Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
File: AyHqOVCODhemUf6SrCnqOIMtC_8.mft (raw, json)
Hash identifier: wvNf1yW+HScwQ6QAn4wHvctWz2uHgQHWD6FY5VajSy8=
Subject key identifier: 9A:7A:29:B7:98:B7:89:6A:4D:1A:2B:78:2F:8A:40:D1:55:42:46:48
Authority key identifier: 03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
Certificate issuer: /CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Certificate serial: 019E303B9A76194779443CC02AC34E7B4E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
Manifest number: 17AE
Signing time: Sat 16 May 2026 10:01:12 +0000
Manifest this update: Sat 16 May 2026 10:01:12 +0000
Manifest next update: Sun 17 May 2026 10:01:12 +0000
Files and hashes: 1: 8UGI1s0WR4wlzQNu5QcJqIgdD6o.roa (hash: 0o0yTMQX8eIMkMe3RKQudDE1yMjJHai1D53A4eswsuo=)
2: AyHqOVCODhemUf6SrCnqOIMtC_8.crl (hash: PwAP2O0YnLYIlT6jGCbNQNCkXXORXusvjeygY/HF5Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:9a:76:19:47:79:44:3c:c0:2a:c3:4e:7b:4e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Validity
Not Before: May 16 10:01:12 2026 GMT
Not After : May 17 10:01:12 2026 GMT
Subject: CN=9a7a29b798b7896a4d1a2b782f8a40d155424648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:43:e9:0c:39:03:2b:25:60:69:40:5a:50:
2b:8c:39:e7:79:72:72:dc:ac:1b:f2:66:3d:94:83:
40:d9:1c:06:c5:31:9e:9a:87:00:4d:29:49:ec:bc:
9d:9b:16:27:97:d7:d0:d3:ed:6c:f7:40:45:9c:e2:
19:92:9c:2e:09:bf:ea:92:dc:06:fd:55:58:0e:50:
a6:ca:fd:94:b7:3d:7c:a4:59:59:43:1c:b6:1c:f5:
68:c4:68:f0:88:7e:1c:05:d3:ab:b1:54:f2:8a:f1:
32:32:19:87:c1:16:2f:48:c0:75:f2:0d:cd:bf:89:
f2:f8:c5:33:cd:21:06:fb:98:a9:b3:6a:cd:22:1b:
1f:c7:f5:74:ef:2e:fe:29:81:90:d0:3d:8b:e4:3a:
04:0c:93:2a:27:40:a4:1a:eb:15:e1:3f:31:e7:d5:
8e:1c:34:0d:9c:f3:c7:8d:2d:ef:b9:83:e1:56:b4:
ae:dd:1a:5b:9b:23:4c:52:bd:14:4c:71:69:27:1e:
00:2e:9f:18:b5:b8:9f:2b:1f:36:7d:5d:d5:40:bd:
c9:87:ae:39:57:72:dd:07:3d:f8:e2:62:da:88:36:
e5:ec:29:21:71:d6:6d:b2:9b:bd:31:a3:96:d0:22:
60:0b:ac:67:fe:7c:db:d7:fe:da:b5:35:00:b2:f4:
77:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7A:29:B7:98:B7:89:6A:4D:1A:2B:78:2F:8A:40:D1:55:42:46:48
X509v3 Authority Key Identifier:
keyid:03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ba:11:53:7e:6f:f8:34:85:d9:d8:18:36:80:45:f0:bd:6d:
86:39:5e:80:19:5a:a4:92:59:af:fe:71:5b:4f:14:b3:63:20:
0e:f0:ea:19:2b:c3:d4:b6:4d:78:99:57:62:ca:9c:76:c4:43:
e6:3a:34:74:b1:92:5d:ad:60:46:0c:63:36:14:f4:e7:0c:61:
ee:04:cb:74:b7:58:a8:52:63:1a:09:a9:3c:3f:3b:ff:c4:fb:
d6:2d:b0:35:3c:3b:72:1a:a4:6f:99:64:9a:63:c5:1a:58:8d:
a6:17:82:3b:7b:97:d8:a5:6f:4f:6c:a0:30:a7:fa:78:6b:81:
b0:7e:82:ee:41:14:83:8f:db:88:cf:94:86:94:d2:44:ac:36:
38:d1:5a:72:6f:33:ce:03:eb:73:06:4d:87:61:a6:0f:4f:8b:
c7:06:96:fb:dd:c2:d8:88:bb:11:38:09:10:1c:91:8e:1d:a6:
28:63:f6:e5:2d:6a:25:57:bc:97:2a:0e:5e:7c:aa:1a:81:e2:
45:df:f0:86:f6:87:4d:ab:ba:89:7b:12:d8:ce:8e:c2:24:90:
c2:aa:18:aa:59:49:20:94:3f:44:e7:bf:bf:c1:10:cd:af:fa:
7a:43:d7:33:7f:23:98:cc:e4:26:d2:17:3f:76:11:cc:88:c4:
1d:5c:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:41:56 2026 by rpki-client