01:ce:b8:
f9:d6:05:8c:6e:c8:7a:38:e4:4e:aa:33:10:58:ea:
fa:fd:8a:0c:94:bd:6e:1d:3f:87:a3:da:2e:b1:72:
27:21:7a:c7:d0:91:b0:c0:1e:e7:02:37:fc:97:66:
65:3a:d9:ce:64:a6:01:38:cb:50:04:41:04:eb:fd:
17:49:ab:ba:58:e5:24:6f:cc:21:c6:8f:26:cb:cd:
ed:1d:4e:f8:b8:9b:31:2d:34:c4:9d:09:4a:30:09:
e9:a0:a5:14:50:2c:5a:b8:b3:1a:9f:71:37:0e:ba:
96:95:f4:c8:79:23:53:72:4e:13:73:9d:14:96:21:
9c:0b:a0:f9:9d:35:46:da:de:0b:82:34:a8:cd:97:
b7:af:4a:30:31:13:fd:2c:fc:97:5d:c5:85:de:79:
fd:a5:b3:65:73:6d:d2:e6:bd:92:55:14:bc:22:8d:
cf:89:7d:91:7b:e1:ac:53:10:92:f7:b4:da:4d:ed:
62:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C5:5C:8A:5F:CD:CD:C2:F1:60:AE:89:83:89:AC:CF:EA:52:E1:08
X509v3 Authority Key Identifier:
keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:33:a0:11:8c:70:ab:9d:68:16:52:91:b2:05:7d:68:ea:3a:
0f:5e:5a:d4:fe:18:e8:24:c8:ef:0a:20:ff:a3:c5:a5:22:b9:
4d:ce:5d:28:a7:7b:7d:23:08:d2:ba:2c:3f:e6:1e:b0:42:7c:
c8:de:8a:88:84:e1:d9:87:a2:ac:e5:9f:2a:48:36:b7:b3:c4:
ed:fe:d0:c8:26:de:08:f7:66:82:b3:be:8f:8c:32:c2:71:99:
3b:58:6f:7a:5f:d8:4d:5f:d3:e9:f0:c3:29:dd:d9:73:a4:b6:
c7:65:aa:0d:a5:fd:c7:91:07:4f:06:57:eb:4e:3e:4e:53:e6:
f5:46:a6:0b:b9:fd:a1:b1:1e:77:4b:34:76:96:a9:de:07:10:
4d:f9:77:38:16:26:d7:2a:e4:45:96:c5:f8:bc:6e:c9:29:5d:
84:39:0e:bb:4f:b0:06:dd:e5:c4:64:43:f9:80:b4:b6:1a:bd:
85:01:0f:2b:39:05:8c:02:e9:a9:87:6f:5b:b2:e9:01:90:22:
7f:d9:70:f3:56:81:6b:f4:c7:71:fd:d8:1e:fd:f7:31:65:2f:
e7:b8:25:3a:79:85:18:31:98:64:2f:ce:b4:cf:e2:6f:13:72:
64:eb:8e:b0:fb:d8:57:5f:37:dd:cc:aa:f8:bd:0f:cf:3c:f3:
10:09:7d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 23:25:36 2026 by rpki-client