Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier: AUZbxCduJ2r321kvGJJEDIcAIALee30xWIcG4XD178Q=
Subject key identifier: 06:2A:3E:11:BD:50:DF:52:7F:48:11:EF:B1:FF:BE:2B:52:4A:25:E7
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial: 01A000CA7EFA84288A9A68862E6E1E889111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number: 1268
Signing time: Fri 14 Aug 2026 15:01:05 +0000
Manifest this update: Fri 14 Aug 2026 15:01:05 +0000
Manifest next update: Sat 15 Aug 2026 15:01:05 +0000
Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: xdH9y5NY3U6tnN9nWmIWUdVad5fCD6IUSWrSDZldRrI=)
2: PgXrvWBADSv7xH4LgHKpTQQ0144.roa (hash: rmC8h6+zobbErP+gvycV1mNmmNbI0Zsk3t4WrqWuDNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:7e:fa:84:28:8a:9a:68:86:2e:6e:1e:88:91:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Validity
Not Before: Aug 14 15:01:05 2026 GMT
Not After : Aug 15 15:01:05 2026 GMT
Subject: CN=062a3e11bd50df527f4811efb1ffbe2b524a25e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:cc:b3:76:d4:4f:92:63:a8:a4:bc:e0:80:
47:a8:25:c3:ef:18:c4:34:5b:e6:81:b7:2c:c6:01:
4f:cf:5f:a6:22:44:8a:9b:73:65:35:f6:14:9c:3e:
c7:b5:fd:dc:07:b3:79:98:36:89:5c:93:ff:e9:32:
f6:bd:6e:fd:d4:67:00:b0:ae:23:f2:61:88:d6:20:
70:5f:c5:00:27:63:6d:b7:3a:38:d7:f8:a0:63:6a:
d8:ef:0e:31:6f:d7:dd:fc:30:ae:76:33:92:95:3e:
8b:82:32:6a:86:7c:08:0e:ed:d7:ca:66:ff:fa:5e:
fd:4b:4e:ff:ff:e8:d2:76:83:59:bf:5f:25:eb:96:
5e:2c:14:83:36:94:ed:69:00:11:2f:08:56:73:b8:
4e:97:80:72:f6:80:a2:10:63:51:d7:2a:28:20:07:
0d:59:22:4e:a3:43:b2:94:03:91:0c:f0:72:56:c7:
c8:99:4a:a5:5f:a3:ac:f5:66:a6:c7:84:ef:8f:de:
a8:cd:16:92:d6:81:75:8d:32:b1:a4:22:cc:11:9d:
a2:af:f6:47:82:9b:44:36:0d:65:7b:68:98:6c:84:
64:31:bd:d6:6c:9c:b1:d5:17:18:93:d7:d7:16:13:
da:e6:5d:3e:11:57:21:f4:5e:af:00:02:62:54:ba:
f9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2A:3E:11:BD:50:DF:52:7F:48:11:EF:B1:FF:BE:2B:52:4A:25:E7
X509v3 Authority Key Identifier:
keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3c:6f:7b:8a:ac:58:e5:19:eb:35:ef:0b:b2:bb:4f:7a:17:
41:4b:45:85:02:36:03:17:71:fd:8c:18:40:e0:14:12:d2:5d:
db:db:39:12:0f:7e:35:33:48:f1:72:e8:ec:80:a9:a1:de:75:
91:3c:11:0b:ed:3b:a3:89:a7:89:3a:65:d6:e5:e5:21:67:aa:
5c:5b:61:f2:26:7a:30:b3:88:8c:41:a5:f4:48:ef:b2:d2:1e:
d6:dd:29:bf:0f:7e:42:84:6b:8b:63:73:0e:49:fd:24:42:6f:
f9:c7:ee:40:6a:a5:76:05:2f:5b:4f:4e:46:42:37:91:d2:89:
c1:43:7b:63:49:c3:45:3b:f6:79:82:f4:42:f8:d2:8a:ea:04:
ce:43:8c:a5:39:e9:3c:3e:ed:a2:5b:f2:a4:2f:ef:bd:3c:b4:
e5:83:6d:f2:9b:c3:20:89:d3:a2:df:dd:a9:43:53:98:4e:38:
27:5e:44:62:2d:d8:6f:d0:4d:e7:ed:ef:c2:98:7c:b3:58:d1:
01:03:2d:8b:3e:3e:9a:78:60:06:4e:13:02:c5:65:5c:9f:61:
33:b2:36:b6:3f:a7:c5:f2:7a:65:7f:cd:8b:ca:fd:4b:f4:ac:
0b:a9:f2:42:a2:9b:25:48:66:f4:7e:bc:03:30:c7:ce:ca:bf:
19:e8:96:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAyn76hCiKmmiGLm4eiJERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOGIyMGZmMDk4ZTZiN2NiYzhiNmFmMGQ2ODAwNjVlNmI5
MDYwMGIwHhcNMjYwODE0MTUwMTA1WhcNMjYwODE1MTUwMTA1WjAzMTEwLwYDVQQD
EygwNjJhM2UxMWJkNTBkZjUyN2Y0ODExZWZiMWZmYmUyYjUyNGEyNWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMzMs3bUT5JjqKS84IBHqCXD7xjE
NFvmgbcsxgFPz1+mIkSKm3NlNfYUnD7Htf3cB7N5mDaJXJP/6TL2vW791GcAsK4j
8mGI1iBwX8UAJ2Nttzo41/igY2rY7w4xb9fd/DCudjOSlT6LgjJqhnwIDu3Xymb/
+l79S07//+jSdoNZv18l65ZeLBSDNpTtaQARLwhWc7hOl4By9oCiEGNR1yooIAcN
WSJOo0OylAORDPByVsfImUqlX6Os9Wamx4Tvj96ozRaS1oF1jTKxpCLMEZ2ir/ZH
gptENg1le2iYbIRkMb3WbJyx1RcYk9fXFhPa5l0+EVch9F6vAAJiVLr5oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYqPhG9UN9Sf0gR77H/vitSSiXnMB8GA1UdIwQY
MBaAFAGLIP8Jjmt8vItq8NaABl5rkGALMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVlzZ193bU9hM3k4aTJydzFvQUdYbXVRWUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNjliNDItMGY5ZC00ZjNjLWE5MzEt
OTEyN2Y0MjlhNDhkLzEvQVlzZ193bU9hM3k4aTJydzFvQUdYbXVRWUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hNjliNDItMGY5ZC00ZjNjLWE5MzEtOTEyN2Y0MjlhNDhk
LzEvQVlzZ193bU9hM3k4aTJydzFvQUdYbXVRWUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTxve4qs
WOUZ6zXvC7K7T3oXQUtFhQI2Axdx/YwYQOAUEtJd29s5Eg9+NTNI8XLo7ICpod51
kTwRC+07o4mniTpl1uXlIWeqXFth8iZ6MLOIjEGl9EjvstIe1t0pvw9+QoRri2Nz
Dkn9JEJv+cfuQGqldgUvW09ORkI3kdKJwUN7Y0nDRTv2eYL0QvjSiuoEzkOMpTnp
PD7tolvypC/vvTy05YNt8pvDIInTot/dqUNTmE44J15EYi3Yb9BN5+3vwph8s1jR
AQMtiz4+mnhgBk4TAsVlXJ9hM7I2tj+nxfJ6ZX/Ni8r9S/SsC6nyQqKbJUhm9H68
AzDHzsq/GeiWiA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:04 2026 by rpki-client